Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65CE22C80D2D11F0921F1953762E951A.roa
File: 65CE22C80D2D11F0921F1953762E951A.roa (raw, json)
Hash identifier: QTrJ7HsdUDz4+IRCGbi2xT7GILlV5Iv5h7DesUflNwU=
Subject key identifier: E5:F1:73:A0:C9:E3:FB:3B:A7:CD:46:CD:F5:FA:56:D6:54:92:3D:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017701
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65CE22C80D2D11F0921F1953762E951A.roa
Signing time: Sun 30 Mar 2025 06:08:28 +0000
ROA not before: Sun 30 Mar 2025 06:08:24 +0000
ROA not after: Mon 05 May 2025 06:08:24 +0000
asID: 151419
IP address blocks: 154.88.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96001 (0x17701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 30 06:08:24 2025 GMT
Not After : May 5 06:08:24 2025 GMT
Subject: CN=67e8dfdc-5b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:8a:1b:8e:71:92:3b:4f:4f:d9:01:6e:1f:
0a:a5:95:55:cc:86:cd:b2:b1:9b:ab:f1:f6:b3:56:
29:f4:2a:5b:aa:2a:87:41:82:99:76:23:b6:2e:4d:
24:77:a5:09:dc:9b:f2:eb:23:20:4a:e6:45:cb:91:
55:ad:96:eb:ab:7f:04:6a:c2:db:44:a6:a1:59:8f:
e0:71:31:b7:ba:c0:b3:41:61:fe:41:cc:5f:ef:cb:
40:ad:eb:fa:5e:86:f7:40:cd:c9:04:cb:6c:ab:42:
da:33:43:cb:b7:dd:33:57:4f:38:57:87:de:f8:76:
d7:e7:1f:9e:1a:1d:d8:b6:a6:e0:5d:a7:fb:60:e2:
38:bd:ea:77:0c:1a:05:c1:6f:e1:55:c4:26:a4:68:
42:8e:fc:50:a6:d2:71:ec:1b:ff:22:a5:ed:b0:5c:
76:6a:04:c6:82:77:c9:ca:e6:99:bd:3d:00:cf:06:
bf:46:09:d9:b9:69:13:d5:79:50:36:a9:72:37:b8:
ef:5a:a9:6b:bc:d0:2e:51:34:3d:6b:1e:91:70:82:
cd:37:da:9a:f7:5d:0c:96:51:91:53:85:e4:9b:49:
2c:05:0a:9d:3c:b1:e2:16:0c:39:30:b4:03:09:48:
9e:7d:20:ab:60:cc:8a:f6:ef:a8:5d:4c:65:65:e3:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F1:73:A0:C9:E3:FB:3B:A7:CD:46:CD:F5:FA:56:D6:54:92:3D:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65CE22C80D2D11F0921F1953762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.66.0/23
Signature Algorithm: sha256WithRSAEncryption
76:de:07:bc:66:37:28:a1:90:1c:f8:82:8d:02:51:81:24:6c:
27:f9:3b:5c:39:8e:70:93:a3:78:04:f0:42:40:f4:1f:ca:46:
94:04:58:d2:72:2d:cd:4d:90:f0:e5:b9:38:1c:65:57:42:94:
78:9b:be:b0:a9:b5:3d:37:03:23:b2:41:7e:71:0b:22:78:50:
b4:cb:23:9a:80:43:8e:d6:56:e2:4f:ef:40:4e:7e:39:44:76:
4d:5f:6e:f0:75:d8:16:3f:84:59:67:60:7c:cb:34:cb:c9:03:
aa:c0:76:27:0f:0f:ce:f4:99:bc:35:a2:91:56:2d:1e:a8:8b:
77:4a:4a:78:25:bc:5d:23:9b:c2:cd:22:ea:cc:30:9a:06:9b:
65:05:75:ed:c6:13:68:37:d0:2a:61:46:9d:b6:7b:ba:6c:fc:
a2:34:94:b5:0b:79:6e:65:4e:00:a3:c0:36:50:2a:6f:2c:56:
64:85:49:ae:6c:d5:7e:aa:f1:15:cc:26:c8:ca:1d:a2:c6:1f:
d5:1c:f3:05:d9:af:61:ee:75:b9:c8:e5:5a:66:c9:d2:f2:b5:
0e:46:1e:b3:1e:b2:4f:de:6f:eb:29:f2:86:fc:e5:c3:ce:5e:
00:60:7c:1a:34:2b:ca:28:5e:f2:6e:16:08:d6:a3:61:00:80:
22:d9:3d:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXcBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzMwMDYwODI0WhcNMjUwNTA1MDYwODI0WjAYMRYw
FAYDVQQDEw02N2U4ZGZkYy01YjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyiKKG45xkjtPT9kBbh8KpZVVzIbNsrGbq/H2s1Yp9CpbqiqHQYKZdiO2
Lk0kd6UJ3Jvy6yMgSuZFy5FVrZbrq38EasLbRKahWY/gcTG3usCzQWH+Qcxf78tA
rev6Xob3QM3JBMtsq0LaM0PLt90zV084V4fe+HbX5x+eGh3YtqbgXaf7YOI4vep3
DBoFwW/hVcQmpGhCjvxQptJx7Bv/IqXtsFx2agTGgnfJyuaZvT0Azwa/RgnZuWkT
1XlQNqlyN7jvWqlrvNAuUTQ9ax6RcILNN9qa910MllGRU4Xkm0ksBQqdPLHiFgw5
MLQDCUiefSCrYMyK9u+oXUxlZeNwfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOXx
c6DJ4/s7p81GzfX6VtZUkj3nMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NUNFMjJDODBEMkQxMUYwOTIxRjE5NTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlhCMA0GCSqGSIb3DQEB
CwUAA4IBAQB23ge8ZjcooZAc+IKNAlGBJGwn+TtcOY5wk6N4BPBCQPQfykaUBFjS
ci3NTZDw5bk4HGVXQpR4m76wqbU9NwMjskF+cQsieFC0yyOagEOO1lbiT+9ATn45
RHZNX27wddgWP4RZZ2B8yzTLyQOqwHYnDw/O9Jm8NaKRVi0eqIt3Skp4JbxdI5vC
zSLqzDCaBptlBXXtxhNoN9AqYUadtnu6bPyiNJS1C3luZU4Ao8A2UCpvLFZkhUmu
bNV+qvEVzCbIyh2ixh/VHPMF2a9h7nW5yOVaZsnS8rUORh6zHrJP3m/rKfKG/OXD
zl4AYHwaNCvKKF7ybhYI1qNhAIAi2T3r
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:46 2025 by rpki-client on console.sobornost.net