Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BFA8DC8107111F0BB2F5799762E951A.roa
File: 3BFA8DC8107111F0BB2F5799762E951A.roa (raw, json)
Hash identifier: INCFowzPWstPJysP4ku9b0ifoqxB6s3Oqt0x5HgJ2KM=
Subject key identifier: 65:26:92:9F:C7:43:26:B2:7F:C2:E3:21:B0:33:9E:A4:8A:A9:D4:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01775F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BFA8DC8107111F0BB2F5799762E951A.roa
Signing time: Thu 03 Apr 2025 09:51:37 +0000
ROA not before: Thu 03 Apr 2025 09:51:33 +0000
ROA not after: Tue 03 Jun 2025 09:51:33 +0000
asID: 136970
IP address blocks: 154.197.2.0/24 maxlen: 24
154.197.3.0/24 maxlen: 24
154.197.4.0/24 maxlen: 24
154.197.5.0/24 maxlen: 24
154.197.6.0/24 maxlen: 24
154.197.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96095 (0x1775f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 09:51:33 2025 GMT
Not After : Jun 3 09:51:33 2025 GMT
Subject: CN=67ee5a29-d2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:fa:37:0a:74:b6:d3:f8:c2:cc:8f:16:8e:
1f:a3:4a:5f:d5:c7:8d:59:2e:cb:ea:a6:2c:84:ba:
55:b5:04:56:84:a7:7a:a6:b3:51:bf:5a:38:8f:e0:
bd:8c:61:69:50:cb:c0:88:b3:16:ee:f5:38:62:f1:
8a:44:79:69:66:f6:d5:bc:e4:3f:0d:12:57:c4:a1:
4d:39:90:a2:21:83:da:f1:ce:97:15:06:24:d7:93:
6a:3e:72:8b:b3:91:09:31:ce:df:6b:61:81:61:d4:
22:c6:1e:44:ce:03:1f:ae:27:69:60:60:a6:ee:2e:
9b:63:09:8f:99:b7:5b:1f:8e:c1:fc:18:e2:a0:f3:
d6:6e:91:d5:d4:25:ec:69:24:be:f1:a8:2e:e4:1e:
1c:db:7f:71:c3:80:1a:72:54:fa:ac:97:58:7e:e2:
73:39:d3:96:aa:c9:a6:9b:f3:3e:f2:f0:01:03:d9:
0b:1d:87:70:60:79:22:6e:67:9f:2e:e1:e1:52:da:
e6:c4:21:ca:40:d1:91:13:ad:ea:83:79:90:d7:e8:
69:55:1b:57:3c:28:ed:f7:30:ac:f6:17:f6:30:b4:
13:ec:24:99:42:27:1a:c2:ca:1d:7c:84:61:2d:42:
7a:7d:0e:74:81:ef:d8:fc:24:78:c1:ae:51:71:aa:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:26:92:9F:C7:43:26:B2:7F:C2:E3:21:B0:33:9E:A4:8A:A9:D4:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BFA8DC8107111F0BB2F5799762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.2.0-154.197.7.255
Signature Algorithm: sha256WithRSAEncryption
d6:7d:51:31:30:1b:9d:ab:27:ae:82:45:99:55:3f:bd:b4:22:
46:22:ac:93:e5:bc:13:8a:36:f7:c7:24:d6:e5:5a:e5:df:4c:
17:56:02:f2:c2:4a:69:86:7f:7c:1d:6e:49:93:01:90:84:44:
46:6a:36:9f:14:c2:ef:d0:97:4a:2d:69:e7:4a:ca:39:48:d3:
49:31:35:d3:ad:ba:b6:45:6c:57:3e:0b:50:40:83:d8:c6:9e:
ce:4c:9a:fd:4e:ce:0c:f8:ab:2c:3f:03:42:b2:a2:33:38:d9:
7d:13:20:76:42:87:04:77:9e:49:67:52:74:09:5f:22:02:aa:
4c:6c:fe:6d:f7:c6:d1:af:10:f9:99:f6:ad:5e:22:1c:b4:12:
3d:e1:ef:c3:51:ac:b8:be:9a:a7:96:62:22:c0:27:6b:c4:7a:
23:a3:cf:70:11:87:18:ae:ca:8c:89:18:a1:4a:af:79:82:84:
38:89:28:a0:67:72:9d:bf:91:5a:ae:f5:35:df:69:67:25:c5:
b9:4f:85:47:96:81:91:df:68:d6:73:cb:37:a4:b7:58:e2:aa:
80:1d:93:ee:bb:d5:cf:4a:d9:f9:5c:5f:10:71:b3:d9:54:1f:
56:af:2a:b4:d0:82:69:08:87:9b:06:15:be:bb:8e:c8:5f:5c:
e7:80:6f:70
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAXdfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDAzMDk1MTMzWhcNMjUwNjAzMDk1MTMzWjAYMRYw
FAYDVQQDEw02N2VlNWEyOS1kMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtC36Nwp0ttP4wsyPFo4fo0pf1ceNWS7L6qYshLpVtQRWhKd6prNRv1o4
j+C9jGFpUMvAiLMW7vU4YvGKRHlpZvbVvOQ/DRJXxKFNOZCiIYPa8c6XFQYk15Nq
PnKLs5EJMc7fa2GBYdQixh5EzgMfridpYGCm7i6bYwmPmbdbH47B/BjioPPWbpHV
1CXsaSS+8agu5B4c239xw4AaclT6rJdYfuJzOdOWqsmmm/M+8vABA9kLHYdwYHki
bmefLuHhUtrmxCHKQNGRE63qg3mQ1+hpVRtXPCjt9zCs9hf2MLQT7CSZQicawsod
fIRhLUJ6fQ50ge/Y/CR4wa5RcapkCwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGUm
kp/HQyayf8LjIbAznqSKqdQJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQkZBOERDODEwNzExMUYwQkIyRjU3OTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaxQIDBAOaxQAwDQYJ
KoZIhvcNAQELBQADggEBANZ9UTEwG52rJ66CRZlVP720IkYirJPlvBOKNvfHJNbl
WuXfTBdWAvLCSmmGf3wdbkmTAZCEREZqNp8Uwu/Ql0otaedKyjlI00kxNdOturZF
bFc+C1BAg9jGns5Mmv1Ozgz4qyw/A0KyojM42X0TIHZChwR3nklnUnQJXyICqkxs
/m33xtGvEPmZ9q1eIhy0Ej3h78NRrLi+mqeWYiLAJ2vEeiOjz3ARhxiuyoyJGKFK
r3mChDiJKKBncp2/kVqu9TXfaWclxblPhUeWgZHfaNZzyzekt1jiqoAdk+671c9K
2flcXxBxs9lUH1avKrTQgmkIh5sGFb67jshfXOeAb3A=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:03 2025 by rpki-client on console.sobornost.net