Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F01FA4361C6611F085ADCAF4DAE4EC9C.roa
File: F01FA4361C6611F085ADCAF4DAE4EC9C.roa (raw, json)
Hash identifier: HQYZfw6xp7V4V2kMLJ4t64STeS6SUkzkXXLu75ah/k8=
Subject key identifier: 5F:82:CD:4B:FA:7E:C0:12:2E:3E:34:64:34:2A:01:C6:3F:37:3A:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F01FA4361C6611F085ADCAF4DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 15:08:09 +0000
ROA not before: Fri 18 Apr 2025 15:08:04 +0000
ROA not after: Sat 24 May 2025 15:08:04 +0000
asID: 400619
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.118.0/23 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96702 (0x179be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 15:08:04 2025 GMT
Not After : May 24 15:08:04 2025 GMT
Subject: CN=68026ad9-2308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ab:06:95:3e:76:27:a1:2b:86:d1:d1:0c:46:
b2:1a:70:62:0f:0d:31:2a:a9:86:fb:bb:7f:27:af:
d1:4e:6f:ed:49:fc:52:fe:a7:94:df:0c:fa:c0:7d:
3c:80:5b:d1:0e:da:9a:b8:4a:6a:4f:79:1a:e3:62:
ca:b3:83:02:ea:7d:06:65:e2:65:c2:df:6a:0e:6a:
41:f5:b3:b0:52:48:82:d0:d8:3d:fc:33:02:b0:8e:
53:16:4e:87:e0:10:4a:64:5d:94:22:44:eb:27:d0:
7e:1a:85:b8:3d:36:a3:81:9d:ff:92:01:0a:2c:3a:
91:b6:a0:c7:ff:b1:70:92:7f:a5:9c:4f:47:03:fa:
75:19:04:5a:91:78:cb:15:24:c8:46:d7:12:66:5b:
4b:88:99:21:32:71:09:1b:ed:ff:e0:3e:19:7c:a3:
ad:b7:cb:8d:8a:37:22:34:7a:80:fe:9c:d3:57:7b:
ac:3e:76:3a:9b:7c:19:95:37:b8:ac:1d:23:2c:b1:
04:15:b1:34:38:63:95:97:2f:5e:2e:6b:22:14:06:
67:5d:7d:73:64:af:7d:5f:0e:e6:c1:b5:43:7a:09:
37:6f:67:d5:93:50:91:9a:1b:58:a2:9f:75:5c:19:
5b:03:f2:aa:05:2c:39:8f:d7:4c:29:98:e3:e3:69:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:82:CD:4B:FA:7E:C0:12:2E:3E:34:64:34:2A:01:C6:3F:37:3A:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F01FA4361C6611F085ADCAF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0-154.202.127.255
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
3d:56:5e:d0:62:76:69:5f:47:54:78:58:bb:b6:25:87:80:57:
fd:19:1b:26:6b:46:4e:b9:58:45:51:f5:6b:0b:a6:c3:54:56:
91:26:32:39:b8:4c:df:be:2c:53:81:c3:b5:7e:7d:f7:8c:56:
13:8c:87:f3:f2:1f:8d:76:1c:bb:8a:72:7e:82:f6:39:c6:3b:
97:90:70:b5:79:25:aa:38:e6:aa:c4:87:62:44:db:8f:b0:9b:
e6:8f:af:bb:04:f2:06:0a:a6:88:75:43:ce:5e:d7:9d:ee:0d:
66:6e:49:5b:e4:9f:1b:47:62:a6:dd:d4:dd:f3:2f:e3:ff:17:
56:6b:8d:78:28:d3:e7:4a:2f:87:2e:62:34:19:9a:d8:33:f6:
39:34:fd:2e:2e:3e:c1:31:11:d6:6c:58:79:85:0b:7d:d2:91:
d8:3c:d5:71:00:92:ee:6b:3d:2e:b5:ba:73:78:d5:78:27:b0:
de:e5:e9:e9:fd:d4:c8:a7:a4:98:b2:a3:3f:62:43:3a:59:fd:
b7:f1:f4:cd:2f:dd:40:4f:b7:d8:20:e2:1a:a8:5e:d2:52:32:
ab:88:f7:1b:46:1f:f8:ef:bc:b0:12:9e:ff:af:22:c0:74:5f:
05:66:b2:77:46:3c:8e:f7:f4:70:2b:eb:ce:3e:bf:98:58:70:
34:56:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:28:21 2025 by rpki-client on console.sobornost.net