Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF29CBB815F211F0A00799FE6DB8BCC6.roa
File: DF29CBB815F211F0A00799FE6DB8BCC6.roa (raw, json)
Hash identifier: FUQC5wZxHyto1NF0HggqtosXO/AjHbHZNYf6Ie4gL6I=
Subject key identifier: 12:EA:04:FE:9B:6F:B6:C0:A1:E1:3C:3A:B2:DC:97:85:5F:46:08:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF29CBB815F211F0A00799FE6DB8BCC6.roa
Signing time: Thu 10 Apr 2025 10:02:12 +0000
ROA not before: Thu 10 Apr 2025 10:02:08 +0000
ROA not after: Sat 10 May 2025 10:02:08 +0000
asID: 395886
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96455 (0x178c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 10:02:08 2025 GMT
Not After : May 10 10:02:08 2025 GMT
Subject: CN=67f79724-fe9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2f:80:79:84:35:b2:0b:6d:09:ab:b9:28:34:
41:6a:9e:b1:8d:20:65:9a:e1:e1:4f:f4:b2:53:10:
4e:74:15:b2:4d:0b:94:89:86:76:c4:98:bf:01:f3:
1a:ac:ec:32:14:21:91:60:d1:4c:b1:a0:c2:a7:8c:
ed:c1:81:41:e3:7b:e1:b3:a8:05:5b:5e:69:13:a2:
da:3c:3d:82:bd:5f:b1:ee:5e:2f:97:63:af:fa:45:
3d:9c:9a:58:d5:2a:f7:a9:c3:00:ba:7c:10:45:e0:
f3:a5:4b:b6:44:b6:15:16:f9:ed:23:0a:8b:78:40:
2c:eb:54:e8:4a:09:9d:ec:05:35:b5:f8:68:9a:fd:
f3:67:28:fa:3c:84:f9:e0:2a:aa:25:67:17:2e:e0:
6d:6b:2f:93:04:98:81:65:5b:26:a4:68:74:4e:fa:
a4:7a:2a:a1:da:34:9d:c8:ab:32:e4:94:ff:09:a6:
0a:c7:f6:26:6e:9d:d9:d2:95:e6:ca:d6:8d:87:73:
5e:93:41:cd:35:d7:89:19:f0:50:56:07:4e:95:2c:
ce:ea:66:32:aa:88:89:87:b2:d8:82:c5:17:33:91:
8c:1c:e5:13:fd:20:1c:60:01:a0:68:5b:a6:14:1c:
24:72:22:54:4f:e9:27:36:0f:ed:8b:0b:b0:ac:22:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:04:FE:9B:6F:B6:C0:A1:E1:3C:3A:B2:DC:97:85:5F:46:08:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF29CBB815F211F0A00799FE6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:2f:77:b8:b6:8c:60:ed:76:2a:de:cc:f5:4a:a6:0a:31:82:
7d:c0:95:43:62:6e:0a:61:e3:e2:a6:81:59:0e:86:55:3a:c9:
94:df:27:4b:fa:1f:a0:37:e4:3c:43:3f:49:d2:b3:60:44:35:
5f:33:25:06:15:66:cf:33:58:70:a2:d6:8b:93:cb:17:9a:34:
0f:5c:c8:db:13:5b:e9:0a:f7:93:ff:76:6b:8c:79:3b:a5:c7:
74:88:9e:fd:67:8f:d2:93:47:fd:38:ec:8e:77:bb:b0:f4:86:
f3:d2:58:78:cc:c9:54:2e:a1:03:72:58:53:14:52:09:1e:cc:
59:07:e7:64:eb:9d:c5:2b:de:21:6f:de:6b:61:36:8d:00:dd:
10:e5:05:ac:ef:99:71:64:c9:ea:eb:e8:f0:7f:0a:1e:47:21:
74:aa:db:a4:26:61:4c:b1:02:17:3c:4b:2d:ab:60:fa:83:64:
cc:60:86:dc:18:9c:42:87:42:f1:b9:f3:ce:0b:05:41:07:af:
21:70:6f:bd:78:2f:be:7a:66:6f:36:7d:1d:3f:7b:9b:39:3c:
c2:09:4a:5e:7f:6f:b1:26:87:18:ab:5f:52:c2:af:07:9f:e8:
37:68:72:ed:aa:0f:6e:94:be:10:b9:0e:8b:83:36:78:fd:57:
65:ce:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:10:37 2025 by rpki-client on console.sobornost.net