Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51A0FA3613F011F0BA7CE144762E951A.roa
File: 51A0FA3613F011F0BA7CE144762E951A.roa (raw, json)
Hash identifier: c1yOL2tbUCWHfJ1XLqyXHRplBgLMM8ikmKfkhSTqF34=
Subject key identifier: 9C:3A:DB:85:31:1E:AC:5A:27:38:24:95:2C:18:89:8A:A2:3A:AF:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01783F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51A0FA3613F011F0BA7CE144762E951A.roa
Signing time: Mon 07 Apr 2025 20:38:53 +0000
ROA not before: Mon 07 Apr 2025 20:38:49 +0000
ROA not after: Sun 08 Jun 2025 20:38:49 +0000
asID: 61112
IP address blocks: 154.83.83.0/24 maxlen: 24
154.83.84.0/22 maxlen: 24
154.83.88.0/21 maxlen: 24
154.83.96.0/23 maxlen: 24
154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96319 (0x1783f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 20:38:49 2025 GMT
Not After : Jun 8 20:38:49 2025 GMT
Subject: CN=67f437dd-6ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:42:25:00:3f:51:ca:e4:e2:03:70:da:21:
c8:91:e2:e9:f3:57:ae:ec:fb:bc:f9:ef:3a:41:3d:
36:98:60:44:ad:37:f4:df:d6:8a:a0:9c:49:10:0e:
d4:bd:c9:f7:4b:fb:cf:b8:f7:54:03:5b:b9:3b:b3:
7e:6f:2a:ef:d4:a6:b9:21:4c:d6:fe:dd:e6:32:8f:
51:6e:28:78:6e:b5:63:48:21:92:0a:0f:4c:22:96:
55:c3:2c:b2:fb:62:d1:8a:41:71:c3:f3:5a:10:3a:
be:20:08:e1:92:b3:57:bd:3a:1a:db:88:36:60:fa:
13:55:87:6c:0f:45:00:0b:1f:a5:92:35:7b:50:47:
fb:bb:2a:ad:81:7f:a3:67:b2:a2:d3:82:3b:a3:d3:
00:8d:e8:e7:89:64:f8:3f:ad:69:df:ed:2f:f1:04:
07:e4:17:8c:b5:84:d7:22:55:37:94:b4:5c:25:c1:
b5:0f:9b:1b:98:a3:33:22:6b:a3:2b:7c:44:ac:63:
98:16:3a:b3:51:53:b8:21:0e:bf:fd:39:a0:df:76:
95:33:58:3e:37:8a:87:ef:12:01:a4:95:da:2f:73:
66:37:33:0e:a1:6c:43:b7:82:2b:cc:f6:a4:50:e5:
5e:7c:d7:6c:9f:e8:2c:86:e6:9e:57:7b:e8:ab:99:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:DB:85:31:1E:AC:5A:27:38:24:95:2C:18:89:8A:A2:3A:AF:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51A0FA3613F011F0BA7CE144762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.83.0-154.83.98.255
Signature Algorithm: sha256WithRSAEncryption
22:3d:e3:e3:98:19:ea:ce:2d:03:65:81:83:51:e1:c3:a6:e6:
6f:8c:5e:24:f8:57:05:3a:5e:fd:7d:5d:f4:be:41:ee:d6:ff:
69:47:37:57:08:a5:d9:86:37:00:5f:ae:cd:1c:3f:06:e7:82:
4e:b9:61:d4:89:fc:31:40:ce:42:c4:58:5c:4a:e8:09:1d:fb:
69:0d:65:dc:d6:d1:f4:85:04:ab:9e:5e:a1:75:69:4c:92:14:
99:48:17:10:f8:f5:49:aa:1f:86:f5:95:53:d1:2c:bf:43:a4:
08:48:05:9f:92:9e:3b:9f:19:d9:31:77:c4:d0:3f:47:22:bb:
0f:23:1b:7a:cc:ee:d3:0b:fb:4d:92:18:dc:30:4d:c4:42:33:
ad:45:d9:e6:05:34:56:94:1c:68:55:4f:21:a7:58:f3:5b:d5:
19:22:6f:8d:ae:3c:dc:36:1a:a6:46:f9:f5:e8:d3:55:f9:68:
53:a9:65:8d:a6:d4:76:bd:e0:ec:76:cb:e2:ce:c6:70:1f:74:
ef:c5:d3:11:79:d8:42:16:84:51:20:33:71:79:ee:64:de:35:
36:38:07:80:fd:7d:93:18:4b:53:45:14:23:62:1d:57:fb:1b:
15:19:6d:c2:30:81:a5:33:5b:f2:31:8c:64:f0:0a:ec:e9:a5:
28:64:53:d6
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAXg/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA3MjAzODQ5WhcNMjUwNjA4MjAzODQ5WjAYMRYw
FAYDVQQDEw02N2Y0MzdkZC02ZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApe9CJQA/Ucrk4gNw2iHIkeLp81eu7Pu8+e86QT02mGBErTf039aKoJxJ
EA7Uvcn3S/vPuPdUA1u5O7N+byrv1Ka5IUzW/t3mMo9Rbih4brVjSCGSCg9MIpZV
wyyy+2LRikFxw/NaEDq+IAjhkrNXvToa24g2YPoTVYdsD0UACx+lkjV7UEf7uyqt
gX+jZ7Ki04I7o9MAjejniWT4P61p3+0v8QQH5BeMtYTXIlU3lLRcJcG1D5sbmKMz
ImujK3xErGOYFjqzUVO4IQ6//Tmg33aVM1g+N4qH7xIBpJXaL3NmNzMOoWxDt4Ir
zPakUOVefNdsn+gshuaeV3voq5n1NQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJw6
24UxHqxaJzgklSwYiYqiOq8oMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MUEwRkEzNjEzRjAxMUYwQkE3Q0UxNDQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaU1MDBACaU2IwDQYJ
KoZIhvcNAQELBQADggEBACI94+OYGerOLQNlgYNR4cOm5m+MXiT4VwU6Xv19XfS+
Qe7W/2lHN1cIpdmGNwBfrs0cPwbngk65YdSJ/DFAzkLEWFxK6Akd+2kNZdzW0fSF
BKueXqF1aUySFJlIFxD49UmqH4b1lVPRLL9DpAhIBZ+SnjufGdkxd8TQP0ciuw8j
G3rM7tML+02SGNwwTcRCM61F2eYFNFaUHGhVTyGnWPNb1Rkib42uPNw2GqZG+fXo
01X5aFOpZY2m1Ha94Ox2y+LOxnAfdO/F0xF52EIWhFEgM3F57mTeNTY4B4D9fZMY
S1NFFCNiHVf7GxUZbcIwgaUzW/IxjGTwCuzppShkU9Y=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:21 2025 by rpki-client on console.sobornost.net