Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD8FDAEE1F6211F08A5620F0DAE4EC9C.roa
File: DD8FDAEE1F6211F08A5620F0DAE4EC9C.roa (raw, json)
Hash identifier: wquTsHbEctNdAz7QCzudGrR3HLQyX4qjLaXsgDwCKZM=
Subject key identifier: CA:CC:E6:0E:20:B0:D1:B7:D7:39:E9:2D:88:14:C6:AE:D9:A1:91:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD8FDAEE1F6211F08A5620F0DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 10:16:34 +0000
ROA not before: Tue 22 Apr 2025 10:16:28 +0000
ROA not after: Thu 29 May 2025 10:16:28 +0000
asID: 59642
IP address blocks: 154.83.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96912 (0x17a90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 10:16:28 2025 GMT
Not After : May 29 10:16:28 2025 GMT
Subject: CN=68076c82-36b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:32:88:86:71:04:7e:e2:17:95:ab:07:4b:33:
53:b5:f4:49:da:b1:c0:36:37:48:e3:3c:cd:bc:ea:
a1:c4:cd:88:53:ab:68:b9:89:19:04:69:50:f4:de:
bb:7a:94:e4:2f:b2:ee:a6:68:d4:19:df:ff:f1:a7:
cb:06:fd:df:16:ce:31:85:3e:87:ae:9d:10:53:e2:
45:d4:a0:0c:fd:c3:ab:65:6c:cb:80:7f:1a:d2:59:
fc:4c:42:42:f8:b5:95:09:eb:32:dc:12:73:fd:33:
17:b8:ce:03:4c:8e:50:50:c0:a4:05:86:01:76:80:
dc:e4:82:84:ed:70:eb:b5:21:5f:c9:dc:34:0f:4e:
ed:06:db:e1:bb:27:51:2d:29:e2:03:e3:a4:94:a5:
25:57:65:17:75:8b:87:40:d0:1a:8b:06:dc:20:25:
09:6c:02:54:47:3c:ec:2a:66:3d:f3:16:08:20:9e:
ad:13:00:c2:1f:89:41:91:2b:54:9d:07:2a:c3:3f:
02:ce:0a:74:11:1c:2a:39:70:3a:a2:77:16:3d:ff:
de:46:d8:b5:31:3d:79:95:39:e5:33:e6:5e:9a:57:
eb:47:10:02:d8:7e:90:1d:07:5b:f1:85:27:74:35:
b4:45:63:54:6c:ae:7e:44:7e:5d:2b:c3:53:ee:0e:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CC:E6:0E:20:B0:D1:B7:D7:39:E9:2D:88:14:C6:AE:D9:A1:91:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD8FDAEE1F6211F08A5620F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:23:59:26:63:51:b2:9d:f5:af:dc:d0:c3:7f:81:de:c9:7c:
b5:ba:c3:ad:bf:43:50:42:dc:8f:97:79:3c:d0:41:57:fd:f8:
c5:af:d8:4d:59:6d:f4:a5:f9:e9:7f:9f:b0:7e:1b:ae:d3:e5:
76:51:79:e8:e3:fa:d3:14:d0:3c:32:4f:f2:36:40:81:84:8e:
b0:60:ac:11:31:dc:71:3b:10:3b:b6:ba:60:dc:a1:6c:5c:bf:
cf:7e:46:80:91:60:f0:cf:0d:51:75:71:a6:4d:f7:8b:76:86:
95:e9:6e:09:5d:ac:1e:3a:6d:08:11:ec:3a:bc:e0:ae:9f:c7:
0d:a0:96:58:d7:48:f6:02:06:64:5f:d5:ea:6d:21:92:f1:eb:
a4:e0:11:bb:71:4c:57:8e:76:28:45:ef:e6:99:a2:cd:aa:1e:
13:1f:57:d1:b6:60:92:c8:83:3c:11:fb:6f:ce:4a:f1:a1:4d:
5f:44:bc:63:94:52:3c:98:8a:fc:44:1d:d5:d8:e0:35:fa:45:
e6:15:f8:77:4a:18:7f:fb:85:ae:94:61:8c:6b:a2:69:61:21:
3c:64:a6:9c:54:2f:e3:5d:84:4b:02:65:c4:c9:c5:5b:ea:0b:
dc:fa:cf:71:2a:ae:0c:fa:39:52:94:56:d6:ea:7e:c2:4b:be:
68:ec:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:41 2025 by rpki-client on console.sobornost.net