Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4763B2B6245D11F0A0E6A3B7DAE4EC9C.roa
File: 4763B2B6245D11F0A0E6A3B7DAE4EC9C.roa (raw, json)
Hash identifier: RPUU+/XMiBNEHk2SLNE75vwFgm7lVaR1BM1HWu6NG1c=
Subject key identifier: 6E:E2:3B:BF:12:16:55:39:E8:EC:47:07:2C:C8:EB:2C:95:CE:33:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4763B2B6245D11F0A0E6A3B7DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 18:19:10 +0000
ROA not before: Mon 28 Apr 2025 18:19:05 +0000
ROA not after: Wed 04 Jun 2025 18:19:05 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.218.27.0/24 maxlen: 24
154.218.31.0/24 maxlen: 24
154.222.200.0/24 maxlen: 24
154.222.201.0/24 maxlen: 24
154.222.202.0/24 maxlen: 24
154.222.203.0/24 maxlen: 24
154.222.204.0/24 maxlen: 24
154.222.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97373 (0x17c5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 18:19:05 2025 GMT
Not After : Jun 4 18:19:05 2025 GMT
Subject: CN=680fc69e-b52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:3e:18:8d:e1:81:f2:3f:d9:9d:78:7f:3f:
8d:c5:ad:fa:8e:19:b6:2d:51:d9:28:2f:39:c7:1e:
71:95:ec:5d:0c:5a:4d:9c:56:fe:fe:45:34:62:96:
2d:1b:3d:2d:f4:4a:0b:11:e7:bb:9b:c3:29:11:7a:
46:b6:25:cc:02:96:25:d5:77:95:47:20:4b:a6:fe:
bd:ec:76:dd:e3:e1:b6:9e:e7:f6:70:d1:96:81:41:
99:90:d9:97:8a:03:ae:92:84:42:95:d5:7d:e7:f9:
4e:46:81:30:0e:9e:f4:5b:48:bf:42:37:0c:0b:d1:
22:73:5f:08:45:5d:44:67:d3:a6:3c:1d:62:69:67:
eb:67:c8:39:24:c2:c2:c4:bc:02:ff:fd:73:fe:35:
da:4f:b8:72:c5:4f:e9:86:a3:d6:e6:a9:b2:42:d6:
6b:24:b1:de:de:cb:3b:18:e9:a4:a8:f2:11:1f:03:
7b:64:2b:95:ac:76:f6:91:94:60:f1:b3:06:5b:1a:
42:70:d8:f3:90:db:71:79:82:19:68:67:37:a1:c7:
7d:34:a4:13:9c:db:1a:8e:59:0b:80:0c:c1:4c:62:
8e:d1:e1:b9:bd:14:2f:3c:39:31:ba:a8:ff:7c:47:
b2:4c:67:64:c1:f3:ff:bd:b7:40:7b:0c:9e:27:69:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:3B:BF:12:16:55:39:E8:EC:47:07:2C:C8:EB:2C:95:CE:33:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4763B2B6245D11F0A0E6A3B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.27.255
154.218.31.0/24
154.222.200.0-154.222.205.255
Signature Algorithm: sha256WithRSAEncryption
53:3e:c5:cd:56:61:26:81:b1:ef:ec:83:61:67:ae:f4:0a:fc:
80:c5:f5:7a:8c:c9:c0:41:b2:c7:97:6c:ad:ae:4d:6e:5c:2e:
3e:64:c3:1d:92:62:3d:f8:d1:91:41:d2:d1:e4:b4:1b:60:02:
ca:e8:0a:01:7e:ab:9e:90:36:44:db:33:58:9a:c9:86:6c:8b:
59:ff:02:23:c5:90:63:fe:67:81:cd:4c:6c:bc:ea:a5:99:e8:
d7:53:b9:01:98:ac:74:6e:3a:53:97:59:09:da:c5:49:e1:13:
3a:8f:66:18:a6:9b:07:3d:3e:b2:e0:f2:42:a2:17:bf:ed:7e:
76:7c:7f:6f:74:42:d4:19:0a:48:b2:41:1c:8a:61:92:a9:ea:
6e:e7:8c:0c:5e:a1:07:dd:fc:e4:12:40:9a:ee:64:08:a1:bb:
c5:6c:5d:ac:69:f2:16:ba:56:71:e4:41:a1:5f:57:95:bd:e4:
84:22:16:ae:f1:4b:70:c5:39:48:d8:19:1d:ac:a3:46:1b:f7:
b9:59:c7:c7:19:a0:ec:bf:d4:90:03:cf:f9:d5:8e:aa:b1:34:
2d:25:45:db:13:e3:7e:6b:04:1d:31:55:03:b9:9d:42:fe:4b:
ce:2c:4c:da:97:51:97:f2:c1:c5:c2:6a:60:0a:04:83:88:4a:
f7:2f:ec:3c
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAXxdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTgxOTA1WhcNMjUwNjA0MTgxOTA1WjAYMRYw
FAYDVQQDEw02ODBmYzY5ZS1iNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlDg+GI3hgfI/2Z14fz+Nxa36jhm2LVHZKC85xx5xlexdDFpNnFb+/kU0
YpYtGz0t9EoLEee7m8MpEXpGtiXMApYl1XeVRyBLpv697Hbd4+G2nuf2cNGWgUGZ
kNmXigOukoRCldV95/lORoEwDp70W0i/QjcMC9Eic18IRV1EZ9OmPB1iaWfrZ8g5
JMLCxLwC//1z/jXaT7hyxU/phqPW5qmyQtZrJLHe3ss7GOmkqPIRHwN7ZCuVrHb2
kZRg8bMGWxpCcNjzkNtxeYIZaGc3ocd9NKQTnNsajlkLgAzBTGKO0eG5vRQvPDkx
uqj/fEeyTGdkwfP/vbdAewyeJ2m9bQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFG7i
O78SFlU56OxHByzI6yyVzjOBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NzYzQjJCNjI0NUQxMUYwQTBFNkEzQjdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBACa2hkDBAKa2hgDBACa
2h8wDAMEA5reyAMEAZrezDANBgkqhkiG9w0BAQsFAAOCAQEAUz7FzVZhJoGx7+yD
YWeu9Ar8gMX1eozJwEGyx5dsra5NblwuPmTDHZJiPfjRkUHS0eS0G2ACyugKAX6r
npA2RNszWJrJhmyLWf8CI8WQY/5ngc1MbLzqpZno11O5AZisdG46U5dZCdrFSeET
Oo9mGKabBz0+suDyQqIXv+1+dnx/b3RC1BkKSLJBHIphkqnqbueMDF6hB9385BJA
mu5kCKG7xWxdrGnyFrpWceRBoV9Xlb3khCIWrvFLcMU5SNgZHayjRhv3uVnHxxmg
7L/UkAPP+dWOqrE0LSVF2xPjfmsEHTFVA7mdQv5LzixM2pdRl/LBxcJqYAoEg4hK
9y/sPA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:15 2025 by rpki-client on console.sobornost.net