Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/648525BA120511F091D83CA8762E951A.roa
File: 648525BA120511F091D83CA8762E951A.roa (raw, json)
Hash identifier: zXQ2AztJNv0z5yabuKEAcpgyoXAon/bLlOxg7icnwlk=
Subject key identifier: B4:8D:20:9D:B3:DD:97:65:5E:2D:C6:17:5B:37:09:F4:45:77:BA:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/648525BA120511F091D83CA8762E951A.roa
Signing time: Sat 05 Apr 2025 10:04:42 +0000
ROA not before: Sat 05 Apr 2025 10:04:35 +0000
ROA not after: Wed 14 May 2025 10:04:35 +0000
asID: 397630
IP address blocks: 154.83.44.0/22 maxlen: 24
154.84.132.0/24 maxlen: 24
154.84.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96236 (0x177ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 10:04:35 2025 GMT
Not After : May 14 10:04:35 2025 GMT
Subject: CN=67f1003a-a242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:1f:ea:dd:1f:fa:d5:02:22:9f:ff:92:d4:
58:1b:e0:ca:03:b0:ea:69:57:8b:89:5f:d6:11:67:
33:e8:66:e8:c5:96:d6:79:81:bc:20:bf:7e:09:70:
14:ad:b6:5f:eb:91:96:11:73:91:0c:28:cd:4a:c1:
6c:d3:cf:44:86:6a:f9:b4:17:63:63:55:7d:3a:0b:
e3:9b:74:6a:2e:c0:fa:2c:c2:e3:52:5e:8b:df:54:
f9:0c:59:70:4e:4d:fe:7c:da:7c:d8:fb:e6:53:c7:
fe:4c:67:f2:a6:b2:2b:3c:11:a9:e0:92:91:94:01:
0c:39:a7:11:35:e7:75:42:a2:e1:8f:43:16:f9:3f:
07:4c:7d:83:a3:af:24:94:91:20:9f:62:a0:0c:67:
31:4a:8f:c0:0c:46:e7:63:6d:97:2b:49:2a:a2:4e:
11:5c:47:36:15:bc:89:83:71:54:ea:f0:3f:cf:91:
f4:97:52:10:e2:8c:27:e1:bf:24:9a:2c:9a:81:35:
0f:03:77:ad:73:84:8c:e2:fb:ed:00:82:e7:1d:f5:
63:af:01:0a:fa:bb:97:8a:ed:24:b7:78:eb:3c:b0:
fd:a4:9f:87:b2:ed:cc:c2:34:8c:9b:18:36:f7:9c:
2c:ac:fa:ab:9f:c4:ee:a5:9f:d6:d7:a0:8b:23:e7:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8D:20:9D:B3:DD:97:65:5E:2D:C6:17:5B:37:09:F4:45:77:BA:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/648525BA120511F091D83CA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.44.0/22
154.84.132.0/24
154.84.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:39:00:eb:bb:c7:b5:db:8a:27:4f:22:1b:94:a7:88:46:c6:
bb:6c:4f:03:6c:4f:f8:b3:3b:90:15:63:cc:d3:55:d2:b0:8c:
dc:93:d5:d5:4e:d0:63:07:3f:50:e1:49:dc:72:bf:8b:e7:cd:
51:93:28:8a:98:37:ce:4c:ff:f0:3e:cb:4d:ca:89:61:ea:a1:
49:10:d6:e6:2f:10:a7:88:6b:6d:c2:dd:98:36:eb:45:27:0d:
68:d7:0e:d2:86:c3:37:8d:d0:fc:f4:ab:94:6e:c9:98:1d:1e:
d6:c6:0e:3f:13:68:cd:68:d9:c8:a9:8c:15:3a:fd:e0:56:52:
e1:fc:de:04:6d:cc:9a:49:18:f1:a3:aa:16:59:bb:fd:b5:3f:
7c:6e:c8:37:5c:fb:06:b0:c2:bd:41:bf:d7:c1:5c:d3:76:40:
5f:7b:98:9c:39:58:d6:e7:44:fb:1b:01:e4:fa:c9:b7:28:2b:
94:78:c0:17:3b:a3:1a:d8:d4:4c:63:d5:47:42:ec:51:8e:cd:
a7:20:20:f5:bf:ed:c2:9e:0a:44:d9:64:a0:62:6a:a5:d6:e8:
33:a2:68:37:3a:db:c4:0a:c0:e3:6d:c1:a2:7d:05:e7:4a:9e:
98:ed:a6:69:e5:a1:11:02:1d:2b:80:1b:41:7b:d2:81:f0:11:
63:87:0c:66
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAXfsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA1MTAwNDM1WhcNMjUwNTE0MTAwNDM1WjAYMRYw
FAYDVQQDEw02N2YxMDAzYS1hMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzacf6t0f+tUCIp//ktRYG+DKA7DqaVeLiV/WEWcz6GboxZbWeYG8IL9+
CXAUrbZf65GWEXORDCjNSsFs089Ehmr5tBdjY1V9Ogvjm3RqLsD6LMLjUl6L31T5
DFlwTk3+fNp82PvmU8f+TGfyprIrPBGp4JKRlAEMOacRNed1QqLhj0MW+T8HTH2D
o68klJEgn2KgDGcxSo/ADEbnY22XK0kqok4RXEc2FbyJg3FU6vA/z5H0l1IQ4own
4b8kmiyagTUPA3etc4SM4vvtAILnHfVjrwEK+ruXiu0kt3jrPLD9pJ+Hsu3MwjSM
mxg295wsrPqrn8TupZ/W16CLI+c1MQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFLSN
IJ2z3ZdlXi3GF1s3CfRFd7roMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NDg1MjVCQTEyMDUxMUYwOTFEODNDQTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCmlMsAwQAmlSEAwQAmlSG
MA0GCSqGSIb3DQEBCwUAA4IBAQBsOQDru8e124onTyIblKeIRsa7bE8DbE/4szuQ
FWPM01XSsIzck9XVTtBjBz9Q4Unccr+L581RkyiKmDfOTP/wPstNyolh6qFJENbm
LxCniGttwt2YNutFJw1o1w7ShsM3jdD89KuUbsmYHR7Wxg4/E2jNaNnIqYwVOv3g
VlLh/N4EbcyaSRjxo6oWWbv9tT98bsg3XPsGsMK9Qb/XwVzTdkBfe5icOVjW50T7
GwHk+sm3KCuUeMAXO6Ma2NRMY9VHQuxRjs2nICD1v+3CngpE2WSgYmql1ugzomg3
OtvECsDjbcGifQXnSp6Y7aZp5aERAh0rgBtBe9KB8BFjhwxm
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:44 2025 by rpki-client on console.sobornost.net