Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF57214244C11F0BC9353CBDAE4EC9C.roa
File: DAF57214244C11F0BC9353CBDAE4EC9C.roa (raw, json)
Hash identifier: qdqjyUMidfYOpXY2VhM4NBEyljml7wYlJttBX36ppLg=
Subject key identifier: 43:65:90:A1:30:52:A9:CB:30:29:86:21:CE:A7:41:CF:81:C1:56:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF57214244C11F0BC9353CBDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 16:21:36 +0000
ROA not before: Mon 28 Apr 2025 16:21:32 +0000
ROA not after: Wed 04 Jun 2025 16:21:32 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97321 (0x17c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 16:21:32 2025 GMT
Not After : Jun 4 16:21:32 2025 GMT
Subject: CN=680fab10-7d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:2c:13:63:22:86:67:68:80:a4:7b:0e:eb:
55:71:b2:eb:ed:de:d5:1f:7d:a1:79:ee:57:30:df:
47:3e:15:ff:51:1a:73:62:a4:e0:e0:53:f0:8b:69:
21:82:94:f4:e3:6d:1f:59:12:3f:29:bc:48:03:33:
36:94:ba:72:2d:38:c9:e8:5e:c1:36:2f:12:5a:f0:
97:2b:d0:09:0d:8f:b3:31:3a:c3:dd:c2:6f:c8:cb:
15:8d:53:39:2b:4e:18:ea:b8:b0:54:6a:d9:60:61:
e4:7a:0e:6e:f4:ca:8d:5a:05:44:5b:86:f6:35:d4:
86:70:13:4e:12:2a:54:6e:4c:9a:89:0f:48:19:b1:
d5:6f:05:58:ce:32:69:5c:93:54:ae:c3:59:83:6a:
ce:a2:0d:23:b1:c6:4d:91:00:1c:aa:fd:ae:df:b9:
82:d7:5c:22:ea:6d:82:0d:e5:25:a4:db:2f:8a:88:
b2:35:f0:4a:33:82:2c:0d:3b:d1:0e:8e:b0:01:2a:
75:a7:87:68:69:54:72:d3:09:c2:e3:61:21:ba:1f:
c9:ff:6e:c3:66:89:84:65:f2:f4:2f:43:5a:ad:84:
fc:1d:26:8e:26:f1:b3:0f:7d:5e:7a:30:81:37:55:
53:52:2e:b3:07:14:5e:08:92:15:f5:05:26:78:ec:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:90:A1:30:52:A9:CB:30:29:86:21:CE:A7:41:CF:81:C1:56:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF57214244C11F0BC9353CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
34:17:10:d1:5b:44:6c:b5:ce:ae:28:38:ff:b3:d3:8c:a9:72:
49:a2:c2:a5:bd:81:ec:cd:b8:a6:a7:88:fb:75:a2:90:03:15:
0e:5a:6b:dc:4e:c1:26:59:8b:fa:32:6d:b7:69:b2:f1:b1:09:
73:b3:42:69:bd:10:7d:26:3a:40:83:9d:77:40:93:04:6b:f8:
99:43:6b:55:e6:46:94:7a:2f:fa:07:83:70:d1:8c:5f:9a:aa:
76:2c:6d:e1:e2:ca:8d:6f:93:8f:7d:fe:bb:10:11:17:cc:04:
c0:8e:5f:86:30:34:51:f0:cf:25:d3:41:38:f3:74:96:e7:62:
c6:04:41:b7:7f:6f:8e:a8:7b:f8:af:cb:ae:64:a8:31:f1:83:
93:78:fe:ff:0f:40:ee:5b:0e:ab:73:c2:27:0d:2f:33:bf:af:
ab:38:cc:53:5b:51:87:41:a7:10:f4:0e:19:3a:e6:08:43:d8:
5a:79:a9:3c:9c:f3:ea:4e:5c:1d:4e:2b:cd:a4:9e:3a:7c:31:
c9:55:07:87:80:6f:02:3f:9a:5e:08:35:78:00:be:ef:6e:97:
86:f5:d0:32:d4:91:c1:0f:6c:c2:8e:1e:e5:bb:e2:dd:24:24:
80:77:44:03:16:ee:d1:81:5f:cf:6f:b2:8f:70:11:bc:af:01:
db:65:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:57:44 2025 by rpki-client on console.sobornost.net