Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED99B9BA113D11F0A37F8F72762E951A.roa
File: ED99B9BA113D11F0A37F8F72762E951A.roa (raw, json)
Hash identifier: kFvvOMxE+6oNpBOvKD9ZKTucrarfsLWk0PukvjUD224=
Subject key identifier: CE:DE:EE:33:68:35:F6:5D:F3:24:4E:8A:8C:53:33:3E:7D:DA:18:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED99B9BA113D11F0A37F8F72762E951A.roa
Signing time: Fri 04 Apr 2025 10:16:53 +0000
ROA not before: Fri 04 Apr 2025 10:16:49 +0000
ROA not after: Sun 11 May 2025 10:16:49 +0000
asID: 61112
IP address blocks: 154.82.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96178 (0x177b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 10:16:49 2025 GMT
Not After : May 11 10:16:49 2025 GMT
Subject: CN=67efb194-3cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:29:e5:42:bc:07:41:70:33:ff:65:6c:84:
b2:05:e8:24:e1:08:7f:e0:e7:24:de:48:6f:b6:48:
74:19:91:4d:11:d9:41:08:7e:1d:7c:42:a0:6a:e6:
9b:02:56:00:d4:14:b5:29:14:d1:85:9c:36:70:db:
2e:3f:19:84:3c:97:fc:f9:d4:c1:63:ea:c3:e4:62:
ae:cd:04:c5:9f:66:dd:f9:90:36:05:cb:0f:43:d7:
90:4b:3a:57:91:24:e7:34:75:59:6b:32:7b:6f:a9:
00:f9:1a:4b:94:e9:f3:1d:1e:ad:19:fb:dc:b5:a1:
c7:e6:be:03:da:85:14:f5:f8:64:36:a2:de:8f:8a:
fa:83:d8:b2:97:b5:13:4a:1e:14:a0:2d:db:47:14:
b8:00:68:69:d8:47:89:30:9e:5b:5c:e7:2a:e0:dc:
64:7b:1f:f0:b6:64:9c:64:e8:ef:ae:eb:15:d3:68:
64:69:57:c5:d5:a3:58:05:47:86:a4:ff:1e:46:ef:
8a:01:ee:ca:29:7e:bc:4e:83:ef:2b:f5:43:ae:48:
64:b7:9b:c8:ca:a3:bc:77:36:fc:c5:c8:6a:bc:27:
89:e5:32:f5:ac:55:60:ff:3c:cb:48:b7:d8:84:6e:
d0:25:98:00:1b:45:01:2d:51:ab:4b:47:59:ae:dd:
3a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DE:EE:33:68:35:F6:5D:F3:24:4E:8A:8C:53:33:3E:7D:DA:18:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED99B9BA113D11F0A37F8F72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.138.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:46:8b:6e:05:81:7e:b9:7b:00:f0:ca:ca:27:02:f4:e7:61:
51:0a:6a:47:65:78:18:2b:6b:95:91:60:5a:6f:12:3c:6b:55:
d2:ef:e4:64:fe:d8:93:6d:07:18:a4:3d:41:a8:a6:4d:e2:f5:
91:b2:29:ec:e6:ef:f7:cb:8c:1c:c6:67:7c:6c:53:89:8f:05:
4f:28:bc:cf:de:bd:7f:15:df:2f:c3:1c:45:b1:0c:2f:9d:f1:
71:be:a0:f0:32:2f:bc:94:b6:0a:b3:64:25:f1:18:43:7b:6e:
c3:02:63:4f:1d:ec:fb:44:b3:dc:ad:8e:b1:aa:f7:7f:21:f5:
32:82:0e:20:b3:59:fe:50:37:6d:77:23:3f:99:a8:22:c5:a4:
ee:f7:06:4c:8d:fe:20:1b:ad:98:ad:5c:22:2c:2b:01:af:16:
a8:20:fd:76:8f:ad:12:f1:18:4c:0d:10:e1:d9:a7:86:39:5c:
45:49:ec:ce:64:16:c1:46:bc:1b:91:08:69:d9:6d:7c:fe:80:
75:b4:0b:65:63:e6:6f:82:a6:de:c1:da:ee:b2:80:31:97:b6:
b8:37:20:41:1f:a3:67:1a:80:08:d5:3d:f5:58:a7:b2:a8:b4:
69:8b:9e:ed:c0:16:1d:77:41:88:ef:9d:5a:2b:2e:aa:60:48:
0e:59:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:53 2025 by rpki-client on console.sobornost.net