Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0ABD741C4D11F0B62D38CDDAE4EC9C.roa
File: 7C0ABD741C4D11F0B62D38CDDAE4EC9C.roa (raw, json)
Hash identifier: WZmXntRGUitqp9WsCMSJhaudGKr6+mWfHEjCZj9dbQA=
Subject key identifier: C1:9D:A5:A4:A7:AB:EB:EF:EC:73:0C:A8:8F:B3:7D:83:19:5D:FD:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017973
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0ABD741C4D11F0B62D38CDDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 12:05:57 +0000
ROA not before: Fri 18 Apr 2025 12:05:53 +0000
ROA not after: Thu 22 May 2025 12:05:53 +0000
asID: 57043
IP address blocks: 154.83.130.0/24 maxlen: 24
154.83.140.0/24 maxlen: 24
154.86.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96627 (0x17973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 12:05:53 2025 GMT
Not After : May 22 12:05:53 2025 GMT
Subject: CN=68024025-d93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:a5:61:76:c6:92:47:d4:42:72:98:71:76:
d1:2b:9b:87:05:ed:82:a4:46:7a:77:ce:10:00:6e:
eb:53:c6:91:b3:11:73:5a:82:a0:9d:00:6f:e5:c9:
75:5e:0e:df:33:4b:03:05:4d:7c:04:d4:ef:db:1c:
d9:cc:f7:7f:83:3c:2d:77:be:32:c3:09:f0:00:bd:
53:c6:ef:93:85:55:24:99:58:c2:4e:b1:4a:72:e1:
67:e8:e4:28:4c:00:50:12:55:12:fe:03:5d:9d:90:
7d:6f:06:56:70:be:41:0b:7d:92:4e:ff:67:26:1a:
0a:ef:5e:07:32:5a:c9:36:37:47:08:3e:66:a4:d1:
0c:5f:00:90:f7:45:ed:a3:8d:9d:02:6d:2d:ed:57:
f7:47:c5:90:a0:da:77:b8:44:8a:38:ed:76:a7:30:
c9:73:6d:66:d8:55:88:14:d7:05:5e:2e:b4:7e:cd:
b8:13:1a:66:7c:97:df:42:be:dc:26:5a:ec:df:ec:
b5:4d:ec:18:48:a8:4d:46:9d:5a:de:dc:ae:71:ee:
b6:ed:dc:32:c5:19:06:57:28:d9:be:20:82:10:5f:
5a:6b:bc:54:72:6b:fb:14:7a:2c:12:0b:31:92:88:
56:af:a4:33:f3:3e:05:a0:f1:ee:3c:1c:94:2a:33:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:A5:A4:A7:AB:EB:EF:EC:73:0C:A8:8F:B3:7D:83:19:5D:FD:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0ABD741C4D11F0B62D38CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.130.0/24
154.83.140.0/24
154.86.2.0/24
Signature Algorithm: sha256WithRSAEncryption
be:2c:42:6d:f8:1b:ec:f2:f0:43:af:95:26:56:4e:11:a1:6c:
ec:84:df:f6:82:02:1b:3d:4e:a3:98:8e:97:30:d2:06:6e:7b:
c0:92:da:b2:97:67:b5:c4:20:0e:11:0e:11:40:42:4f:13:dc:
d8:f0:67:e6:69:4f:72:cb:a0:48:6c:e7:4a:60:92:bc:7a:c4:
5f:8c:9d:7d:4e:7c:9e:c0:bf:c3:2a:7c:97:f2:5c:96:5b:7b:
89:6d:85:e4:64:e5:60:2f:fb:09:5f:61:c5:77:f0:ed:ce:35:
a2:b6:72:d3:db:fc:7d:14:9a:70:75:ff:cc:99:8e:de:44:0f:
7d:81:5e:9f:bf:04:15:dd:45:92:0e:06:ae:25:50:5e:83:45:
6c:c9:4f:53:90:d7:3b:21:4d:6c:40:fe:4e:ae:8f:e9:30:e5:
9a:d5:92:e5:d3:ac:cd:ed:7f:12:51:ca:0b:61:1d:c7:9d:2b:
94:56:5e:4e:64:ab:16:91:7c:5a:3e:86:5c:72:d9:c3:a2:aa:
6d:84:63:07:35:81:f3:7d:ad:23:84:3a:cd:21:0b:36:db:7b:
6c:8c:65:93:88:2c:13:f2:2c:6a:4a:0f:bf:92:b5:b6:d7:90:
4f:46:eb:85:e7:0f:70:2f:21:1b:b6:41:7a:d9:f3:e0:c2:cd:
07:e4:fe:26
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAXlzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDE4MTIwNTUzWhcNMjUwNTIyMTIwNTUzWjAYMRYw
FAYDVQQDEw02ODAyNDAyNS1kOTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz+ilYXbGkkfUQnKYcXbRK5uHBe2CpEZ6d84QAG7rU8aRsxFzWoKgnQBv
5cl1Xg7fM0sDBU18BNTv2xzZzPd/gzwtd74ywwnwAL1Txu+ThVUkmVjCTrFKcuFn
6OQoTABQElUS/gNdnZB9bwZWcL5BC32STv9nJhoK714HMlrJNjdHCD5mpNEMXwCQ
90Xto42dAm0t7Vf3R8WQoNp3uESKOO12pzDJc21m2FWIFNcFXi60fs24ExpmfJff
Qr7cJlrs3+y1TewYSKhNRp1a3tyuce627dwyxRkGVyjZviCCEF9aa7xUcmv7FHos
EgsxkohWr6Qz8z4FoPHuPByUKjPmlQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFMGd
paSnq+vv7HMMqI+zfYMZXf2kMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QzBBQkQ3NDFDNEQxMUYwQjYyRDM4Q0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmlOCAwQAmlOMAwQAmlYC
MA0GCSqGSIb3DQEBCwUAA4IBAQC+LEJt+Bvs8vBDr5UmVk4RoWzshN/2ggIbPU6j
mI6XMNIGbnvAktqyl2e1xCAOEQ4RQEJPE9zY8GfmaU9yy6BIbOdKYJK8esRfjJ19
TnyewL/DKnyX8lyWW3uJbYXkZOVgL/sJX2HFd/DtzjWitnLT2/x9FJpwdf/MmY7e
RA99gV6fvwQV3UWSDgauJVBeg0VsyU9TkNc7IU1sQP5Oro/pMOWa1ZLl06zN7X8S
UcoLYR3HnSuUVl5OZKsWkXxaPoZcctnDoqpthGMHNYHzfa0jhDrNIQs223tsjGWT
iCwT8ixqSg+/krW215BPRuuF5w9wLyEbtkF62fPgws0H5P4m
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:02 2025 by rpki-client on console.sobornost.net