Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E16935BA245411F085278E80DAE4EC9C.roa
File: E16935BA245411F085278E80DAE4EC9C.roa (raw, json)
Hash identifier: juwbmoMBBroRswcSB+w0vG8Q30gw//2/0BWXu7qNJkU=
Subject key identifier: CC:88:B5:03:B0:B7:5F:36:92:D7:AB:F4:6A:D2:1A:71:1E:64:82:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E16935BA245411F085278E80DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 17:19:03 +0000
ROA not before: Mon 28 Apr 2025 17:18:58 +0000
ROA not after: Wed 04 Jun 2025 17:18:58 +0000
asID: 202656
IP address blocks: 154.219.22.0/24 maxlen: 24
154.219.23.0/24 maxlen: 24
154.219.25.0/24 maxlen: 24
154.219.26.0/24 maxlen: 24
154.219.27.0/24 maxlen: 24
154.222.40.0/24 maxlen: 24
154.222.41.0/24 maxlen: 24
154.222.42.0/24 maxlen: 24
154.222.198.0/24 maxlen: 24
154.222.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97337 (0x17c39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 17:18:58 2025 GMT
Not After : Jun 4 17:18:58 2025 GMT
Subject: CN=680fb887-9c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:94:6c:ce:6c:31:6c:f3:bd:cf:57:0d:1b:
e4:4e:68:33:ce:51:cb:0b:c7:b0:ee:a6:00:8d:be:
75:9a:28:5c:b6:3b:68:20:d5:ff:52:f5:5e:d6:d7:
6e:c6:17:55:61:3c:4e:17:2a:43:6e:65:00:27:f5:
69:68:70:d5:e4:3d:c2:06:aa:f2:1e:df:f3:ca:a5:
f2:69:2f:1f:85:db:f7:73:77:72:e9:fe:8c:91:4b:
22:e2:30:98:cc:9d:46:9f:73:20:31:5e:e6:ce:f3:
45:2e:31:70:b9:83:a9:93:c8:23:80:cb:70:c1:22:
0a:a0:f6:ba:7c:ff:02:e2:2a:a7:da:cd:ec:53:06:
6e:b4:10:00:a4:83:d3:2d:68:77:80:8a:04:06:81:
3d:85:64:61:da:47:6b:68:19:08:3c:49:eb:98:1b:
9e:32:ca:3e:93:13:3e:3e:d0:12:f2:13:56:01:1f:
a0:bc:30:04:8f:b8:9e:65:84:6d:6f:77:65:ae:0f:
59:96:b0:7b:57:52:32:36:e9:44:85:13:33:be:36:
1b:25:a0:59:b9:7d:f8:1f:22:6c:76:da:c3:35:5d:
ce:60:e2:4c:55:98:31:7f:91:a9:c9:0e:db:67:32:
41:cb:6d:c9:5b:8a:27:80:08:75:1c:07:81:84:a3:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:B5:03:B0:B7:5F:36:92:D7:AB:F4:6A:D2:1A:71:1E:64:82:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E16935BA245411F085278E80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.22.0/23
154.219.25.0-154.219.27.255
154.222.40.0-154.222.42.255
154.222.198.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:30:6c:7c:8b:33:cd:4e:69:ec:65:57:d6:4c:b8:5a:1c:b7:
17:bc:d0:48:7e:0d:4f:ac:f7:3f:34:e2:04:1a:2a:93:70:08:
cc:b7:dd:4c:38:87:14:e4:e5:51:06:1f:0f:8a:b3:db:a2:8e:
4f:88:fd:a8:fe:ea:16:21:b9:66:f7:cd:02:0a:13:85:0c:39:
1b:ed:8c:46:b8:d3:4e:a7:2b:27:e8:d1:52:33:df:2a:76:f2:
55:c4:f5:f8:e4:66:a4:03:b0:cd:59:26:53:54:95:fe:77:00:
47:b4:48:35:95:0a:d2:fe:09:f2:ed:d3:fc:2d:53:88:5f:5e:
1e:d2:e9:26:a5:0d:90:f3:b3:23:91:12:ce:0c:2b:fe:58:c6:
3a:c8:57:f7:d0:ea:cf:b5:ed:19:87:e7:d0:d8:d9:97:58:ae:
cf:0a:1f:f6:86:91:70:f4:9f:87:6b:26:49:26:68:fe:9a:f8:
85:b2:ee:92:29:92:8e:64:fb:a5:ed:c6:b4:88:61:a7:10:d7:
03:1a:77:0c:fa:67:1a:d2:44:79:dd:59:d5:8e:dc:a8:69:bf:
f2:0d:15:43:20:f6:dc:fd:13:cb:fc:b3:65:30:3f:a5:be:88:
4e:91:9e:5d:5c:c9:cc:f6:d3:1c:08:d0:d1:d1:a4:c2:ff:ef:
ed:9a:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:57:50 2025 by rpki-client on console.sobornost.net