Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084731D41F4E11F0809CEAE7DAE4EC9C.roa
File: 084731D41F4E11F0809CEAE7DAE4EC9C.roa (raw, json)
Hash identifier: yFILQsNXF0zdwuLwOqoKgP/EnBAZZvCf6gpt1J0wb9Y=
Subject key identifier: 5D:3C:3B:14:76:A6:0D:5E:40:42:90:76:B5:6C:8B:78:76:F7:33:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084731D41F4E11F0809CEAE7DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 07:47:26 +0000
ROA not before: Tue 22 Apr 2025 07:47:21 +0000
ROA not after: Tue 27 May 2025 07:47:21 +0000
asID: 395886
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96878 (0x17a6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 07:47:21 2025 GMT
Not After : May 27 07:47:21 2025 GMT
Subject: CN=6807498e-a721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:01:0e:1c:10:62:43:4d:49:ac:eb:37:b3:
f6:d1:b2:cb:c8:01:53:89:f5:99:68:66:d3:d8:e3:
37:fa:d1:08:ee:48:54:83:e4:f0:d0:29:b7:3f:21:
31:1a:44:db:55:4f:e3:66:59:13:8c:51:30:2e:82:
54:f9:d4:1f:d7:5c:c4:91:92:58:d4:6c:9b:04:d6:
c7:a3:d1:c2:0d:7d:6a:61:5c:5a:d9:f4:bd:16:8b:
a6:2b:d0:fd:7f:29:a8:fc:d3:5c:50:56:11:5a:40:
c3:0d:fb:0c:d0:e1:5b:40:9e:c4:a2:f2:da:7d:79:
8d:02:b6:56:14:20:50:68:71:0a:67:6c:fe:08:4c:
a8:7f:6e:98:50:30:fa:c7:24:eb:64:2c:82:5c:8f:
68:9e:7d:7a:1b:9e:06:f2:dd:8d:fa:5b:98:07:01:
b7:fa:89:65:39:1f:bb:f1:83:84:a6:fc:b8:7f:3d:
9e:93:e9:99:8b:af:e6:cb:c7:4a:56:c9:31:74:9a:
79:64:4c:5d:6f:dd:00:2f:b4:91:e7:80:19:bf:b7:
6a:85:7c:eb:d1:15:36:32:07:55:1b:20:5e:16:35:
58:ea:87:ae:6b:0a:d0:aa:63:b5:0d:05:57:04:ba:
2f:8a:d4:cc:34:6e:33:7e:08:69:e6:c6:b0:f1:35:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:3B:14:76:A6:0D:5E:40:42:90:76:B5:6C:8B:78:76:F7:33:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084731D41F4E11F0809CEAE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
38:a1:f6:73:e7:92:fa:8e:78:32:77:1b:ff:89:b1:44:b6:4f:
ae:2a:8a:74:06:9e:9e:99:30:32:f1:f2:d4:4c:34:bd:8e:d5:
51:76:b6:0c:2a:4d:3c:80:72:5b:f4:ce:cb:b3:65:e3:99:e9:
dd:fb:29:27:14:13:3e:44:26:6d:71:34:04:b7:19:17:1d:ef:
4f:be:a5:fb:7f:06:76:58:a5:2c:65:fe:1b:a3:ae:1f:71:15:
bd:64:01:71:23:77:12:71:c5:f5:a7:52:a5:9e:2a:e3:31:7c:
aa:84:6a:72:d4:71:3a:55:e7:b8:17:d1:d9:d1:74:90:1f:84:
cd:37:ec:a4:da:72:5b:0f:1b:40:a6:86:08:a8:5a:03:6c:45:
62:50:7b:de:4a:21:33:38:25:df:ea:3e:1a:4c:fc:fb:ee:ca:
91:52:d9:c7:e3:78:56:c9:52:ee:4e:4c:a4:34:d2:c3:7b:1e:
d5:ff:6a:0c:91:0b:31:e9:45:eb:b3:b3:5f:d8:54:8e:d4:5f:
f9:0d:64:02:24:c7:17:51:f9:f1:be:9e:6e:ee:dd:2c:b6:46:
42:9d:1b:05:ee:61:b6:b1:13:33:25:8d:1f:26:54:9d:ca:fa:
f7:c5:f9:c9:5c:2a:b5:01:1b:08:99:04:b1:35:4f:15:3a:86:
ab:38:0e:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXpuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDIyMDc0NzIxWhcNMjUwNTI3MDc0NzIxWjAYMRYw
FAYDVQQDEw02ODA3NDk4ZS1hNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsSQBDhwQYkNNSazrN7P20bLLyAFTifWZaGbT2OM3+tEI7khUg+Tw0Cm3
PyExGkTbVU/jZlkTjFEwLoJU+dQf11zEkZJY1GybBNbHo9HCDX1qYVxa2fS9Foum
K9D9fymo/NNcUFYRWkDDDfsM0OFbQJ7EovLafXmNArZWFCBQaHEKZ2z+CEyof26Y
UDD6xyTrZCyCXI9onn16G54G8t2N+luYBwG3+ollOR+78YOEpvy4fz2ek+mZi6/m
y8dKVskxdJp5ZExdb90AL7SR54AZv7dqhXzr0RU2MgdVGyBeFjVY6oeuawrQqmO1
DQVXBLovitTMNG4zfghp5saw8TUV8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF08
OxR2pg1eQEKQdrVsi3h29zMpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wODQ3MzFENDFGNEUxMUYwODA5Q0VBRTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmttgMA0GCSqGSIb3DQEB
CwUAA4IBAQA4ofZz55L6jngydxv/ibFEtk+uKop0Bp6emTAy8fLUTDS9jtVRdrYM
Kk08gHJb9M7Ls2Xjmend+yknFBM+RCZtcTQEtxkXHe9PvqX7fwZ2WKUsZf4bo64f
cRW9ZAFxI3cSccX1p1KlnirjMXyqhGpy1HE6Vee4F9HZ0XSQH4TNN+yk2nJbDxtA
poYIqFoDbEViUHveSiEzOCXf6j4aTPz77sqRUtnH43hWyVLuTkykNNLDex7V/2oM
kQsx6UXrs7Nf2FSO1F/5DWQCJMcXUfnxvp5u7t0stkZCnRsF7mG2sRMzJY0fJlSd
yvr3xfnJXCq1ARsImQSxNU8VOoarOA4R
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:07 2025 by rpki-client on console.sobornost.net