Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08A3474154311F0870FF4E96DB8BCC6.roa
File: F08A3474154311F0870FF4E96DB8BCC6.roa (raw, json)
Hash identifier: VaDHPffNbST/oEASCvnO3uXyr8D33adtVB6lYoi4lEE=
Subject key identifier: 7A:E3:71:39:87:5E:B0:98:62:7A:D7:84:34:08:01:E0:0D:D5:3D:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01789E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08A3474154311F0870FF4E96DB8BCC6.roa
Signing time: Wed 09 Apr 2025 13:09:59 +0000
ROA not before: Wed 09 Apr 2025 13:09:55 +0000
ROA not after: Sun 08 Jun 2025 13:09:55 +0000
asID: 214808
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96414 (0x1789e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 13:09:55 2025 GMT
Not After : Jun 8 13:09:55 2025 GMT
Subject: CN=67f671a7-7e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:45:32:4a:1a:c3:f2:79:08:30:24:9d:ce:
b6:71:8e:16:d3:be:6c:f2:7f:40:4a:cc:1a:bd:80:
e5:bd:6a:78:90:ab:c0:0a:ee:a2:2c:5f:35:b5:ea:
96:68:ea:ef:dd:6c:64:8e:02:0b:42:b9:e5:41:aa:
49:6a:1c:8e:a8:a9:50:ca:41:40:42:cb:14:e2:7f:
82:65:08:c5:e3:fd:ca:5b:20:99:5c:27:21:23:c0:
e2:43:30:fc:dd:dc:6d:fa:4a:84:bf:3d:fe:ab:dd:
43:14:ef:25:c1:2f:f8:40:fe:52:b8:42:e5:d8:43:
39:77:b9:68:ed:78:e9:ab:2e:fe:a4:b5:58:dd:f6:
4e:fe:80:e4:d0:36:c2:e1:50:a3:67:a3:a2:65:f4:
47:14:bc:bc:2c:76:73:f4:d7:f8:e7:8a:3f:e4:ad:
1e:15:10:b6:99:97:b5:0e:11:41:fb:77:46:06:f3:
4e:49:e8:13:a9:ad:f5:69:2d:3d:2d:00:37:b6:30:
bf:4f:12:85:64:8c:77:19:c5:bb:65:9a:02:68:9b:
72:33:61:4e:9e:e9:40:a5:29:31:1b:10:79:a6:07:
b9:64:63:39:52:f0:36:25:c2:fe:a3:2f:ec:49:22:
1a:35:73:46:64:bf:8d:6d:21:c3:a5:f0:9e:10:f1:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:71:39:87:5E:B0:98:62:7A:D7:84:34:08:01:E0:0D:D5:3D:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08A3474154311F0870FF4E96DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:a7:39:7d:6c:b1:79:fe:9a:5e:22:65:a1:e3:cf:59:ab:af:
90:e2:77:f0:1c:19:c5:fd:bc:cb:c6:c6:d5:13:35:d7:6d:41:
9b:d3:4f:45:dd:b3:2d:2b:9e:a4:35:62:82:64:58:72:ce:b8:
26:66:f2:81:a0:de:3c:9f:05:5a:c3:f3:a6:44:cf:a8:24:fd:
c3:be:7d:ae:6c:ba:4a:97:9e:26:8a:16:13:11:f2:77:ad:65:
11:b2:ac:d8:12:0b:3b:96:0e:88:b2:44:4d:57:e0:16:6b:5a:
6f:a8:0c:7d:03:e8:39:83:f6:b7:b3:2e:08:2b:aa:0c:31:ef:
b8:a3:fb:3c:fd:4e:c1:a0:81:1b:7d:c7:38:28:68:03:79:72:
e1:19:76:f5:7e:e3:c6:e0:cb:e7:f0:a2:ca:af:a2:ed:a2:88:
9c:7d:47:fb:44:68:65:28:db:fb:58:53:90:5c:22:31:be:85:
5b:7c:9f:c1:1a:38:01:a2:1f:b4:70:c5:dc:16:dd:99:2d:d7:
6a:c7:39:58:27:88:cb:19:d7:bf:8b:43:d5:7e:bb:dc:bb:90:
f7:dc:7a:96:e9:5a:db:73:51:f8:14:9d:dc:8d:d2:ff:26:1c:
2c:7f:86:bf:23:5e:a8:af:11:30:59:ce:1b:68:b9:27:8e:e4:
6c:4f:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:53:43 2025 by rpki-client on console.sobornost.net