Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE901AD61C5411F0AC8E527EDAE4EC9C.roa
File: EE901AD61C5411F0AC8E527EDAE4EC9C.roa (raw, json)
Hash identifier: DyvgdvIOZ/iLAUQoQFZu/wX2c/Z0m3xqS0xdyTKW66c=
Subject key identifier: CC:77:79:5E:6B:67:F5:F2:50:7E:6C:52:E1:0C:1A:57:86:C0:73:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017987
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE901AD61C5411F0AC8E527EDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 12:59:16 +0000
ROA not before: Fri 18 Apr 2025 12:59:11 +0000
ROA not after: Sat 24 May 2025 12:59:11 +0000
asID: 40065
IP address blocks: 154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96647 (0x17987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 12:59:11 2025 GMT
Not After : May 24 12:59:11 2025 GMT
Subject: CN=68024ca4-769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:ac:ad:12:80:e9:39:d3:ae:a9:bd:1e:da:
aa:e8:8d:6c:e7:a7:47:c1:04:59:d2:d9:af:b2:64:
24:3b:6d:51:65:a2:ea:31:e3:a1:48:88:32:31:25:
9f:e0:d2:1e:db:42:3b:01:4d:56:af:b7:7b:55:e7:
85:64:e7:70:b4:a9:48:e4:c3:01:dc:e6:77:df:2b:
1a:f8:6a:d8:36:a6:51:cf:6f:7d:75:c2:96:05:48:
35:7b:10:43:fe:42:2c:51:9b:e1:20:62:4f:2e:f8:
c1:64:fb:53:f6:11:cd:10:3b:d3:ec:ec:68:6b:4d:
1b:f0:87:d9:c1:aa:56:8e:1d:78:a0:a9:41:00:d5:
e6:96:f2:ca:29:f4:10:d6:e1:63:33:cf:58:22:31:
b3:e6:a7:be:a2:77:73:55:07:00:4f:35:a8:c3:84:
99:19:90:8f:b4:e7:e0:10:8a:b9:bc:41:11:06:30:
c5:63:56:8d:1c:64:be:d5:e1:f3:a9:1d:e3:ef:80:
fd:46:62:6e:6c:d1:fb:63:bb:2d:08:65:ab:1a:88:
b9:d8:cf:bc:09:3c:ac:2a:41:db:58:0d:5f:d2:8b:
88:7f:fc:63:1a:24:5a:23:47:f5:19:75:60:be:83:
c0:1e:0c:d5:94:2a:8e:1e:df:25:42:5d:b2:06:2a:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:77:79:5E:6B:67:F5:F2:50:7E:6C:52:E1:0C:1A:57:86:C0:73:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE901AD61C5411F0AC8E527EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/20
Signature Algorithm: sha256WithRSAEncryption
20:b7:8e:12:1d:51:4f:87:11:ff:9e:e9:cf:0c:4b:cb:8e:9b:
88:91:aa:4a:4c:52:26:91:94:b9:c5:5b:49:a0:8c:d3:2a:d1:
2f:a5:bf:d0:28:e7:bb:2a:50:a2:02:52:4c:9c:e8:9c:fd:ea:
d8:aa:17:3f:cd:d3:16:b4:73:2e:2c:09:4a:07:6b:42:ab:af:
ab:85:64:c7:de:14:79:db:84:cd:f1:a0:01:69:f0:6f:e9:34:
53:c6:0e:51:97:7b:dd:15:85:7e:d1:75:b9:0d:99:6b:c1:5a:
64:a8:ed:ca:ae:cf:fd:43:8a:f7:8a:7a:85:da:fb:d9:d6:98:
f1:22:e0:dc:3e:99:95:94:7b:35:19:55:96:43:bc:13:34:b5:
b1:bb:34:b9:68:bf:b9:dd:3c:85:28:cf:00:02:bc:21:04:78:
90:82:05:a3:1c:a8:12:e0:a7:d6:2b:b6:f1:f2:3a:f4:31:03:
38:73:ca:14:9e:9c:42:89:be:3b:3c:61:cc:da:3f:6e:39:6b:
ff:28:8a:13:cf:7a:d6:16:fa:f5:54:fc:7f:f7:9b:65:6c:e7:
ef:53:65:46:61:13:93:7e:73:0a:af:0d:c7:9c:2b:2d:00:a0:
70:cb:49:8a:af:86:b8:9c:54:04:12:0d:aa:d3:78:1e:51:17:
5b:0c:c1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:10:47 2025 by rpki-client on console.sobornost.net