Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CC2C9B015F211F08C0E15FA6DB8BCC6.roa
File: 3CC2C9B015F211F08C0E15FA6DB8BCC6.roa (raw, json)
Hash identifier: j3mSO93VrWHfUZ+8kVVMsz00pKh+7D6OhJDjTt7k+Tc=
Subject key identifier: CA:AC:3F:0D:33:1B:EF:6B:87:A3:60:FB:C6:48:65:D8:A4:40:9D:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CC2C9B015F211F08C0E15FA6DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:57:39 +0000
ROA not before: Thu 10 Apr 2025 09:57:35 +0000
ROA not after: Sat 10 May 2025 09:57:35 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96451 (0x178c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 09:57:35 2025 GMT
Not After : May 10 09:57:35 2025 GMT
Subject: CN=67f79613-2525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:cb:db:1c:8d:58:38:99:64:4d:c2:bb:34:
46:ae:8e:95:33:45:4d:60:2c:dc:09:a2:5a:91:94:
f7:5f:b7:c7:75:b1:15:6b:70:0e:c7:2c:bf:b0:08:
23:28:05:5c:88:08:9a:96:f7:f7:92:2c:5a:fe:ce:
f1:9c:15:e5:14:91:0e:2e:ea:63:d9:04:99:ae:10:
30:3f:41:6f:81:f3:9e:f3:a0:80:b4:4e:93:76:e5:
eb:3c:d4:ec:50:ca:ad:f9:1c:96:d5:f3:12:d1:4f:
f2:8e:b2:5a:78:4c:2b:c3:51:5b:67:30:d3:c0:3a:
87:89:b1:b2:a5:d2:53:12:5d:31:53:61:3c:75:5b:
70:5f:5f:6c:77:f0:80:4c:ea:c6:5a:62:da:68:53:
0e:26:8e:5a:91:ec:8e:49:1c:20:7a:1e:97:8a:de:
17:f3:0d:3f:45:75:6f:bc:32:77:e3:15:a4:e7:49:
70:43:bd:fb:02:7e:54:af:79:a3:f1:bf:ac:d9:51:
8b:64:5e:e2:f9:36:4c:88:19:96:27:3d:d4:48:fb:
b8:b8:c4:f7:7b:e2:1a:08:9e:4d:eb:d3:27:03:3a:
25:65:a9:31:9f:ba:15:7a:ad:3c:52:8f:98:39:e0:
b4:77:2d:7c:e3:b3:87:f7:89:57:57:82:87:c8:2a:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AC:3F:0D:33:1B:EF:6B:87:A3:60:FB:C6:48:65:D8:A4:40:9D:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CC2C9B015F211F08C0E15FA6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:5f:0c:dc:8b:22:93:64:98:d2:00:0e:6d:4a:55:0d:e5:12:
64:2d:84:4b:f3:19:5b:fa:d0:72:28:31:45:a9:b1:9d:4f:1f:
25:cd:71:f6:be:0a:6a:94:48:72:94:c3:45:c1:d0:94:1d:88:
c4:d9:61:b2:5a:7d:78:f0:53:03:32:9c:68:c7:3a:61:59:86:
12:9e:31:18:4d:57:5a:88:df:1d:62:96:0f:4c:91:b5:50:6b:
0e:92:27:be:73:97:b5:9d:91:a3:33:75:4d:bf:8b:c2:29:47:
6b:06:fd:9e:10:ba:f2:f7:0a:22:98:a8:7c:f8:2e:34:85:4f:
44:f5:1a:28:88:54:b8:1b:27:d8:d5:5c:12:af:68:e4:83:1a:
ac:f6:16:14:1a:c5:5e:79:a0:46:62:ba:ee:cb:f0:02:e4:c3:
9f:2b:59:5e:e2:b3:d3:4b:50:3a:4c:ed:2a:be:99:31:b8:f3:
7a:e2:8e:32:c3:af:49:22:26:f0:7e:26:6d:a0:22:51:fc:7c:
d2:24:86:e3:a0:b7:86:b0:5c:65:78:8b:72:63:bf:e5:3c:41:
00:8e:16:05:cc:e7:b4:e3:7d:70:c9:d7:9e:2d:4a:6b:5c:bd:
2d:95:9d:cf:e4:83:41:95:87:8a:9c:f8:49:dd:52:d4:ea:14:
d2:2f:ff:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXjDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDEwMDk1NzM1WhcNMjUwNTEwMDk1NzM1WjAYMRYw
FAYDVQQDEw02N2Y3OTYxMy0yNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0frL2xyNWDiZZE3CuzRGro6VM0VNYCzcCaJakZT3X7fHdbEVa3AOxyy/
sAgjKAVciAialvf3kixa/s7xnBXlFJEOLupj2QSZrhAwP0FvgfOe86CAtE6TduXr
PNTsUMqt+RyW1fMS0U/yjrJaeEwrw1FbZzDTwDqHibGypdJTEl0xU2E8dVtwX19s
d/CATOrGWmLaaFMOJo5akeyOSRwgeh6Xit4X8w0/RXVvvDJ34xWk50lwQ737An5U
r3mj8b+s2VGLZF7i+TZMiBmWJz3USPu4uMT3e+IaCJ5N69MnAzolZakxn7oVeq08
Uo+YOeC0dy1847OH94lXV4KHyCpO1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMqs
Pw0zG+9rh6Ng+8ZIZdikQJ0TMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQ0MyQzlCMDE1RjIxMUYwOEMwRTE1RkE2REI4QkNDNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQBaXwzciyKTZJjSAA5tSlUN5RJkLYRL8xlb+tByKDFFqbGdTx8lzXH2
vgpqlEhylMNFwdCUHYjE2WGyWn148FMDMpxoxzphWYYSnjEYTVdaiN8dYpYPTJG1
UGsOkie+c5e1nZGjM3VNv4vCKUdrBv2eELry9woimKh8+C40hU9E9RooiFS4GyfY
1VwSr2jkgxqs9hYUGsVeeaBGYrruy/AC5MOfK1le4rPTS1A6TO0qvpkxuPN64o4y
w69JIibwfiZtoCJR/HzSJIbjoLeGsFxleItyY7/lPEEAjhYFzOe0431wydeeLUpr
XL0tlZ3P5INBlYeKnPhJ3VLU6hTSL//u
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:13:56 2025 by rpki-client on console.sobornost.net