Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04DD441CBE9011EFACB7F38B762E951A.roa
File: 04DD441CBE9011EFACB7F38B762E951A.roa (raw, json)
Hash identifier: dOxnlC+tmmyP7yCGsBeeMmTbBxGO8tJ99laphcKYVNw=
Subject key identifier: BC:07:DD:B8:96:92:E3:AC:7E:03:98:0A:82:19:E7:9C:F5:02:71:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011BFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04DD441CBE9011EFACB7F38B762E951A.roa
Signing time: Fri 20 Dec 2024 05:05:24 +0000
ROA not before: Fri 20 Dec 2024 05:05:20 +0000
ROA not after: Wed 10 Dec 2025 05:05:20 +0000
asID: 984
IP address blocks: 154.82.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72702 (0x11bfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 05:05:20 2024 GMT
Not After : Dec 10 05:05:20 2025 GMT
Subject: CN=6764fb14-b6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:94:d8:60:b8:2b:c3:cc:69:be:14:30:c2:
70:eb:7e:ed:ce:95:5c:bd:7b:8d:14:0b:97:9c:0d:
68:19:17:04:f7:30:b0:e4:8a:d3:6a:f1:7a:47:c3:
0a:62:ef:d1:b4:c1:68:7c:62:5a:7d:62:12:01:14:
6f:7c:07:1c:d8:45:a0:ed:32:d3:49:db:d4:63:c4:
7e:77:27:54:31:6e:3a:b5:bc:54:c5:06:95:81:a3:
39:dd:b1:cd:f4:b3:66:35:ef:c7:18:4d:b5:e2:38:
b7:86:d4:85:03:43:dc:77:47:87:d1:73:be:c6:2d:
4b:9b:36:cf:90:8d:96:f2:22:85:53:d9:f6:72:1e:
c4:e8:77:a9:89:5d:e7:72:ad:65:30:5f:c3:56:09:
2c:55:1e:16:98:d7:62:1f:ae:93:1b:63:6e:1f:f4:
df:84:77:d9:d3:49:2d:cb:07:f9:6f:a8:32:23:23:
3a:de:93:31:ee:76:5b:e7:e2:1a:9b:52:0b:85:88:
46:cf:56:57:21:bf:ef:19:37:b9:68:cc:4f:43:41:
48:b6:2c:88:67:df:f8:a9:5c:31:64:db:6d:7a:1f:
57:4a:bc:2c:7c:34:9a:5b:e3:93:f0:c6:18:a4:78:
42:44:d9:41:aa:51:90:08:f0:61:da:b9:93:ee:20:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:DD:B8:96:92:E3:AC:7E:03:98:0A:82:19:E7:9C:F5:02:71:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04DD441CBE9011EFACB7F38B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.172.0/24
Signature Algorithm: sha256WithRSAEncryption
88:2d:17:fc:2f:ef:4b:23:ee:61:ad:a2:37:a6:96:61:52:b3:
d1:b2:41:c1:b5:47:7a:32:62:08:40:2b:88:7e:23:0a:99:3f:
dc:4f:1e:6c:5c:e0:f5:28:86:57:76:0d:73:75:cb:01:57:22:
7b:3c:b8:c9:05:33:61:0c:c1:d6:1f:d4:71:cd:53:03:29:21:
03:a8:7e:7c:82:fb:e7:31:d5:e6:4a:5c:76:e9:11:15:ba:5a:
2b:44:1b:55:49:5b:89:c8:89:97:8c:23:1f:2b:39:85:b8:a1:
43:ec:f1:4a:f3:77:4c:40:56:31:8e:68:ac:8e:a9:c4:3a:9b:
82:8d:46:d4:67:0c:79:8a:60:3d:27:9e:f7:e3:3c:67:4d:21:
52:03:38:6c:b7:6b:9c:8f:09:91:8f:7d:60:49:86:51:34:ce:
43:51:35:ee:21:5b:51:0c:13:0a:00:9f:05:2b:09:23:5b:da:
d8:0e:00:f2:46:b0:bc:9f:93:f6:6b:04:e2:38:60:a9:bd:7d:
e8:e6:49:fe:21:8c:da:b8:45:24:33:58:73:ed:50:1f:e1:8c:
b6:46:30:b6:c2:ba:93:b3:83:7b:10:ed:94:e4:a5:72:da:80:
53:7f:da:5b:35:e5:a7:0c:48:76:cc:4f:5f:8d:8e:4a:b0:dc:
d2:66:6d:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARv+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDUwNTIwWhcNMjUxMjEwMDUwNTIwWjAYMRYw
FAYDVQQDEw02NzY0ZmIxNC1iNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3JmU2GC4K8PMab4UMMJw637tzpVcvXuNFAuXnA1oGRcE9zCw5IrTavF6
R8MKYu/RtMFofGJafWISARRvfAcc2EWg7TLTSdvUY8R+dydUMW46tbxUxQaVgaM5
3bHN9LNmNe/HGE214ji3htSFA0Pcd0eH0XO+xi1LmzbPkI2W8iKFU9n2ch7E6Hep
iV3ncq1lMF/DVgksVR4WmNdiH66TG2NuH/TfhHfZ00ktywf5b6gyIyM63pMx7nZb
5+Iam1ILhYhGz1ZXIb/vGTe5aMxPQ0FItiyIZ9/4qVwxZNtteh9XSrwsfDSaW+OT
8MYYpHhCRNlBqlGQCPBh2rmT7iB5wQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLwH
3biWkuOsfgOYCoIZ55z1AnGpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNERENDQxQ0JFOTAxMUVGQUNCN0YzOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlKsMA0GCSqGSIb3DQEB
CwUAA4IBAQCILRf8L+9LI+5hraI3ppZhUrPRskHBtUd6MmIIQCuIfiMKmT/cTx5s
XOD1KIZXdg1zdcsBVyJ7PLjJBTNhDMHWH9RxzVMDKSEDqH58gvvnMdXmSlx26REV
ulorRBtVSVuJyImXjCMfKzmFuKFD7PFK83dMQFYxjmisjqnEOpuCjUbUZwx5imA9
J5734zxnTSFSAzhst2ucjwmRj31gSYZRNM5DUTXuIVtRDBMKAJ8FKwkjW9rYDgDy
RrC8n5P2awTiOGCpvX3o5kn+IYzauEUkM1hz7VAf4Yy2RjC2wrqTs4N7EO2U5KVy
2oBTf9pbNeWnDEh2zE9fjY5KsNzSZm1r
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:55:27 2025 by rpki-client on console.sobornost.net