Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E587322E201611F084BBF8A8DAE4EC9C.roa
File: E587322E201611F084BBF8A8DAE4EC9C.roa (raw, json)
Hash identifier: GTh08ocgOle0IsJHUS8HHFK5jV5m6lujyN7sFiS17WQ=
Subject key identifier: CB:04:D3:78:0A:0C:51:E0:89:E9:A3:A6:DA:87:2A:F2:53:92:65:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E587322E201611F084BBF8A8DAE4EC9C.roa
Signing time: Wed 23 Apr 2025 07:45:16 +0000
ROA not before: Wed 23 Apr 2025 07:45:12 +0000
ROA not after: Fri 02 May 2025 07:45:12 +0000
asID: 22773
IP address blocks: 154.82.0.0/21 maxlen: 24
154.84.28.0/22 maxlen: 24
154.84.168.0/22 maxlen: 24
154.84.172.0/23 maxlen: 24
154.84.176.0/22 maxlen: 24
154.85.108.0/22 maxlen: 24
154.85.112.0/21 maxlen: 24
154.88.10.0/23 maxlen: 24
154.88.18.0/23 maxlen: 24
154.90.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96927 (0x17a9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:45:12 2025 GMT
Not After : May 2 07:45:12 2025 GMT
Subject: CN=68089a8c-f54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:7d:5c:da:88:49:9a:a4:55:5d:1e:09:b8:
4a:d9:7a:91:72:e7:7e:25:4b:24:8d:a0:33:04:6e:
a9:4e:7f:ba:8b:99:03:36:ce:5c:95:2c:7c:20:8b:
45:1c:eb:e9:d4:8a:b0:f0:a7:0f:53:57:da:3b:21:
23:f6:23:b7:a6:c2:2b:be:59:a8:68:73:07:48:8f:
e0:8e:b7:5d:9b:d9:4c:11:0e:d6:92:ce:14:d8:72:
01:ad:63:08:2a:26:75:90:1e:32:53:d7:a6:59:c8:
c8:b5:7d:25:fb:3b:f4:73:67:72:d4:20:0b:f3:75:
90:d1:09:80:09:3f:09:49:c6:70:b3:b7:7c:9d:19:
d1:49:cc:5d:f4:cd:9a:30:e8:87:02:c4:cb:c2:a7:
eb:bc:35:7a:ff:fb:20:14:24:43:ca:99:c2:8a:82:
6e:04:72:28:62:06:c7:b9:0e:4c:d8:e0:ef:2a:f9:
8c:83:6f:7e:df:1e:47:f0:20:53:36:7b:09:eb:c5:
03:81:00:97:ae:df:29:eb:27:b3:0b:0d:5f:0b:93:
a0:c1:b6:c7:7f:20:2b:4e:ea:cc:0d:17:9e:4d:1b:
22:1e:b6:0e:aa:c8:09:e4:2e:21:8f:28:4e:9f:78:
b5:31:4f:bc:81:cc:82:fe:a2:ca:46:94:d8:32:c6:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:D3:78:0A:0C:51:E0:89:E9:A3:A6:DA:87:2A:F2:53:92:65:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E587322E201611F084BBF8A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.0.0/21
154.84.28.0/22
154.84.168.0-154.84.173.255
154.84.176.0/22
154.85.108.0-154.85.119.255
154.88.10.0/23
154.88.18.0/23
154.90.2.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:e0:12:34:c2:2b:70:cf:1f:57:a4:14:08:81:24:69:65:e1:
17:20:e9:b3:da:de:57:ae:13:d9:10:b1:ac:37:25:24:5a:29:
a9:47:36:4b:2c:d8:f9:ce:64:3d:38:c8:a3:13:3a:09:97:5d:
cd:ca:f6:7b:e9:50:7a:3a:ac:8c:34:ad:9f:4f:a4:78:8b:11:
25:91:08:f0:ad:71:e9:0f:ba:ed:57:30:b7:b9:e8:f7:22:c3:
37:c6:f7:dd:2b:6c:17:3f:a7:b9:ba:a0:34:37:26:49:68:d1:
7d:55:dd:a1:71:da:9d:5e:26:d2:0e:58:2d:c4:9c:5a:19:ca:
dd:80:d4:0f:ef:96:b4:78:89:9f:96:4c:24:ee:4a:a6:31:b5:
27:78:42:35:c2:e9:a3:0d:51:ad:2d:e5:18:f8:d9:9f:da:13:
7c:ae:42:0f:35:a6:4a:5c:f1:77:68:b5:35:a2:11:5e:7b:fc:
b5:3f:e9:d4:e8:32:78:fd:89:e4:13:ba:fc:34:2a:8d:63:89:
ab:da:f7:76:05:7f:6d:d2:0e:2d:9b:86:1b:f9:81:bf:ad:02:
8f:31:83:fc:05:b7:1d:b3:56:a9:81:b4:f4:85:3d:8c:e9:48:
5e:bd:89:ba:29:64:3b:91:03:1e:af:1f:79:f8:c7:9b:f3:b4:
41:a9:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:28:12 2025 by rpki-client on console.sobornost.net