Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83E0B6BA107311F0B31DB2A5762E951A.roa
File: 83E0B6BA107311F0B31DB2A5762E951A.roa (raw, json)
Hash identifier: ZRFNGV6mvrGD2Bc9Qa1f4gwQ2+q/JShCr7EV4TjHKfc=
Subject key identifier: 6E:77:0A:E8:2F:88:16:20:48:64:2D:88:A5:85:44:D7:C1:D4:E6:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017763
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83E0B6BA107311F0B31DB2A5762E951A.roa
Signing time: Thu 03 Apr 2025 10:07:57 +0000
ROA not before: Thu 03 Apr 2025 10:07:53 +0000
ROA not after: Tue 03 Jun 2025 10:07:53 +0000
asID: 138152
IP address blocks: 154.211.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96099 (0x17763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 10:07:53 2025 GMT
Not After : Jun 3 10:07:53 2025 GMT
Subject: CN=67ee5dfd-7793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:bf:c1:3d:fb:c6:ac:c2:b4:26:22:3f:3a:
b6:63:b3:03:c3:b4:c1:91:0d:b1:a9:90:00:14:52:
ab:3d:45:9a:a9:79:25:76:05:54:78:96:d6:f7:bf:
7c:fe:04:14:3f:63:fb:99:5c:41:ff:55:05:a0:f0:
da:79:f4:57:63:0e:d8:eb:3a:31:f4:6d:06:2b:3d:
99:2c:01:f3:4e:cc:89:5b:cf:43:b5:64:f0:54:29:
06:d7:ae:f7:18:6a:09:05:f7:12:48:dd:95:b0:9c:
a1:b8:e4:a6:29:ca:e6:01:6f:8f:8b:77:8a:5f:31:
b2:8b:69:2c:f2:d5:1d:b5:75:bb:91:31:ae:b2:cc:
eb:8e:b6:cc:89:6e:f4:69:af:43:93:d8:0b:db:1b:
9b:76:eb:71:62:74:0b:cf:da:8e:28:ef:a3:96:dd:
f2:b2:d3:55:9f:18:ca:97:64:8d:e9:58:bf:29:b9:
14:dd:b0:3b:c0:a2:05:81:f8:8d:32:19:6b:b3:bf:
42:d0:d9:3c:eb:7c:d3:a4:c6:df:c2:65:78:ab:10:
8e:bf:97:92:61:3a:8e:03:77:5c:56:ff:ef:c5:fc:
07:fc:63:0a:91:72:d0:75:22:e5:ce:11:13:9d:3a:
6c:93:f5:e2:9b:47:fd:62:12:fa:82:3e:89:09:bc:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:77:0A:E8:2F:88:16:20:48:64:2D:88:A5:85:44:D7:C1:D4:E6:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83E0B6BA107311F0B31DB2A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:fa:c3:62:8e:49:fa:a4:08:53:9a:4e:2e:2f:5d:7d:8d:34:
1a:67:de:d4:c8:bd:9e:23:cd:ef:fc:1a:e3:aa:a9:37:db:0c:
3a:3a:cf:d0:62:32:eb:5d:e0:48:b5:7c:45:0e:19:a5:c6:63:
cf:0d:95:2f:a4:c6:78:3d:74:0c:b4:70:93:50:ef:b0:dc:21:
5c:f5:b6:a6:22:05:77:b3:c8:ba:81:7a:52:1b:4a:96:2c:e9:
5b:d9:44:06:2a:eb:60:67:a3:97:f4:36:bb:33:3b:78:d5:91:
09:85:a2:3b:09:d0:61:5a:af:7a:e3:93:a2:17:4d:52:5b:94:
9a:b4:88:20:d1:e7:53:96:f4:d3:19:9f:cc:4a:56:d8:6b:04:
9e:b4:c8:34:b5:37:fb:61:2b:3d:f3:4c:33:5b:e1:b1:0f:4f:
00:bf:4c:e1:74:01:1e:2f:c9:d9:f6:14:e4:4c:ab:18:01:ec:
d3:ac:22:2f:6a:45:81:b8:56:35:5b:23:31:a8:8f:f0:5f:57:
20:a0:2f:c9:31:b2:3d:35:74:8b:a0:51:ee:1e:ae:a7:dd:8a:
cc:cc:aa:31:c7:df:1f:b9:a7:f0:89:c2:4d:c7:ad:0a:db:99:
e8:b6:92:84:9d:16:e0:66:5c:e0:b3:58:26:0d:fd:ad:62:73:
c9:42:a4:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXdjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDAzMTAwNzUzWhcNMjUwNjAzMTAwNzUzWjAYMRYw
FAYDVQQDEw02N2VlNWRmZC03NzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArQi/wT37xqzCtCYiPzq2Y7MDw7TBkQ2xqZAAFFKrPUWaqXkldgVUeJbW
9798/gQUP2P7mVxB/1UFoPDaefRXYw7Y6zox9G0GKz2ZLAHzTsyJW89DtWTwVCkG
1673GGoJBfcSSN2VsJyhuOSmKcrmAW+Pi3eKXzGyi2ks8tUdtXW7kTGusszrjrbM
iW70aa9Dk9gL2xubdutxYnQLz9qOKO+jlt3ystNVnxjKl2SN6Vi/KbkU3bA7wKIF
gfiNMhlrs79C0Nk863zTpMbfwmV4qxCOv5eSYTqOA3dcVv/vxfwH/GMKkXLQdSLl
zhETnTpsk/Xim0f9YhL6gj6JCbzt5wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG53
CugviBYgSGQtiKWFRNfB1OZHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84M0UwQjZCQTEwNzMxMUYwQjMxREIyQTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMPMA0GCSqGSIb3DQEB
CwUAA4IBAQBs+sNijkn6pAhTmk4uL119jTQaZ97UyL2eI83v/Brjqqk32ww6Os/Q
YjLrXeBItXxFDhmlxmPPDZUvpMZ4PXQMtHCTUO+w3CFc9bamIgV3s8i6gXpSG0qW
LOlb2UQGKutgZ6OX9Da7Mzt41ZEJhaI7CdBhWq9645OiF01SW5SatIgg0edTlvTT
GZ/MSlbYawSetMg0tTf7YSs980wzW+GxD08Av0zhdAEeL8nZ9hTkTKsYAezTrCIv
akWBuFY1WyMxqI/wX1cgoC/JMbI9NXSLoFHuHq6n3YrMzKoxx98fuafwicJNx60K
25notpKEnRbgZlzgs1gmDf2tYnPJQqT6
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:56:28 2025 by rpki-client on console.sobornost.net