Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/93C6E97A0EFA11F0AB9D03B9762E951A.roa
File: 93C6E97A0EFA11F0AB9D03B9762E951A.roa (raw, json)
Hash identifier: zWyU7bKqiy3FbiZoQL39YrjJJSsHBAMBuqaNVQw1DJk=
Subject key identifier: 0B:CD:AA:E2:37:CF:89:02:61:3C:15:BA:3C:87:38:23:27:EE:24:B3
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 07B6
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/93C6E97A0EFA11F0AB9D03B9762E951A.roa
Signing time: Tue 01 Apr 2025 13:09:43 +0000
ROA not before: Tue 01 Apr 2025 13:09:38 +0000
ROA not after: Mon 30 Apr 2035 13:09:38 +0000
asID: 20011
IP address blocks: 196.28.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974 (0x7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Apr 1 13:09:38 2025 GMT
Not After : Apr 30 13:09:38 2035 GMT
Subject: CN=67ebe597-5d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:f0:fe:9c:78:f1:84:9e:5f:57:e5:9e:10:
c0:ac:c9:f7:75:9f:eb:14:d0:80:60:f1:98:4d:c1:
54:bf:65:13:aa:bb:ed:27:19:6c:5d:db:a0:8e:01:
66:1e:d1:77:65:07:27:92:75:44:23:59:04:2b:99:
37:45:50:22:dd:11:5c:f8:17:32:1b:77:c8:22:14:
cc:fd:16:d4:ab:7f:28:6d:ee:a7:42:b1:6c:2c:1d:
ca:8f:38:89:3e:00:fe:61:fa:35:37:d3:a2:d1:ac:
86:30:10:01:f7:fa:df:08:e9:62:72:17:29:cc:6a:
03:15:90:5f:1c:24:b3:7f:3c:e1:3f:00:30:7a:bd:
34:57:6b:9f:b4:1a:b1:e2:16:82:3e:4c:17:0f:d0:
90:67:17:89:62:9f:17:50:a0:6f:cb:0e:32:bd:ce:
30:27:7c:47:cd:e7:f2:4c:00:c7:30:22:29:f9:05:
4a:48:ff:b9:bd:c2:3b:d0:a5:29:ea:d3:f9:b3:ea:
7e:72:76:a0:c6:e1:95:10:33:7f:5c:bb:d7:e0:ee:
79:7b:2e:ee:ad:16:a1:da:b7:0a:27:7a:43:f2:01:
f6:0a:66:ae:3b:f5:49:30:6d:bf:1a:81:21:85:6c:
32:bf:9a:7d:a9:a6:20:04:dd:c7:e5:7b:b5:8a:2f:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:AA:E2:37:CF:89:02:61:3C:15:BA:3C:87:38:23:27:EE:24:B3
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/93C6E97A0EFA11F0AB9D03B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.28.32.0/20
Signature Algorithm: sha256WithRSAEncryption
c1:2f:e1:07:7d:89:a7:51:8f:ba:4e:dd:54:2a:e6:05:05:9e:
1d:0b:79:8f:42:77:96:15:a6:21:db:f3:fd:b2:1a:33:a0:6b:
36:4b:1b:68:3e:05:ff:c3:80:f0:ce:19:07:4f:60:8e:9f:36:
4c:d4:8e:57:de:ab:e7:1b:44:c0:06:84:e4:47:42:11:f5:5d:
53:4c:12:18:57:b9:8b:a8:9f:5d:58:a2:d0:ab:05:9a:61:ab:
50:64:b2:04:9a:22:5b:4e:ae:bf:d5:7c:f0:85:56:cf:3d:6b:
d0:b3:ed:4c:2d:5b:56:fe:b2:7c:40:09:5d:d3:b1:c8:88:5e:
06:5d:3f:00:c4:ac:71:e9:2b:3a:8e:b0:11:65:42:71:92:39:
ad:e6:0e:ac:d0:3d:11:ea:e4:28:89:36:25:21:87:0d:06:8b:
b2:39:23:36:8a:65:74:23:5a:68:8f:e9:3d:5c:c8:a9:16:07:
77:37:3e:8b:e8:51:4c:d4:36:5d:81:ef:11:43:a7:1a:b4:b8:
2a:e6:0a:8f:d3:19:c4:b3:a0:c7:45:dc:46:e8:20:73:0c:9c:
64:f4:f4:b7:15:e0:c1:e9:b3:99:d2:05:a5:af:af:f6:7d:82:
9d:f7:42:b1:00:93:d9:e4:35:34:39:d0:10:49:57:9a:af:4a:
a7:cb:15:3c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yNTA0MDExMzA5MzhaFw0zNTA0MzAxMzA5MzhaMBgxFjAU
BgNVBAMTDTY3ZWJlNTk3LTVkOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEEPD+nHjxhJ5fV+WeEMCsyfd1n+sU0IBg8ZhNwVS/ZROqu+0nGWxd26CO
AWYe0XdlByeSdUQjWQQrmTdFUCLdEVz4FzIbd8giFMz9FtSrfyht7qdCsWwsHcqP
OIk+AP5h+jU306LRrIYwEAH3+t8I6WJyFynMagMVkF8cJLN/POE/ADB6vTRXa5+0
GrHiFoI+TBcP0JBnF4linxdQoG/LDjK9zjAnfEfN5/JMAMcwIin5BUpI/7m9wjvQ
pSnq0/mz6n5ydqDG4ZUQM39cu9fg7nl7Lu6tFqHatwonekPyAfYKZq479Ukwbb8a
gSGFbDK/mn2ppiAE3cfle7WKL9aVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUC82q
4jfPiQJhPBW6PIc4IyfuJLMwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4LzkzQzZFOTdBMEVGQTExRjBBQjlEMDNCOTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATEHCAwDQYJKoZIhvcNAQEL
BQADggEBAMEv4Qd9iadRj7pO3VQq5gUFnh0LeY9Cd5YVpiHb8/2yGjOgazZLG2g+
Bf/DgPDOGQdPYI6fNkzUjlfeq+cbRMAGhORHQhH1XVNMEhhXuYuon11YotCrBZph
q1BksgSaIltOrr/VfPCFVs89a9Cz7UwtW1b+snxACV3TsciIXgZdPwDErHHpKzqO
sBFlQnGSOa3mDqzQPRHq5CiJNiUhhw0Gi7I5IzaKZXQjWmiP6T1cyKkWB3c3Povo
UUzUNl2B7xFDpxq0uCrmCo/TGcSzoMdF3EboIHMMnGT09LcV4MHps5nSBaWvr/Z9
gp33QrEAk9nkNTQ50BBJV5qvSqfLFTw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:43 2025 by rpki-client on console.sobornost.net