Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE23EC4A1DD011F08018AFEDDAE4EC9C.roa
File: DE23EC4A1DD011F08018AFEDDAE4EC9C.roa (raw, json)
Hash identifier: 7kznfGaTVugusLbPoIJvFs7gfJ+OJ0X/t3Zcg42DGrk=
Subject key identifier: B7:67:6E:FB:61:1A:61:B3:22:2C:C4:7E:90:64:13:7D:7D:D8:FE:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE23EC4A1DD011F08018AFEDDAE4EC9C.roa
Signing time: Sun 20 Apr 2025 10:18:57 +0000
ROA not before: Sun 20 Apr 2025 10:18:52 +0000
ROA not after: Mon 26 May 2025 10:18:52 +0000
asID: 9009
IP address blocks: 154.199.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96800 (0x17a20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 10:18:52 2025 GMT
Not After : May 26 10:18:52 2025 GMT
Subject: CN=6804ca11-c470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:04:38:b9:ab:3c:0c:48:c1:60:32:01:1b:
09:f4:be:b7:6e:bb:f5:01:89:0e:b8:92:ca:9b:b8:
43:e0:08:52:a2:f3:03:fa:2b:59:c7:20:0e:93:0b:
de:49:b7:31:3c:6b:11:2f:2b:90:03:1e:e3:80:37:
e3:07:a7:3d:11:78:68:7d:47:c1:e7:9f:85:96:ce:
9a:72:02:18:1e:40:69:86:d3:ec:38:49:b2:14:94:
96:86:fe:1a:c3:ac:05:5b:3d:42:f9:90:dc:a8:03:
d1:af:78:d2:c0:ab:1c:aa:55:5d:c2:d5:c5:06:85:
da:e3:8e:55:95:1d:c0:3d:80:b2:60:4a:7e:c7:43:
72:dc:3f:b1:00:18:af:e3:cf:03:d0:51:da:44:e1:
90:1f:02:9a:24:70:f9:fd:98:76:42:a4:91:9e:85:
b6:8f:6d:7b:37:bd:7f:16:25:93:54:e1:5e:1f:c2:
7b:c8:ae:f7:81:b6:3e:cf:f5:2a:9e:95:16:fc:f5:
55:fe:2e:a5:f9:a7:35:16:e9:64:21:0f:c2:c8:34:
2f:00:25:cb:89:3d:12:2c:4a:71:c1:1e:bc:28:7c:
36:80:58:4a:8d:47:6c:be:1a:37:cf:0c:68:40:89:
e5:61:96:34:ed:25:7b:de:ce:be:36:6d:24:46:63:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:6E:FB:61:1A:61:B3:22:2C:C4:7E:90:64:13:7D:7D:D8:FE:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE23EC4A1DD011F08018AFEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a8:c5:f9:e8:75:b0:4c:5e:b6:e8:19:fa:86:09:c7:55:85:07:
7b:dc:8f:12:d9:ba:bd:c9:e3:0d:66:c0:ae:22:5e:94:bc:eb:
e2:ce:5f:b8:d3:ec:00:c2:b4:3d:ef:b5:05:54:ac:de:61:76:
fe:48:67:77:36:69:1f:59:f2:c2:5c:e8:bb:1e:f5:5c:55:7d:
d0:e6:df:40:1d:ad:ca:53:fa:ab:86:55:8b:4e:99:4a:28:d1:
20:44:d0:0c:09:d2:b5:0f:07:45:eb:8f:25:6b:5e:57:85:85:
b5:13:8a:ff:ff:ab:48:c7:2e:e0:b6:6a:d2:82:9e:27:be:d0:
02:06:11:b8:10:76:cd:4b:24:65:5e:c4:95:3f:77:ad:e2:02:
61:c5:a8:d6:72:fc:82:a6:ce:dc:a0:8d:27:ee:14:86:60:95:
5a:27:06:43:14:ec:d9:e7:40:a5:c0:f5:46:ab:60:38:f5:7b:
e2:1e:79:6a:48:4e:f0:d6:d7:e3:cc:3d:cf:47:7c:7d:3b:34:
71:a1:c3:11:87:d8:f0:ad:b9:a1:02:37:aa:f7:01:57:2a:c7:
36:3b:3e:d6:a9:0c:a1:d1:df:28:72:f8:e1:b5:0f:c3:b3:45:
a7:ab:9d:27:d0:7d:6e:ef:53:cf:9e:92:8c:74:bc:6d:87:33:
9d:77:86:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:42 2025 by rpki-client on console.sobornost.net