Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E252D2235A11F0B8257AF4DAE4EC9C.roa
File: 10E252D2235A11F0B8257AF4DAE4EC9C.roa (raw, json)
Hash identifier: RsRorGHutxrFpKj+gKETXKFw4hTJ8oe4HOM4Q/DcPUQ=
Subject key identifier: 5D:26:F9:A3:9B:8A:70:D4:F3:22:12:22:51:0E:2F:96:48:CA:27:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E252D2235A11F0B8257AF4DAE4EC9C.roa
Signing time: Sun 27 Apr 2025 11:23:39 +0000
ROA not before: Sun 27 Apr 2025 11:23:34 +0000
ROA not after: Wed 07 May 2025 11:23:34 +0000
asID: 54801
IP address blocks: 154.213.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97095 (0x17b47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 27 11:23:34 2025 GMT
Not After : May 7 11:23:34 2025 GMT
Subject: CN=680e13bb-e83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:cd:5e:2e:b3:a9:31:de:b4:1d:d3:66:d2:
46:2a:15:55:66:db:ef:4a:c3:a5:42:e9:58:86:ce:
15:02:3e:4b:26:b0:5b:75:f4:d8:82:7c:e0:eb:d3:
31:b7:cf:3b:74:fc:3a:35:79:1b:cc:8b:89:b1:ef:
3a:45:8b:b3:b4:ee:66:67:08:48:99:07:8f:54:03:
53:de:51:5d:13:4d:5b:a8:eb:ae:7c:8b:66:dc:da:
ac:fb:95:4d:79:13:24:a6:ff:cb:05:04:9a:e2:6d:
ab:f4:34:53:d0:eb:63:20:35:e6:e6:25:fd:f4:9a:
52:b2:c5:b5:14:73:18:99:6c:5f:b7:d0:95:de:56:
04:fd:b1:3c:47:da:fb:d4:b1:1e:8b:f5:6b:7b:41:
e1:5d:6f:ff:6a:54:9c:42:67:92:df:ca:7a:67:d4:
1c:da:f4:87:ac:2b:ed:45:34:b2:ac:95:98:04:f4:
40:38:94:d3:43:9d:27:72:71:de:eb:4d:02:5a:3f:
8b:65:ac:6b:f7:7c:5e:a6:0e:a8:69:49:f0:ec:48:
8d:6f:b7:9b:44:a8:6c:cb:6f:63:48:77:0a:ca:b9:
61:6a:b2:8f:e8:2d:e8:ff:5a:d1:0a:a8:c2:6b:8a:
cf:07:bb:47:a3:c7:0b:5f:4d:47:da:90:92:77:fe:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:26:F9:A3:9B:8A:70:D4:F3:22:12:22:51:0E:2F:96:48:CA:27:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E252D2235A11F0B8257AF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.176.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:4c:a0:bd:bf:18:c8:5d:b6:2f:c5:43:83:b9:74:d6:88:ad:
c5:6f:53:15:f8:76:93:74:6d:91:93:d7:02:3a:24:23:61:79:
18:f3:55:fd:95:bf:ac:d6:75:9f:fc:27:a6:c9:ce:8b:ea:b3:
3f:20:7e:eb:84:43:0d:18:a9:15:d4:82:43:f4:5d:ca:8b:00:
3e:9c:84:5d:3a:69:39:4b:0c:72:f0:52:7c:0e:15:2f:2e:6f:
d3:77:94:89:c8:d3:c9:1d:0d:28:ea:02:6f:73:3b:04:8b:f9:
f4:f8:b5:ec:e0:37:db:ca:ac:4c:21:4f:50:33:f7:dd:d1:53:
a6:28:9c:f7:1f:40:ac:4b:a3:60:e3:a6:56:6d:c0:e7:b9:04:
1b:a5:70:e0:c9:e5:8a:4d:62:1d:10:94:a2:26:f9:7e:d9:d6:
8e:d8:eb:11:e8:97:a3:8b:c3:70:8b:71:08:98:0e:4b:43:8d:
93:52:dc:69:ad:7a:d6:0f:86:ff:40:37:21:ed:62:6e:b7:ac:
a7:f8:c6:e6:74:30:88:e7:64:f4:cf:dc:95:7f:fa:73:f0:ae:
c8:76:1a:df:27:91:86:4b:ab:c9:f9:80:45:11:58:a9:9a:e4:
e3:78:4e:61:53:19:26:d0:c4:b2:b9:12:c6:bc:5f:13:e1:31:
d1:8b:a1:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXtHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI3MTEyMzM0WhcNMjUwNTA3MTEyMzM0WjAYMRYw
FAYDVQQDEw02ODBlMTNiYi1lODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr3PNXi6zqTHetB3TZtJGKhVVZtvvSsOlQulYhs4VAj5LJrBbdfTYgnzg
69Mxt887dPw6NXkbzIuJse86RYuztO5mZwhImQePVANT3lFdE01bqOuufItm3Nqs
+5VNeRMkpv/LBQSa4m2r9DRT0OtjIDXm5iX99JpSssW1FHMYmWxft9CV3lYE/bE8
R9r71LEei/Vre0HhXW//alScQmeS38p6Z9Qc2vSHrCvtRTSyrJWYBPRAOJTTQ50n
cnHe600CWj+LZaxr93xepg6oaUnw7EiNb7ebRKhsy29jSHcKyrlharKP6C3o/1rR
CqjCa4rPB7tHo8cLX01H2pCSd/5VSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF0m
+aObinDU8yISIlEOL5ZIyicpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMEUyNTJEMjIzNUExMUYwQjgyNTdBRjREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmtWwMA0GCSqGSIb3DQEB
CwUAA4IBAQCxTKC9vxjIXbYvxUODuXTWiK3Fb1MV+HaTdG2Rk9cCOiQjYXkY81X9
lb+s1nWf/Cemyc6L6rM/IH7rhEMNGKkV1IJD9F3KiwA+nIRdOmk5Swxy8FJ8DhUv
Lm/Td5SJyNPJHQ0o6gJvczsEi/n0+LXs4DfbyqxMIU9QM/fd0VOmKJz3H0CsS6Ng
46ZWbcDnuQQbpXDgyeWKTWIdEJSiJvl+2daO2OsR6Jeji8Nwi3EImA5LQ42TUtxp
rXrWD4b/QDch7WJut6yn+MbmdDCI52T0z9yVf/pz8K7IdhrfJ5GGS6vJ+YBFEVip
muTjeE5hUxkm0MSyuRLGvF8T4THRi6HA
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:22 2025 by rpki-client on console.sobornost.net