Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3245B6C1DF011F0AE0B4EC1DAE4EC9C.roa
File: C3245B6C1DF011F0AE0B4EC1DAE4EC9C.roa (raw, json)
Hash identifier: e6WdVQUPlj5FEySPZCEnuEkQMt5JsLD7EZURdolYhcA=
Subject key identifier: 4C:18:06:FB:DB:64:06:30:FE:0E:DB:FB:D9:A9:0C:AF:53:30:FE:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3245B6C1DF011F0AE0B4EC1DAE4EC9C.roa
Signing time: Sun 20 Apr 2025 14:07:16 +0000
ROA not before: Sun 20 Apr 2025 14:07:10 +0000
ROA not after: Sun 27 Apr 2025 14:07:10 +0000
asID: 5065
IP address blocks: 154.86.8.0/24 maxlen: 24
154.86.9.0/24 maxlen: 24
154.86.10.0/24 maxlen: 24
154.86.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96810 (0x17a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 14:07:10 2025 GMT
Not After : Apr 27 14:07:10 2025 GMT
Subject: CN=6804ff94-84f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:2e:2d:3b:71:a8:8e:a2:e1:bb:85:c0:43:
e9:be:37:a8:d2:07:58:14:46:35:8f:77:ae:f7:92:
e1:10:9a:f5:69:2b:4e:33:9e:85:bf:4d:9e:bf:53:
89:70:7c:ad:ad:cc:ce:d1:93:07:4e:75:3c:7a:9a:
07:b3:52:af:bb:b5:7e:f7:0d:ed:3f:10:70:94:4f:
b7:f2:e6:c5:6f:ab:a5:3b:e6:4a:7d:2b:e6:0e:84:
a1:68:2f:df:9c:73:7c:15:6c:43:4a:da:23:2e:9c:
c9:29:56:62:66:9d:e6:2d:af:3e:80:6e:03:b0:d4:
b8:40:7d:bf:56:e3:42:f6:10:09:aa:fb:16:a3:ec:
39:06:d6:c0:d6:62:b7:7c:3c:4a:75:35:54:56:91:
46:d7:bb:ac:29:b1:67:e7:f4:a5:dd:9a:91:94:e6:
e3:81:71:17:51:1a:3d:c4:fd:b1:4c:a5:39:74:fd:
3b:46:05:30:e2:e2:06:15:71:b6:bd:76:d4:91:37:
0c:9e:e1:5a:88:97:29:83:a2:4c:ae:47:7d:dd:0e:
c1:64:bf:53:48:a7:14:ed:84:88:74:92:6b:f0:12:
bf:64:80:04:5b:b8:d8:35:29:b7:e9:0c:11:ba:73:
03:19:91:c8:fb:a3:fe:a6:9e:4b:38:4d:1d:1d:e8:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:18:06:FB:DB:64:06:30:FE:0E:DB:FB:D9:A9:0C:AF:53:30:FE:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3245B6C1DF011F0AE0B4EC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.8.0/22
Signature Algorithm: sha256WithRSAEncryption
73:3b:d9:d2:c5:bc:c4:c5:95:d9:74:95:c9:96:c6:46:47:1a:
ae:e1:45:2d:79:00:c6:1e:a1:be:cd:5d:1a:4f:cc:31:92:e6:
c5:ae:db:72:63:91:5b:37:6e:23:b7:35:dc:b4:e9:fb:9b:d6:
b9:89:b0:c9:1c:fb:d7:8f:0e:61:0f:79:56:dc:36:45:dc:97:
4e:ae:63:6a:aa:dd:67:21:34:2a:65:00:fe:3a:af:0d:59:87:
6d:61:4b:21:26:7b:c3:30:7a:35:eb:0e:e9:40:7c:14:3f:1f:
1c:93:2d:61:2a:9f:f7:c0:c1:cc:ad:82:62:2b:a9:fa:5e:83:
f2:ad:a9:6d:d4:54:b6:82:87:8d:94:94:66:1b:fe:a1:53:9a:
a7:cd:f2:5e:04:37:98:36:48:4d:1c:32:3b:48:d7:0f:a7:24:
a9:10:ca:6d:58:ac:f5:64:71:09:9f:db:86:82:54:13:bd:76:
47:5e:26:44:7c:02:b2:46:4e:7d:59:f8:6f:f8:28:6e:f5:47:
66:f4:37:d8:83:99:28:5c:2f:7d:c9:c6:62:fc:08:85:e2:b2:
17:ad:46:65:19:8c:4a:40:cd:2b:0b:19:cb:c4:22:43:a9:b5:
a8:e1:ff:00:f0:fb:1f:9b:38:ed:2a:60:15:f9:6f:31:10:f4:
01:5e:46:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXoqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDIwMTQwNzEwWhcNMjUwNDI3MTQwNzEwWjAYMRYw
FAYDVQQDEw02ODA0ZmY5NC04NGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoeIuLTtxqI6i4buFwEPpvjeo0gdYFEY1j3eu95LhEJr1aStOM56Fv02e
v1OJcHytrczO0ZMHTnU8epoHs1Kvu7V+9w3tPxBwlE+38ubFb6ulO+ZKfSvmDoSh
aC/fnHN8FWxDStojLpzJKVZiZp3mLa8+gG4DsNS4QH2/VuNC9hAJqvsWo+w5BtbA
1mK3fDxKdTVUVpFG17usKbFn5/Sl3ZqRlObjgXEXURo9xP2xTKU5dP07RgUw4uIG
FXG2vXbUkTcMnuFaiJcpg6JMrkd93Q7BZL9TSKcU7YSIdJJr8BK/ZIAEW7jYNSm3
6QwRunMDGZHI+6P+pp5LOE0dHegMgQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEwY
BvvbZAYw/g7b+9mpDK9TMP6/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMzI0NUI2QzFERjAxMUYwQUUwQjRFQzFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlYIMA0GCSqGSIb3DQEB
CwUAA4IBAQBzO9nSxbzExZXZdJXJlsZGRxqu4UUteQDGHqG+zV0aT8wxkubFrtty
Y5FbN24jtzXctOn7m9a5ibDJHPvXjw5hD3lW3DZF3JdOrmNqqt1nITQqZQD+Oq8N
WYdtYUshJnvDMHo16w7pQHwUPx8cky1hKp/3wMHMrYJiK6n6XoPyralt1FS2goeN
lJRmG/6hU5qnzfJeBDeYNkhNHDI7SNcPpySpEMptWKz1ZHEJn9uGglQTvXZHXiZE
fAKyRk59Wfhv+Chu9Udm9DfYg5koXC99ycZi/AiF4rIXrUZlGYxKQM0rCxnLxCJD
qbWo4f8A8PsfmzjtKmAV+W8xEPQBXkbV
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:30 2025 by rpki-client on console.sobornost.net