Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A39F581C5E11F08CEF68BDDAE4EC9C.roa
File: 61A39F581C5E11F08CEF68BDDAE4EC9C.roa (raw, json)
Hash identifier: ilbHiabHFEhXqEfL11TS9szhWtPND/B7fJkcPhEVX6I=
Subject key identifier: D6:16:AE:CC:F3:A2:E0:D9:37:2F:4A:F2:7C:31:E7:9A:48:DE:F3:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A39F581C5E11F08CEF68BDDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:06:54 +0000
ROA not before: Fri 18 Apr 2025 14:06:50 +0000
ROA not after: Wed 21 May 2025 14:06:50 +0000
asID: 57043
IP address blocks: 154.83.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96679 (0x179a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 14:06:50 2025 GMT
Not After : May 21 14:06:50 2025 GMT
Subject: CN=68025c7e-e1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:32:c5:8e:76:14:eb:92:b6:42:d9:2c:c5:
c5:38:f9:90:c0:17:9d:be:49:8b:6f:86:12:09:79:
37:bf:5c:29:82:bc:62:eb:73:85:2c:e4:39:fb:64:
1a:9e:f7:51:2a:d7:6d:03:39:8e:6a:66:43:b2:41:
10:fa:c8:74:ad:cd:36:9e:eb:9e:b7:0f:46:b0:89:
8f:be:a2:c7:f5:6a:de:39:f5:b7:6b:41:72:1e:e3:
64:9e:b6:d4:03:2b:b3:69:6c:1b:b2:17:49:01:f3:
b4:5f:7d:f7:a3:06:8b:20:bc:19:9c:0d:80:a8:ea:
9b:28:24:12:0f:3c:e0:2f:c1:13:af:21:e1:07:48:
84:a5:ff:36:86:81:cf:7a:f1:e8:36:01:6b:26:7b:
05:72:67:48:da:d1:b3:eb:2d:24:4c:ce:81:cd:fa:
0f:5e:e6:f6:15:17:a0:fd:14:1f:d6:63:9f:4b:12:
49:d7:b5:e8:9e:e1:2a:a4:58:41:cf:7a:6d:15:aa:
35:bf:a1:4b:78:c2:1d:38:33:69:2d:ef:47:8e:a7:
62:c7:b9:5a:e8:cd:69:f8:fc:2a:04:11:7b:c2:d9:
e7:65:94:82:eb:72:61:81:44:b9:79:c6:90:f0:19:
37:e0:f3:1a:21:2a:44:e5:6e:bb:05:75:11:c0:d1:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:16:AE:CC:F3:A2:E0:D9:37:2F:4A:F2:7C:31:E7:9A:48:DE:F3:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A39F581C5E11F08CEF68BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.34.0/24
Signature Algorithm: sha256WithRSAEncryption
59:59:29:58:21:80:ae:64:00:14:a3:d4:12:81:38:d1:71:26:
74:d7:b6:d4:57:88:de:04:20:f9:02:ba:a2:d7:04:4b:da:fc:
64:43:6b:52:2f:5d:60:f4:9f:35:54:70:23:6c:03:26:e6:ef:
f8:2f:4c:42:b1:41:3c:6f:e9:5d:4b:2e:c7:8e:52:12:5f:36:
54:31:de:47:ab:15:bd:58:65:c4:ee:7f:64:8a:c0:da:21:83:
f7:d3:99:8c:c0:1d:93:c8:f5:4d:29:20:7b:20:c8:17:b6:d8:
00:78:da:bc:68:fc:33:b0:ff:75:59:37:8a:7e:41:b2:dd:60:
fc:44:46:ca:00:76:1a:93:85:a7:3e:0a:d2:04:11:36:0e:93:
5f:42:7f:74:36:74:9d:63:65:e2:62:6e:12:5d:1f:cb:cc:e9:
60:a4:86:fd:8b:ae:84:b6:10:df:2d:f2:14:0a:90:d0:00:29:
71:d8:8c:be:a1:9e:a8:ad:7c:c2:b2:89:f3:42:4c:ae:b6:86:
86:45:d0:ec:7a:62:6c:db:cc:1d:b5:94:17:9f:cb:94:81:9b:
14:e3:d7:18:23:ce:f1:3b:08:e8:ce:67:d2:9e:41:14:f5:d5:
db:97:78:e3:71:0e:49:1d:a5:99:9e:42:ff:75:aa:b4:06:a0:
f0:4c:1c:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXmnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDE4MTQwNjUwWhcNMjUwNTIxMTQwNjUwWjAYMRYw
FAYDVQQDEw02ODAyNWM3ZS1lMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqXAyxY52FOuStkLZLMXFOPmQwBedvkmLb4YSCXk3v1wpgrxi63OFLOQ5
+2QanvdRKtdtAzmOamZDskEQ+sh0rc02nuuetw9GsImPvqLH9WreOfW3a0FyHuNk
nrbUAyuzaWwbshdJAfO0X333owaLILwZnA2AqOqbKCQSDzzgL8ETryHhB0iEpf82
hoHPevHoNgFrJnsFcmdI2tGz6y0kTM6BzfoPXub2FReg/RQf1mOfSxJJ17XonuEq
pFhBz3ptFao1v6FLeMIdODNpLe9Hjqdix7la6M1p+PwqBBF7wtnnZZSC63JhgUS5
ecaQ8Bk34PMaISpE5W67BXURwNFrKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNYW
rszzouDZNy9K8nwx55pI3vOMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MUEzOUY1ODFDNUUxMUYwOENFRjY4QkREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlMiMA0GCSqGSIb3DQEB
CwUAA4IBAQBZWSlYIYCuZAAUo9QSgTjRcSZ017bUV4jeBCD5Arqi1wRL2vxkQ2tS
L11g9J81VHAjbAMm5u/4L0xCsUE8b+ldSy7HjlISXzZUMd5HqxW9WGXE7n9kisDa
IYP305mMwB2TyPVNKSB7IMgXttgAeNq8aPwzsP91WTeKfkGy3WD8REbKAHYak4Wn
PgrSBBE2DpNfQn90NnSdY2XiYm4SXR/LzOlgpIb9i66EthDfLfIUCpDQAClx2Iy+
oZ6orXzCsonzQkyutoaGRdDsemJs28wdtZQXn8uUgZsU49cYI87xOwjozmfSnkEU
9dXbl3jjcQ5JHaWZnkL/daq0BqDwTBz8
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:52 2025 by rpki-client on console.sobornost.net