Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B194FC1DE511F0BC6863F3DAE4EC9C.roa
File: 22B194FC1DE511F0BC6863F3DAE4EC9C.roa (raw, json)
Hash identifier: Yo0HaRmTMdbYKZvOpz8SX2AafysGgF1YjxN1m/U3Abs=
Subject key identifier: DB:FE:2A:33:E7:9F:83:90:CC:BD:4B:2E:9A:7A:D7:B5:BA:43:04:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B194FC1DE511F0BC6863F3DAE4EC9C.roa
Signing time: Sun 20 Apr 2025 12:44:02 +0000
ROA not before: Sun 20 Apr 2025 12:43:57 +0000
ROA not after: Sun 27 Apr 2025 12:43:57 +0000
asID: 5065
IP address blocks: 154.86.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96806 (0x17a26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 12:43:57 2025 GMT
Not After : Apr 27 12:43:57 2025 GMT
Subject: CN=6804ec12-73eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:1f:4a:38:07:73:12:ed:85:ac:42:d6:37:
d1:d3:22:ec:05:cd:24:f4:2a:cd:e7:70:ef:d9:56:
1f:07:38:a6:96:47:39:9e:27:3b:ee:64:57:d5:3f:
26:fd:da:23:07:40:84:4a:59:8c:f1:53:5a:a5:21:
00:f3:64:38:67:d8:62:88:ba:8e:14:2f:42:25:41:
a9:77:53:3b:2d:8b:a1:9e:e2:81:90:72:9b:1d:22:
e6:a9:a2:e4:39:71:79:92:72:69:37:5e:e5:20:6c:
34:3a:2c:41:05:6c:f1:91:57:d5:f9:30:fd:d9:50:
a6:53:c2:f2:d3:97:b8:b3:82:ec:14:05:73:46:e7:
5b:2c:39:6b:e7:c2:57:f6:91:84:45:31:e6:11:0c:
61:27:63:e2:8a:5f:f7:0c:67:97:68:82:fc:99:20:
56:99:35:b6:3b:92:c4:a5:27:42:92:3d:53:d1:72:
20:15:ca:d4:a9:0a:c8:0d:11:0b:5d:0a:f7:58:86:
e0:03:93:fb:80:2c:7e:89:c6:64:74:0a:fe:49:98:
18:ee:39:52:aa:43:da:48:13:50:42:cc:49:b1:92:
18:81:80:fc:78:23:1d:58:05:e0:3b:c9:31:76:fc:
e2:3d:69:ea:92:44:89:03:c7:5b:66:f4:fe:62:f4:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FE:2A:33:E7:9F:83:90:CC:BD:4B:2E:9A:7A:D7:B5:BA:43:04:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B194FC1DE511F0BC6863F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.109.0/24
Signature Algorithm: sha256WithRSAEncryption
97:04:06:27:39:49:3d:d1:92:3f:7f:fb:98:b4:0f:39:07:98:
48:4d:ce:d5:36:18:86:30:b3:5d:ca:c0:4f:9f:62:5c:a1:3e:
15:c6:26:9e:e4:3c:5b:ac:83:91:c6:88:8b:ec:02:65:ef:4a:
08:9e:6e:df:a0:37:82:2e:74:ed:4b:8c:a9:cb:33:aa:48:40:
cf:9b:3d:1e:58:e1:3b:32:14:17:9f:7d:f3:32:74:5b:a8:4d:
b6:f8:2f:74:98:80:55:5c:4e:21:0b:55:2e:15:d5:86:63:b7:
b1:e8:06:c3:1c:8d:32:55:c9:78:2f:31:24:84:b8:a1:ab:c4:
e9:c9:f7:a7:77:9a:80:66:d2:dc:f9:2c:2d:f0:34:84:99:d7:
e0:77:51:ed:8a:cc:64:9a:b8:5e:24:dc:07:f1:2f:86:6a:c1:
d7:ff:bb:cc:df:48:95:c1:27:1d:b9:77:a9:45:66:ba:89:fe:
4c:2b:5e:08:a6:38:ef:f1:53:c5:a1:4c:74:81:82:07:41:f6:
20:cb:15:8f:11:b5:cd:b1:c8:53:af:b7:f9:51:e1:4c:89:6f:
1f:9e:f7:41:ff:45:30:ba:35:2a:19:3f:07:e6:14:70:bb:80:
ed:88:68:f5:39:af:1b:f9:80:d9:74:3b:ce:b2:06:f7:85:1d:
af:47:2d:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXomMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDIwMTI0MzU3WhcNMjUwNDI3MTI0MzU3WjAYMRYw
FAYDVQQDEw02ODA0ZWMxMi03M2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA25MfSjgHcxLthaxC1jfR0yLsBc0k9CrN53Dv2VYfBzimlkc5nic77mRX
1T8m/dojB0CESlmM8VNapSEA82Q4Z9hiiLqOFC9CJUGpd1M7LYuhnuKBkHKbHSLm
qaLkOXF5knJpN17lIGw0OixBBWzxkVfV+TD92VCmU8Ly05e4s4LsFAVzRudbLDlr
58JX9pGERTHmEQxhJ2Piil/3DGeXaIL8mSBWmTW2O5LEpSdCkj1T0XIgFcrUqQrI
DRELXQr3WIbgA5P7gCx+icZkdAr+SZgY7jlSqkPaSBNQQsxJsZIYgYD8eCMdWAXg
O8kxdvziPWnqkkSJA8dbZvT+YvQwaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNv+
KjPnn4OQzL1LLpp617W6QwSbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMkIxOTRGQzFERTUxMUYwQkM2ODYzRjNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlZtMA0GCSqGSIb3DQEB
CwUAA4IBAQCXBAYnOUk90ZI/f/uYtA85B5hITc7VNhiGMLNdysBPn2JcoT4Vxiae
5DxbrIORxoiL7AJl70oInm7foDeCLnTtS4ypyzOqSEDPmz0eWOE7MhQXn33zMnRb
qE22+C90mIBVXE4hC1UuFdWGY7ex6AbDHI0yVcl4LzEkhLihq8Tpyfend5qAZtLc
+Swt8DSEmdfgd1HtisxkmrheJNwH8S+GasHX/7vM30iVwScduXepRWa6if5MK14I
pjjv8VPFoUx0gYIHQfYgyxWPEbXNschTr7f5UeFMiW8fnvdB/0UwujUqGT8H5hRw
u4DtiGj1Oa8b+YDZdDvOsgb3hR2vRy3J
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:28 2025 by rpki-client on console.sobornost.net