Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5F5CEC190611F0B16DAE116EB8BCC6.roa
File: FA5F5CEC190611F0B16DAE116EB8BCC6.roa (raw, json)
Hash identifier: wsuCRJRq40QzD1EQsBAnHj1+FgWubKDTDk5x6icB1/M=
Subject key identifier: 2F:4B:44:3F:5C:0D:5E:5C:55:C7:97:DC:D7:48:9A:7B:82:77:92:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017917
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5F5CEC190611F0B16DAE116EB8BCC6.roa
Signing time: Mon 14 Apr 2025 08:03:41 +0000
ROA not before: Mon 14 Apr 2025 08:03:36 +0000
ROA not after: Mon 19 May 2025 08:03:36 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.199.0/24 maxlen: 24
154.92.200.0/24 maxlen: 24
154.92.201.0/24 maxlen: 24
154.92.202.0/24 maxlen: 24
154.92.203.0/24 maxlen: 24
154.92.204.0/24 maxlen: 24
154.92.209.0/24 maxlen: 24
154.92.210.0/24 maxlen: 24
154.92.211.0/24 maxlen: 24
154.92.212.0/24 maxlen: 24
154.92.213.0/24 maxlen: 24
154.92.214.0/24 maxlen: 24
154.92.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96535 (0x17917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 14 08:03:36 2025 GMT
Not After : May 19 08:03:36 2025 GMT
Subject: CN=67fcc15d-2156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:8f:4a:8a:7d:b6:de:e0:b8:5f:d3:1e:dd:
1e:7b:a0:60:5e:5a:9e:38:2b:b8:b9:c7:c3:e4:03:
53:d5:a8:1c:01:a3:0e:bd:ef:48:dd:bc:2f:c0:52:
73:21:7c:1f:a7:41:61:5a:c6:b7:d1:b0:80:98:c9:
48:8d:cc:dd:3b:8e:f6:98:66:f7:24:51:65:ed:48:
3c:75:e9:93:90:bf:91:77:4a:b3:4c:6d:d3:da:65:
48:36:5e:2a:d3:ff:fc:07:c7:58:7b:d0:15:52:bb:
c1:5c:dc:ad:dc:17:13:db:08:f6:e2:a5:75:ca:e5:
4e:a8:02:95:8e:c0:64:af:d5:ae:e7:27:b0:bf:e9:
a4:6d:f9:36:d2:11:56:6b:c8:71:a1:bc:18:87:6a:
70:ee:89:77:84:68:8e:73:ed:b0:ba:41:1a:51:9d:
84:28:a4:67:7a:f6:8e:05:2d:4e:e8:fc:aa:cf:f4:
50:96:f7:b6:fc:b6:f0:52:db:9b:d2:a4:52:0a:f6:
77:84:2f:dc:55:5f:bb:31:0f:f0:d2:16:e2:d5:87:
e1:87:3d:ec:19:8a:77:d7:99:97:f8:08:2f:4e:70:
23:f7:68:a8:6f:70:4b:ca:3f:a1:d4:fd:ae:01:2d:
eb:7f:77:07:ec:d1:90:fc:d6:0d:a0:f6:45:94:09:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4B:44:3F:5C:0D:5E:5C:55:C7:97:DC:D7:48:9A:7B:82:77:92:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5F5CEC190611F0B16DAE116EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.204.255
154.92.209.0-154.92.215.255
Signature Algorithm: sha256WithRSAEncryption
86:70:86:b7:9c:a4:c2:03:1f:b0:a4:8d:d2:78:be:87:ea:f6:
92:09:ad:01:b3:16:d5:e4:12:6f:c6:8a:82:ed:6d:a9:9d:7a:
0a:d9:17:f3:f9:d2:ba:f6:15:63:e5:12:97:da:5e:ae:9d:72:
21:af:de:c7:08:c4:3a:0e:89:3c:f0:78:52:80:0e:71:09:22:
cc:e2:ce:df:6c:96:56:83:de:d8:68:43:02:e8:73:02:a1:3b:
4c:c3:50:60:d5:4e:bf:44:21:a4:9b:f0:6c:6b:08:4c:6d:23:
b6:9a:34:d1:e2:0c:f7:e0:26:ff:a5:f4:11:2c:b9:da:a7:88:
81:10:2b:f8:e0:6e:c0:14:66:81:81:72:54:f0:00:78:5e:54:
03:c0:ee:d9:ef:21:f7:ff:b7:06:b0:95:91:e5:b2:73:60:5f:
19:37:97:b5:48:82:cb:77:88:6f:40:43:05:8b:a1:94:81:64:
b3:d3:dd:72:c1:f1:b3:3b:6a:82:42:94:72:41:ee:e7:29:89:
f5:23:20:da:16:c6:bb:c9:3c:5b:ad:cd:cd:d5:1b:17:af:7d:
2e:04:15:44:06:f2:af:f7:63:ec:2f:60:6c:3e:75:ab:4b:06:
2a:6c:ae:29:22:ea:7a:19:cf:26:a8:0c:76:71:f0:6d:4c:f8:
50:bf:34:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:00 2025 by rpki-client on console.sobornost.net