Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B74BC60245811F09E12B599DAE4EC9C.roa
File: 9B74BC60245811F09E12B599DAE4EC9C.roa (raw, json)
Hash identifier: DYTxoiAJJ1Csd9kcWTINMPVHXiT3csOm5FLb1mBqmWI=
Subject key identifier: EA:2F:E0:91:09:71:57:27:56:9D:8C:76:41:1A:C8:48:60:7D:98:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B74BC60245811F09E12B599DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 17:45:44 +0000
ROA not before: Mon 28 Apr 2025 17:45:39 +0000
ROA not after: Wed 04 Jun 2025 17:45:39 +0000
asID: 202656
IP address blocks: 154.219.194.0/24 maxlen: 24
154.219.196.0/24 maxlen: 24
154.219.198.0/24 maxlen: 24
154.219.199.0/24 maxlen: 24
154.219.200.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.219.204.0/24 maxlen: 24
154.219.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97353 (0x17c49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 17:45:39 2025 GMT
Not After : Jun 4 17:45:39 2025 GMT
Subject: CN=680fbec7-2028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:71:47:9b:69:b8:de:47:bf:f8:1c:d3:26:2b:
e7:20:7a:4f:4f:86:dd:37:02:76:6f:a6:63:cd:68:
cd:d1:af:dd:2b:4e:dc:4c:53:69:59:ce:3a:e6:79:
e6:09:1d:8c:39:05:92:83:b2:13:ef:7b:82:b9:9f:
ba:44:a6:7e:be:ad:3b:8d:10:58:fc:fa:bd:ce:d9:
ab:44:b1:f2:4b:1e:93:56:29:1f:c3:51:52:2b:c9:
f7:11:1a:2f:f5:56:ac:18:56:82:61:27:77:01:9e:
9c:c0:8f:21:58:a2:b8:3b:45:a1:74:51:ef:32:0e:
2e:bb:28:63:c9:10:8f:d3:1e:02:18:25:01:f2:57:
cb:05:61:44:a6:c7:31:9b:8f:bc:3f:74:8e:6c:fa:
5e:6c:b0:29:ff:a5:60:b8:8a:4e:3c:1f:f9:59:56:
f0:67:8e:a3:d5:c1:5d:23:56:f3:13:76:3b:22:11:
e1:20:fd:85:f8:48:91:65:31:43:ad:ea:5a:71:40:
f9:7d:ba:20:08:6f:a1:0a:9a:c8:f8:08:ac:0a:dd:
45:af:9f:2b:1f:e2:de:94:be:ee:f7:85:bd:45:f3:
e2:56:67:33:3f:d3:f8:1b:75:a3:6e:5c:50:2d:2b:
85:52:91:82:b5:38:bb:7f:34:e4:ef:db:cc:dc:06:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2F:E0:91:09:71:57:27:56:9D:8C:76:41:1A:C8:48:60:7D:98:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B74BC60245811F09E12B599DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.194.0/24
154.219.196.0/24
154.219.198.0-154.219.205.255
Signature Algorithm: sha256WithRSAEncryption
3b:3e:f4:59:ff:73:fa:ee:bd:d2:7e:49:51:a0:0d:6a:90:d0:
8f:b2:ca:c1:46:ef:7f:64:d1:16:61:3f:77:f9:7a:de:1a:84:
8f:05:3e:38:37:74:8c:90:eb:4a:d9:4a:f6:b8:8b:ad:65:7a:
57:a0:65:76:ac:bf:7b:de:19:bd:16:47:ac:af:6b:a0:57:f8:
15:cd:25:77:ec:80:c1:69:d7:35:06:1a:67:c7:f8:55:08:13:
91:7e:35:a8:19:aa:9e:94:d3:77:0d:28:5c:c7:7a:fd:8f:50:
06:7f:ca:b6:6d:13:74:33:b5:c8:ae:db:b3:65:c3:af:7d:79:
f0:38:18:e4:77:e5:13:ab:a4:71:ae:ce:6d:01:16:c8:d8:ce:
40:ea:32:f3:1c:f0:2b:f2:d0:45:f9:3e:4a:a4:6f:3a:bb:1b:
24:62:48:9e:31:d6:d8:a9:ad:a6:b7:7b:2c:ca:41:5f:d9:c4:
96:6b:bd:24:aa:ae:23:da:a4:96:b1:a8:61:c6:fa:6b:a9:59:
b5:b3:e4:8e:8a:d3:0d:06:51:9c:7c:e6:c7:48:3c:bf:7f:18:
9f:6a:b2:15:09:30:c4:b4:5e:ee:8b:86:7f:ab:08:18:33:6c:
13:04:4a:0f:ac:1c:9c:28:ef:b6:b1:b0:5b:3d:a9:9a:0f:ff:
1a:03:16:c2
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAXxJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTc0NTM5WhcNMjUwNjA0MTc0NTM5WjAYMRYw
FAYDVQQDEw02ODBmYmVjNy0yMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3HFHm2m43ke/+BzTJivnIHpPT4bdNwJ2b6ZjzWjN0a/dK07cTFNpWc46
5nnmCR2MOQWSg7IT73uCuZ+6RKZ+vq07jRBY/Pq9ztmrRLHySx6TVikfw1FSK8n3
ERov9VasGFaCYSd3AZ6cwI8hWKK4O0WhdFHvMg4uuyhjyRCP0x4CGCUB8lfLBWFE
pscxm4+8P3SObPpebLAp/6VguIpOPB/5WVbwZ46j1cFdI1bzE3Y7IhHhIP2F+EiR
ZTFDrepacUD5fbogCG+hCprI+AisCt1Fr58rH+LelL7u94W9RfPiVmczP9P4G3Wj
blxQLSuFUpGCtTi7fzTk79vM3Aa3rQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFOov
4JEJcVcnVp2MdkEayEhgfZgPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Qjc0QkM2MDI0NTgxMUYwOUUxMkI1OTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAmtvCAwQAmtvEMAwDBAGa
28YDBAGa28wwDQYJKoZIhvcNAQELBQADggEBADs+9Fn/c/ruvdJ+SVGgDWqQ0I+y
ysFG739k0RZhP3f5et4ahI8FPjg3dIyQ60rZSva4i61lelegZXasv3veGb0WR6yv
a6BX+BXNJXfsgMFp1zUGGmfH+FUIE5F+NagZqp6U03cNKFzHev2PUAZ/yrZtE3Qz
tciu27Nlw699efA4GOR35ROrpHGuzm0BFsjYzkDqMvMc8Cvy0EX5Pkqkbzq7GyRi
SJ4x1tipraa3eyzKQV/ZxJZrvSSqriPapJaxqGHG+mupWbWz5I6K0w0GUZx85sdI
PL9/GJ9qshUJMMS0Xu6Lhn+rCBgzbBMESg+sHJwo77axsFs9qZoP/xoDFsI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:56:48 2025 by rpki-client on console.sobornost.net