Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8AD052A1F6511F0AD0EF586DAE4EC9C.roa
File: E8AD052A1F6511F0AD0EF586DAE4EC9C.roa (raw, json)
Hash identifier: bR9PV7kp9dm9yKzqs5AFMOyXgZbelbpvwN77Ya9AUSg=
Subject key identifier: 06:C0:2C:9C:34:24:B0:45:52:96:0E:0F:A8:3C:C0:91:B3:B5:AF:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8AD052A1F6511F0AD0EF586DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 10:38:21 +0000
ROA not before: Tue 22 Apr 2025 10:38:16 +0000
ROA not after: Wed 28 May 2025 10:38:16 +0000
asID: 57043
IP address blocks: 154.222.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96916 (0x17a94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 10:38:16 2025 GMT
Not After : May 28 10:38:16 2025 GMT
Subject: CN=6807719d-3811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:51:8c:fc:29:7e:e5:74:fb:b7:a4:a9:39:
99:95:d2:68:9c:47:3f:26:5f:10:8d:f6:57:86:8f:
66:a2:69:18:10:4b:ab:8e:1a:e0:95:39:83:b9:63:
59:da:d2:a5:c8:e5:05:de:a6:f0:0f:0e:c4:08:0a:
c0:ea:cd:9f:86:62:7f:a3:22:9d:a3:be:22:00:cb:
16:52:9b:0e:90:c3:f0:a5:ba:a4:5f:39:d5:16:2f:
2f:98:19:5d:f8:5e:7d:02:8c:d6:4c:04:ae:1e:4f:
9a:67:18:04:a4:62:65:ab:bb:e1:c6:7e:5c:f1:b2:
1e:41:7b:6e:54:50:1f:30:0c:49:b2:a4:c8:83:8b:
38:34:cc:16:77:c4:3e:42:60:82:1d:80:ed:7c:b1:
b3:0b:1f:7f:d2:96:30:5d:5a:1d:ea:fb:57:f1:72:
87:c9:95:e0:41:6a:43:37:86:df:9d:15:f9:33:6b:
03:5c:b7:20:a5:54:2a:f3:31:1c:7e:83:67:46:2c:
b4:b3:0b:bd:36:90:2c:43:bf:21:97:be:42:14:b4:
68:42:a1:8f:a5:87:0d:2b:4e:56:53:48:b4:4e:e6:
1f:3b:a6:82:c2:bd:c3:48:1f:85:92:3c:40:ac:ce:
19:75:d2:ba:b0:70:fc:1a:51:7f:9a:92:79:d7:3b:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C0:2C:9C:34:24:B0:45:52:96:0E:0F:A8:3C:C0:91:B3:B5:AF:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8AD052A1F6511F0AD0EF586DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.38.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:68:06:42:b5:34:7c:4b:6a:ab:f7:2f:cc:fa:32:84:a2:50:
d9:32:a0:95:ab:26:3f:c8:f4:dc:7c:9f:a2:73:b8:27:6b:49:
cc:ed:21:c9:9e:4b:9a:4e:12:7c:e8:26:1c:c8:03:e7:0f:f4:
b4:e2:6a:20:a7:f2:21:78:f1:f4:63:15:db:0c:be:71:a0:c5:
01:53:51:53:6e:cf:8e:ea:96:44:a1:33:2e:1f:ee:f8:ec:7a:
39:5f:a1:02:8b:17:ed:e2:bf:73:b6:47:6a:8a:ad:36:b8:57:
6b:81:52:b8:38:3d:cd:55:84:2b:26:03:08:39:04:6b:97:ec:
17:05:cd:3c:6d:6e:76:5a:68:a2:1c:cc:bb:bd:d1:2c:d8:3f:
f8:05:e7:69:3d:42:ad:53:83:f0:94:f8:34:c3:94:46:70:c4:
5d:b2:e2:6b:e5:06:7d:6c:e8:8d:64:6b:9a:35:91:42:be:df:
e7:d0:bb:6c:26:b0:de:ed:50:74:b2:e5:50:04:e8:5c:60:ec:
cc:ef:a9:03:e4:62:f7:49:22:a4:cc:fd:6b:31:d4:14:b4:a1:
73:7f:95:de:3b:02:cc:a9:97:aa:c9:b3:fc:87:f7:25:67:3b:
47:af:d5:31:81:f6:6b:b3:c7:98:6a:97:16:09:5f:b5:36:4d:
d6:78:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:48 2025 by rpki-client on console.sobornost.net