Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D976C5601F5F11F0A354C7DBDAE4EC9C.roa
File: D976C5601F5F11F0A354C7DBDAE4EC9C.roa (raw, json)
Hash identifier: sEcyjs9TxqYzU25ZkAmpRn/z+E21jsRRj51SEodEOjg=
Subject key identifier: F9:1E:E6:2A:3B:D4:7D:13:D9:AD:A0:E6:CC:4C:7A:B8:C1:81:A4:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D976C5601F5F11F0A354C7DBDAE4EC9C.roa
Signing time: Tue 22 Apr 2025 09:54:58 +0000
ROA not before: Tue 22 Apr 2025 09:54:53 +0000
ROA not after: Thu 12 Jun 2025 09:54:53 +0000
asID: 57043
IP address blocks: 154.83.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96910 (0x17a8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 09:54:53 2025 GMT
Not After : Jun 12 09:54:53 2025 GMT
Subject: CN=68076772-c302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:a9:a3:56:db:78:14:d1:6f:bc:68:07:98:
85:36:0a:c8:38:69:40:95:1d:f9:8c:e5:a6:86:cd:
aa:0e:7a:3c:49:4c:e8:21:a0:94:32:25:0e:02:11:
da:91:75:58:82:f3:a7:82:30:80:00:b0:f9:7f:e1:
aa:3c:51:6b:65:6c:f2:f6:3f:36:6f:07:c7:39:d8:
5a:40:e4:98:86:f4:62:f9:80:d9:c4:7b:48:6c:93:
84:7d:50:49:d0:2f:e6:af:ae:36:07:b6:a0:dd:ae:
82:d7:ed:17:ca:ef:24:d0:c1:50:6c:da:09:e1:b8:
de:de:b8:74:90:4b:02:7c:f7:c2:91:b9:13:32:9c:
51:16:dc:05:ba:23:bc:88:9d:d6:92:10:ff:f3:83:
c3:be:1c:f3:a0:7b:58:58:42:23:96:c0:80:64:12:
d1:56:a8:44:3f:fb:87:34:bf:ae:83:54:af:f2:9a:
fe:b4:ad:2d:47:1a:e2:4c:45:72:58:c2:dc:48:22:
c3:47:cd:53:5b:55:52:ee:ad:d3:3a:33:73:e5:bc:
e3:20:2a:13:3c:12:65:d2:e4:bb:dd:95:a5:b5:0f:
98:69:5d:2d:ff:14:07:d4:b5:4f:69:7c:98:23:a5:
b1:8c:29:19:46:83:c6:01:aa:34:74:3e:b8:c4:25:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1E:E6:2A:3B:D4:7D:13:D9:AD:A0:E6:CC:4C:7A:B8:C1:81:A4:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D976C5601F5F11F0A354C7DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.129.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fa:72:dd:18:b3:42:8e:c1:b7:84:d8:5b:90:58:7b:28:a5:
e1:cb:64:71:f7:88:a4:28:05:57:5c:b1:ce:99:cc:e8:9a:15:
8d:a2:1a:68:31:b8:fe:88:a8:15:a5:c2:91:1e:b0:96:35:d8:
e5:b1:84:1d:aa:80:99:3b:69:8b:f1:f1:08:89:74:98:58:f0:
d6:d7:a0:73:70:ca:92:46:15:8a:8a:47:5f:78:65:ca:6d:24:
8e:f4:1a:4b:59:98:a5:49:e3:7d:a9:9b:e5:8b:68:59:9c:94:
15:5d:a8:4c:d7:74:e2:b1:3b:2b:d1:23:c8:60:81:cb:38:ea:
84:df:69:2a:50:2d:61:b7:a1:f9:ed:b8:91:13:7d:5c:c6:30:
6e:ab:40:09:38:27:ba:47:02:91:e5:44:57:36:fd:25:91:76:
84:38:21:aa:16:4c:cc:c7:da:f4:b7:76:eb:1d:06:85:36:b3:
6d:34:58:ef:e4:7d:81:36:72:de:b8:12:49:f6:5c:26:a0:b7:
fd:86:60:9e:b8:97:46:a1:64:65:f0:ba:a0:89:01:cb:52:77:
7d:ad:1d:93:ae:73:26:dc:15:28:bb:d8:e6:4c:e7:15:21:e5:
ba:b8:36:2f:ac:4a:9d:03:29:98:5c:1e:10:96:d7:c3:a6:94:
90:a5:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:38 2025 by rpki-client on console.sobornost.net