Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26A8B26245311F0AC03D67BDAE4EC9C.roa
File: F26A8B26245311F0AC03D67BDAE4EC9C.roa (raw, json)
Hash identifier: ML1rU2MxuUxsLVdagrIM92ZyavhhhZT465sRu5GmfF4=
Subject key identifier: 31:79:1A:2E:1E:D3:5A:26:49:FF:81:CC:E1:EF:98:CC:1F:74:FC:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26A8B26245311F0AC03D67BDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 17:12:22 +0000
ROA not before: Mon 28 Apr 2025 17:12:17 +0000
ROA not after: Wed 04 Jun 2025 17:12:17 +0000
asID: 202656
IP address blocks: 154.218.30.0/24 maxlen: 24
154.219.17.0/24 maxlen: 24
154.219.18.0/24 maxlen: 24
154.219.19.0/24 maxlen: 24
154.219.20.0/24 maxlen: 24
154.219.21.0/24 maxlen: 24
154.222.193.0/24 maxlen: 24
154.222.194.0/24 maxlen: 24
154.222.195.0/24 maxlen: 24
154.222.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97333 (0x17c35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 17:12:17 2025 GMT
Not After : Jun 4 17:12:17 2025 GMT
Subject: CN=680fb6f6-33cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:a4:7c:9d:29:4d:05:ff:50:a2:92:dd:10:
18:d6:b8:a5:49:e7:14:03:34:42:51:c4:7b:c7:ce:
19:bb:70:07:20:51:43:d7:76:6e:66:c3:6f:f5:f1:
de:8a:0e:61:26:0f:97:96:f2:b5:18:5d:bb:48:9c:
13:d4:d9:d0:fa:b3:63:d4:be:fc:23:3d:e5:86:74:
f0:46:22:d8:a5:a9:bf:8d:c7:20:ea:dd:3e:31:87:
3a:65:5d:5e:50:8f:d7:66:c6:e8:09:bf:b6:df:b6:
1a:86:bc:b5:e2:7b:3b:77:f7:c2:b3:17:2d:71:b6:
be:c5:29:b0:be:5f:52:8e:a4:b4:28:77:2a:1f:02:
81:3a:3c:05:b2:45:3f:ef:8c:d8:08:e8:a2:d3:71:
d5:f2:82:6d:6a:8e:fd:a3:d0:42:67:f2:3d:e9:34:
d1:67:0a:77:fd:69:0c:1b:83:c7:8f:73:49:1f:db:
05:0b:38:54:1f:14:bc:d0:91:36:8c:f9:bf:ff:07:
34:cd:84:01:65:2d:68:08:86:f9:0c:94:05:32:66:
3c:32:33:16:6d:11:ce:cc:d3:1d:59:16:e8:37:83:
da:94:39:21:bf:72:da:62:c1:b6:3e:e6:02:fa:0f:
2c:64:5a:67:66:d3:5f:79:38:a8:9d:f3:12:ee:5d:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:79:1A:2E:1E:D3:5A:26:49:FF:81:CC:E1:EF:98:CC:1F:74:FC:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26A8B26245311F0AC03D67BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.30.0/24
154.219.17.0-154.219.21.255
154.222.193.0-154.222.196.255
Signature Algorithm: sha256WithRSAEncryption
8c:ba:fa:22:b4:9f:89:9c:ff:84:35:cc:66:3a:2f:c1:21:4c:
00:75:c2:f4:2d:5a:28:bf:44:48:a8:da:a2:4b:19:14:97:d7:
65:85:fd:25:ec:06:d4:87:81:5c:19:c9:3b:a3:c8:68:db:78:
17:19:8e:03:4c:d2:f8:a5:2c:47:a2:7c:b1:8f:8f:d3:63:aa:
13:42:42:3b:e4:bb:15:b5:2f:6b:1d:a7:aa:10:5f:6d:99:dc:
ec:9a:2c:f8:17:d5:93:31:16:be:c4:ad:bb:bb:77:0b:41:75:
d8:66:0a:d8:6b:5b:c9:b5:8e:af:46:13:ec:3c:cd:12:7c:a6:
14:60:4f:96:90:a7:8e:b6:49:94:6d:94:87:e1:6d:0d:77:4b:
1a:90:04:2f:85:03:68:86:5c:07:de:ee:3f:8a:2c:17:55:65:
39:21:03:65:d6:52:8f:05:9c:b1:58:f5:41:7e:be:0a:8b:80:
8c:a1:ab:b1:25:c3:6d:b9:cd:3b:a5:e3:e3:d9:1b:0f:06:c0:
9f:c7:64:3a:4a:02:b1:5f:58:fb:e4:9f:99:f1:3b:f1:ec:ab:
af:e4:e2:c0:04:c8:8b:fd:6e:09:91:93:35:42:82:e4:81:fe:
bf:77:92:2d:6a:c7:45:63:fb:bf:ac:a9:87:1b:f8:a9:e1:9f:
5f:74:e3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:58:05 2025 by rpki-client on console.sobornost.net