Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2CCB8B21C6E11F0A2615EA8DAE4EC9C.roa
File: D2CCB8B21C6E11F0A2615EA8DAE4EC9C.roa (raw, json)
Hash identifier: f+caSXSVRKljsdJitLa/q/AXh8g+Mp9hnFXF0/B0pXY=
Subject key identifier: 4E:96:86:CF:7B:4F:6A:CF:26:3A:4F:02:6E:22:13:06:2C:1F:58:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2CCB8B21C6E11F0A2615EA8DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 16:04:36 +0000
ROA not before: Fri 18 Apr 2025 16:04:32 +0000
ROA not after: Mon 26 May 2025 16:04:32 +0000
asID: 18779
IP address blocks: 154.203.51.0/24 maxlen: 24
154.203.52.0/22 maxlen: 24
154.203.56.0/22 maxlen: 24
154.203.60.0/23 maxlen: 24
154.203.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96712 (0x179c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 16:04:32 2025 GMT
Not After : May 26 16:04:32 2025 GMT
Subject: CN=68027814-dc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:7c:ea:0a:d8:72:1c:fa:b5:1b:af:bd:ca:
14:80:d8:91:c1:64:84:eb:e1:6e:dd:ae:2e:38:14:
99:cb:4c:e8:1d:62:78:b8:05:dd:95:d5:84:8b:35:
5b:7f:53:80:41:ac:02:fa:cf:73:52:52:1c:84:90:
67:e2:0f:fa:28:b3:15:7a:7c:7a:e4:70:bf:1a:c4:
67:66:89:48:c2:b8:2d:70:e9:20:ad:82:1f:50:e3:
2e:d6:fc:23:ba:d3:47:02:7e:83:fc:a1:52:bb:39:
3a:fe:cd:00:f0:8f:e7:48:62:8f:5a:8a:39:80:81:
5c:6c:8c:65:dc:92:1a:65:40:dd:48:96:f3:95:aa:
57:3d:b2:5d:72:9e:86:6e:8f:c6:85:29:37:75:2f:
77:18:50:ab:b9:be:fb:d1:8f:cf:0f:37:17:d9:97:
18:d3:0b:2a:74:a6:f0:cc:93:8d:cb:e2:0c:29:1e:
72:3b:ee:16:36:f0:66:06:7c:1e:7f:51:81:c0:9a:
c5:fd:c1:b9:7b:a2:9b:d6:fb:94:73:d2:e3:a3:22:
5c:c0:d5:16:3c:8e:2a:a2:68:c2:cf:96:8f:5a:cb:
a8:f9:f5:1d:29:f7:f4:e0:15:56:80:9b:b0:92:60:
55:a5:d6:1d:a3:d4:a7:73:c7:d0:e6:69:3c:81:84:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:96:86:CF:7B:4F:6A:CF:26:3A:4F:02:6E:22:13:06:2C:1F:58:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2CCB8B21C6E11F0A2615EA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.51.0-154.203.62.255
Signature Algorithm: sha256WithRSAEncryption
18:39:96:47:04:5d:6b:b8:e0:e8:46:f7:fc:5a:d4:a2:7f:e4:
c0:36:f3:04:6e:98:85:1e:40:5e:f3:37:89:51:94:58:84:dd:
ca:46:c1:ec:af:19:50:bd:53:36:a8:ad:bc:24:99:d1:0e:7f:
be:e6:01:18:67:e7:a2:94:5e:4a:53:31:64:21:57:13:fc:5f:
be:e1:1c:8b:99:fc:29:94:e6:7d:86:db:d2:c3:97:67:aa:4e:
55:46:a2:9b:04:3d:28:23:05:ac:34:8e:1f:16:43:66:7c:5c:
dd:e3:df:5f:fb:7d:e7:d6:01:30:07:1c:29:f3:a0:49:0e:44:
77:6f:6c:7f:19:d2:67:d3:81:02:89:5f:6e:2e:b8:9f:fa:79:
6a:cf:e2:f3:a5:78:e5:7a:7f:d9:2f:5e:05:1f:6a:b7:fb:2f:
49:37:34:9c:10:b7:23:70:9f:e6:a1:ac:f5:e8:7c:bf:e7:0b:
fa:81:9f:71:eb:cd:c8:e6:95:bb:e3:d7:23:b5:97:2f:52:fd:
7c:b2:25:b6:e9:57:8f:3e:cd:68:9b:c5:56:d5:be:05:4e:62:
ed:15:ec:c8:8e:37:82:d5:26:09:6d:02:90:da:77:36:7f:a8:
1c:08:68:0e:d4:36:35:e3:95:1f:66:0f:6b:ef:02:db:51:c0:
f2:bb:d2:a8
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAXnIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDE4MTYwNDMyWhcNMjUwNTI2MTYwNDMyWjAYMRYw
FAYDVQQDEw02ODAyNzgxNC1kYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzAp86grYchz6tRuvvcoUgNiRwWSE6+Fu3a4uOBSZy0zoHWJ4uAXdldWE
izVbf1OAQawC+s9zUlIchJBn4g/6KLMVenx65HC/GsRnZolIwrgtcOkgrYIfUOMu
1vwjutNHAn6D/KFSuzk6/s0A8I/nSGKPWoo5gIFcbIxl3JIaZUDdSJbzlapXPbJd
cp6Gbo/GhSk3dS93GFCrub770Y/PDzcX2ZcY0wsqdKbwzJONy+IMKR5yO+4WNvBm
Bnwef1GBwJrF/cG5e6Kb1vuUc9LjoyJcwNUWPI4qomjCz5aPWsuo+fUdKff04BVW
gJuwkmBVpdYdo9Snc8fQ5mk8gYTB9wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFE6W
hs97T2rPJjpPAm4iEwYsH1g2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMkNDQjhCMjFDNkUxMUYwQTI2MTVFQThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACayzMDBACayz4wDQYJ
KoZIhvcNAQELBQADggEBABg5lkcEXWu44OhG9/xa1KJ/5MA28wRumIUeQF7zN4lR
lFiE3cpGweyvGVC9UzaorbwkmdEOf77mARhn56KUXkpTMWQhVxP8X77hHIuZ/CmU
5n2G29LDl2eqTlVGopsEPSgjBaw0jh8WQ2Z8XN3j31/7fefWATAHHCnzoEkORHdv
bH8Z0mfTgQKJX24uuJ/6eWrP4vOleOV6f9kvXgUfarf7L0k3NJwQtyNwn+ahrPXo
fL/nC/qBn3Hrzcjmlbvj1yO1ly9S/XyyJbbpV48+zWibxVbVvgVOYu0V7MiON4LV
JgltApDadzZ/qBwIaA7UNjXjlR9mD2vvAttRwPK70qg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:48:24 2025 by rpki-client on console.sobornost.net