Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67841746190B11F0B5CBB3B26DB8BCC6.roa
File: 67841746190B11F0B5CBB3B26DB8BCC6.roa (raw, json)
Hash identifier: FGHs32uwy2bf9P3aZ4lJ7wV9YJsFd2dmKxg2NZkMZrk=
Subject key identifier: DA:1E:F3:9E:4F:03:DB:56:F4:1C:D4:08:B4:00:E8:D5:9B:FD:2E:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01791B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67841746190B11F0B5CBB3B26DB8BCC6.roa
Signing time: Mon 14 Apr 2025 08:35:22 +0000
ROA not before: Mon 14 Apr 2025 08:35:18 +0000
ROA not after: Wed 07 May 2025 08:35:18 +0000
asID: 20473
IP address blocks: 154.197.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96539 (0x1791b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 14 08:35:18 2025 GMT
Not After : May 7 08:35:18 2025 GMT
Subject: CN=67fcc8ca-70f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:c2:b4:44:56:09:c5:61:15:62:e1:e1:e2:
dd:97:41:b9:fa:61:43:2a:76:43:52:19:e6:63:0d:
58:f2:37:39:68:8c:a9:3f:45:68:77:57:58:53:22:
a4:86:58:09:83:c6:2e:09:8e:f2:9f:32:b9:e8:66:
b8:4b:7b:6a:2d:89:1d:a9:0f:ff:0c:5c:55:70:d3:
85:88:62:9b:21:6a:7c:b9:72:a9:f4:0d:37:7f:9b:
1b:55:2f:c4:fb:fe:2b:10:ee:af:25:ea:47:2b:87:
20:cc:44:18:a7:85:57:74:29:93:c9:20:f5:0c:64:
a6:b7:f4:dd:bc:17:c5:96:11:45:9b:38:0a:2f:68:
ae:1d:e4:6a:b1:9f:67:03:14:50:41:5c:99:0c:40:
9f:4f:f4:04:30:4b:8a:2a:89:f1:cb:40:0d:92:47:
08:27:4d:e3:07:ac:ff:61:85:a7:ef:0c:53:83:4c:
73:db:d3:a1:c6:1e:de:27:60:05:a8:ea:fe:55:25:
8c:86:71:d2:05:2d:2b:a7:59:87:8e:42:07:d7:70:
ad:b9:2f:20:65:e2:13:3b:8b:4a:0a:50:0d:5a:e1:
3e:fa:2e:b9:7a:34:96:3e:31:04:24:b4:12:3e:23:
ce:25:45:58:a2:c4:7b:27:40:65:0a:75:fc:01:d4:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1E:F3:9E:4F:03:DB:56:F4:1C:D4:08:B4:00:E8:D5:9B:FD:2E:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67841746190B11F0B5CBB3B26DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.88.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:3b:95:81:f9:5f:af:a5:f1:48:20:a5:8b:f9:74:12:e0:16:
7c:70:6f:d5:32:53:bf:2a:8e:93:d0:23:06:64:1a:5a:ce:d5:
d2:af:bc:d8:01:9f:cd:cb:fc:c8:d0:c0:ed:dd:fb:66:31:86:
2d:3b:37:7b:02:30:16:f8:7c:ce:b7:9c:bc:3c:75:a0:97:c0:
5e:51:9c:3b:7c:52:d1:2c:31:50:35:ac:a4:3d:17:ea:ec:77:
a3:59:ed:15:93:26:e3:9b:0e:b0:14:cc:59:1c:86:df:eb:32:
13:c3:cc:bd:e2:df:c4:5a:7a:28:4e:d1:b9:9d:37:32:8d:89:
24:c8:6e:ac:04:c3:a9:dd:44:bc:9c:e2:25:80:4a:ec:8a:65:
02:8b:9d:66:fa:5d:bf:03:8a:e7:50:4f:37:74:cc:4a:d9:0f:
5c:22:f0:df:f1:d9:49:2b:3b:88:a9:03:c0:38:63:23:f6:19:
4d:d0:fe:e9:84:92:18:d8:1e:0a:81:71:32:54:90:73:af:81:
6d:96:e8:e1:ab:73:2f:4c:93:44:39:9c:bf:cb:ad:e8:e3:66:
2c:80:1d:05:6b:f5:a0:6c:93:f0:ff:35:38:38:7b:1b:71:f2:
2e:16:6d:0b:d7:20:9d:51:87:4f:0f:71:ed:0c:45:fb:3f:ea:
c2:a8:dc:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXkbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDE0MDgzNTE4WhcNMjUwNTA3MDgzNTE4WjAYMRYw
FAYDVQQDEw02N2ZjYzhjYS03MGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6YLCtERWCcVhFWLh4eLdl0G5+mFDKnZDUhnmYw1Y8jc5aIypP0Vod1dY
UyKkhlgJg8YuCY7ynzK56Ga4S3tqLYkdqQ//DFxVcNOFiGKbIWp8uXKp9A03f5sb
VS/E+/4rEO6vJepHK4cgzEQYp4VXdCmTySD1DGSmt/TdvBfFlhFFmzgKL2iuHeRq
sZ9nAxRQQVyZDECfT/QEMEuKKonxy0ANkkcIJ03jB6z/YYWn7wxTg0xz29Ohxh7e
J2AFqOr+VSWMhnHSBS0rp1mHjkIH13CtuS8gZeITO4tKClANWuE++i65ejSWPjEE
JLQSPiPOJUVYosR7J0BlCnX8AdTi3QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNoe
855PA9tW9BzUCLQA6NWb/S6bMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Nzg0MTc0NjE5MEIxMUYwQjVDQkIzQjI2REI4QkNDNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVYMA0GCSqGSIb3DQEB
CwUAA4IBAQDAO5WB+V+vpfFIIKWL+XQS4BZ8cG/VMlO/Ko6T0CMGZBpaztXSr7zY
AZ/Ny/zI0MDt3ftmMYYtOzd7AjAW+HzOt5y8PHWgl8BeUZw7fFLRLDFQNaykPRfq
7HejWe0Vkybjmw6wFMxZHIbf6zITw8y94t/EWnooTtG5nTcyjYkkyG6sBMOp3US8
nOIlgErsimUCi51m+l2/A4rnUE83dMxK2Q9cIvDf8dlJKzuIqQPAOGMj9hlN0P7p
hJIY2B4KgXEyVJBzr4Ftlujhq3MvTJNEOZy/y63o42YsgB0Fa/WgbJPw/zU4OHsb
cfIuFm0L1yCdUYdPD3HtDEX7P+rCqNxP
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:54 2025 by rpki-client on console.sobornost.net