Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04E4BF2E16AD11F0984638DA6DB8BCC6.roa
File: 04E4BF2E16AD11F0984638DA6DB8BCC6.roa (raw, json)
Hash identifier: 7IOkPn/RVcuIpLZyH07K8h38q5AzLtUKfL5YGFtg5Jk=
Subject key identifier: 92:24:05:0D:9E:25:27:2A:4A:77:D9:F0:4A:97:EB:5A:DA:7D:A1:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04E4BF2E16AD11F0984638DA6DB8BCC6.roa
Signing time: Fri 11 Apr 2025 08:14:42 +0000
ROA not before: Fri 11 Apr 2025 08:14:38 +0000
ROA not after: Sun 22 Jun 2025 08:14:38 +0000
asID: 328608
IP address blocks: 154.214.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96477 (0x178dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 08:14:38 2025 GMT
Not After : Jun 22 08:14:38 2025 GMT
Subject: CN=67f8cf72-cc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:57:ae:22:7d:a3:41:2b:48:fc:69:28:af:
fd:8c:44:2d:12:8f:ca:64:ca:b5:a8:24:67:f9:7a:
74:73:31:32:59:6b:99:69:25:1d:92:a8:5c:ce:6a:
4a:21:31:27:0b:57:60:e3:cf:72:23:77:c5:63:3e:
04:ad:6c:48:af:0e:ca:5c:8d:e3:61:05:06:9d:76:
0c:32:f7:8f:33:af:ce:2a:53:d2:4b:2d:cc:4d:1e:
be:ca:f2:72:a7:26:6d:13:76:43:5d:53:ce:ea:e2:
b3:60:cc:53:1d:4c:ca:e3:3f:a2:b4:9c:d1:33:ce:
15:46:43:32:3f:a2:e7:c6:da:ac:42:65:10:97:3e:
4b:51:18:0e:ed:3c:18:25:00:6b:3f:de:d7:2d:6f:
bb:a4:9b:b1:01:2d:81:93:a8:52:67:21:aa:a4:e6:
a0:8e:7e:6c:f2:20:21:12:dc:6f:c2:96:d8:a9:00:
8d:18:a4:92:14:38:65:6a:fc:8f:93:6f:bd:bf:49:
a4:c8:dd:cf:6d:8e:06:ca:21:2b:0e:6f:9c:e6:6e:
b6:b9:4a:e0:ae:a7:3c:fc:7e:da:b2:6d:f7:ff:48:
79:2f:b8:b2:95:d7:d1:b4:84:4a:f2:95:80:6d:a7:
90:a5:bd:65:70:90:5f:20:32:5b:57:4f:21:f8:11:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:24:05:0D:9E:25:27:2A:4A:77:D9:F0:4A:97:EB:5A:DA:7D:A1:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04E4BF2E16AD11F0984638DA6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7d:5a:6d:c7:2c:a5:c3:06:58:86:3e:d7:5f:1b:d9:5e:01:8e:
fb:3d:d5:ac:d6:36:96:ec:61:33:a4:ab:d7:99:31:b6:7a:a3:
00:9c:fe:ba:49:26:04:60:bb:0d:c4:d2:5f:4d:73:1b:ee:5a:
fc:41:ec:d0:13:55:e0:49:cc:e0:48:a5:42:8e:6b:a6:a1:e3:
b6:f1:7f:47:41:75:fd:c3:66:51:e1:89:b7:56:19:85:80:48:
78:c8:0b:21:33:f5:dc:3a:80:e7:25:37:b0:ad:30:66:0c:66:
ec:94:f2:42:2d:d1:e5:5e:36:d5:6d:80:17:c5:24:30:31:84:
14:54:18:69:4a:a7:10:ad:d4:89:a7:6f:b3:f2:f3:84:67:6a:
28:f6:fb:29:8c:01:f2:82:73:5f:8a:45:dc:a7:62:74:fb:fc:
67:d7:ab:90:99:4a:ce:ea:a9:5c:a2:24:77:47:a5:d3:8d:d5:
28:c1:e8:99:d9:91:ec:02:90:0a:a7:f2:80:ab:9c:3f:d0:bc:
af:56:37:ec:16:f6:b6:06:b2:dd:2e:1e:27:f5:df:cc:c6:3b:
fa:d7:b1:f8:b1:f9:ba:e5:b7:09:86:de:41:00:e4:d6:8e:07:
28:ad:40:0b:93:06:4e:7a:cd:91:ba:39:44:bf:dd:7f:b2:c0:
41:db:d4:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXjdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDExMDgxNDM4WhcNMjUwNjIyMDgxNDM4WjAYMRYw
FAYDVQQDEw02N2Y4Y2Y3Mi1jYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtWtXriJ9o0ErSPxpKK/9jEQtEo/KZMq1qCRn+Xp0czEyWWuZaSUdkqhc
zmpKITEnC1dg489yI3fFYz4ErWxIrw7KXI3jYQUGnXYMMvePM6/OKlPSSy3MTR6+
yvJypyZtE3ZDXVPO6uKzYMxTHUzK4z+itJzRM84VRkMyP6LnxtqsQmUQlz5LURgO
7TwYJQBrP97XLW+7pJuxAS2Bk6hSZyGqpOagjn5s8iAhEtxvwpbYqQCNGKSSFDhl
avyPk2+9v0mkyN3PbY4GyiErDm+c5m62uUrgrqc8/H7asm33/0h5L7iyldfRtIRK
8pWAbaeQpb1lcJBfIDJbV08h+BH+4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJIk
BQ2eJScqSnfZ8EqX61rafaFQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNEU0QkYyRTE2QUQxMUYwOTg0NjM4REE2REI4QkNDNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmtbAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9Wm3HLKXDBliGPtdfG9leAY77PdWs1jaW7GEzpKvXmTG2eqMAnP66
SSYEYLsNxNJfTXMb7lr8QezQE1XgSczgSKVCjmumoeO28X9HQXX9w2ZR4Ym3VhmF
gEh4yAshM/XcOoDnJTewrTBmDGbslPJCLdHlXjbVbYAXxSQwMYQUVBhpSqcQrdSJ
p2+z8vOEZ2oo9vspjAHygnNfikXcp2J0+/xn16uQmUrO6qlcoiR3R6XTjdUoweiZ
2ZHsApAKp/KAq5w/0LyvVjfsFva2BrLdLh4n9d/Mxjv617H4sfm65bcJht5BAOTW
jgcorUALkwZOes2RujlEv91/ssBB29TF
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:06 2025 by rpki-client on console.sobornost.net