Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9E7EBB4109111F0BCCC935E762E951A.roa
File: D9E7EBB4109111F0BCCC935E762E951A.roa (raw, json)
Hash identifier: Z/ah6C3kLm/VFEwdMeHwxvcf7+6TFb9d6mAJhWnQFZI=
Subject key identifier: C7:3B:A0:F0:D2:14:D9:82:5D:F8:BC:47:30:6B:DA:9E:A0:5E:9B:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01779D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9E7EBB4109111F0BCCC935E762E951A.roa
Signing time: Thu 03 Apr 2025 13:45:06 +0000
ROA not before: Thu 03 Apr 2025 13:45:02 +0000
ROA not after: Sun 03 Aug 2025 13:45:02 +0000
asID: 150008
IP address blocks: 154.206.17.0/24 maxlen: 24
154.206.18.0/24 maxlen: 24
154.209.252.0/24 maxlen: 24
154.209.253.0/24 maxlen: 24
154.209.254.0/24 maxlen: 24
154.209.255.0/24 maxlen: 24
154.210.213.0/24 maxlen: 24
154.210.224.0/24 maxlen: 24
154.210.225.0/24 maxlen: 24
154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
154.210.228.0/24 maxlen: 24
154.210.229.0/24 maxlen: 24
154.210.230.0/24 maxlen: 24
154.210.231.0/24 maxlen: 24
154.210.232.0/24 maxlen: 24
154.210.233.0/24 maxlen: 24
154.210.234.0/24 maxlen: 24
154.210.235.0/24 maxlen: 24
154.210.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96157 (0x1779d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 13:45:02 2025 GMT
Not After : Aug 3 13:45:02 2025 GMT
Subject: CN=67ee90e2-49df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:4d:02:64:1c:ef:50:20:d9:77:66:53:ec:
8e:07:f0:55:d3:6e:56:86:9c:18:19:b4:c2:03:1d:
c9:ab:81:95:94:a8:85:cc:34:c0:f2:2b:26:fa:f3:
22:07:d1:8a:a5:1b:96:80:76:62:cf:4a:5c:fc:94:
5c:d3:82:13:d4:e4:8b:64:6b:31:d8:99:78:fa:d9:
87:45:74:80:18:22:85:df:b3:ca:d3:d0:94:ba:aa:
27:44:75:ec:1b:eb:29:35:bb:48:ed:55:12:15:64:
2b:29:52:21:eb:16:5e:a3:cf:55:c8:f4:4c:8b:94:
a9:f2:59:b6:39:6b:40:6f:6a:17:38:36:02:97:aa:
13:7e:a6:0a:e8:c7:79:24:aa:89:c7:db:42:7d:0f:
55:c1:da:f5:10:9b:bb:23:3e:86:eb:aa:c6:57:51:
b0:cd:c4:78:70:84:71:d4:8f:57:39:3a:e3:32:14:
05:ed:f3:9b:4c:8e:3a:e1:9f:dd:a9:f2:83:73:0a:
8c:bf:2b:be:ea:59:e5:4c:a2:5d:b8:e5:dd:f7:3f:
47:68:0c:51:f1:a7:c5:b9:a6:5f:79:89:60:98:08:
90:ce:61:87:36:1b:8a:1d:61:7f:1c:d9:45:5f:72:
6e:9d:ac:1a:b5:ec:00:0e:39:c3:4d:51:93:6e:65:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:A0:F0:D2:14:D9:82:5D:F8:BC:47:30:6B:DA:9E:A0:5E:9B:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9E7EBB4109111F0BCCC935E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.17.0-154.206.18.255
154.209.252.0/22
154.210.213.0/24
154.210.224.0-154.210.236.255
Signature Algorithm: sha256WithRSAEncryption
81:42:2c:0c:9a:26:77:60:95:96:95:45:d9:00:1a:bf:6b:ba:
09:53:1a:94:6c:70:1a:ee:22:c2:8a:67:d4:15:a2:99:4b:30:
67:e6:cf:4e:76:78:6a:ee:74:06:f5:2f:7b:a3:65:74:cb:a1:
97:bc:24:fc:6f:42:91:5f:98:74:9c:7b:98:92:5e:f6:10:6e:
93:f2:31:32:c7:19:78:aa:1e:17:7b:f3:40:fe:a1:b2:1e:c7:
ec:ce:13:47:5e:5f:be:ca:56:41:de:a2:92:2a:4b:57:d4:ab:
dd:01:ba:df:35:22:43:85:ad:2a:64:05:9d:c4:a0:81:b5:3a:
d0:c8:28:b4:b4:e1:bb:c4:b4:0d:81:e8:ff:2e:30:03:bc:29:
76:c7:07:b5:c1:54:7b:5a:4d:bc:67:fb:a2:07:6e:c6:e3:96:
14:5f:3c:5b:94:72:3d:6c:c9:66:ed:cd:15:2d:24:8a:fb:19:
e8:93:c3:8b:8f:b7:8c:61:e6:9c:2e:44:14:91:46:0e:42:dd:
cd:a0:c9:50:7e:82:73:1f:af:d8:1d:3b:95:45:c5:92:da:b0:
0f:53:54:4a:7c:f7:72:05:71:36:29:b4:3a:75:6c:78:12:75:
23:30:86:fe:5d:f8:48:8a:87:05:37:e8:83:ae:34:40:e6:f0:
45:e3:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:57:44 2025 by rpki-client on console.sobornost.net