Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5146310120311F0A96AAF9F762E951A.roa
File: D5146310120311F0A96AAF9F762E951A.roa (raw, json)
Hash identifier: qBhiceQWL6x0sY9B0ilC/4UcE17mSRMcVjam4fpCL38=
Subject key identifier: F2:E4:1B:72:E3:44:CE:A7:AB:40:50:89:3E:D8:0A:CC:AE:3D:DC:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5146310120311F0A96AAF9F762E951A.roa
Signing time: Sat 05 Apr 2025 09:53:32 +0000
ROA not before: Sat 05 Apr 2025 09:53:26 +0000
ROA not after: Wed 14 May 2025 09:53:26 +0000
asID: 397630
IP address blocks: 154.201.32.0/24 maxlen: 24
154.201.35.0/24 maxlen: 24
154.202.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96232 (0x177e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 09:53:26 2025 GMT
Not After : May 14 09:53:26 2025 GMT
Subject: CN=67f0fd9c-9530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:36:d8:d2:6b:68:ee:38:5f:6c:7d:01:68:16:
63:c4:74:e7:1b:44:1c:3f:bf:12:2e:ca:2c:67:4a:
0d:23:ea:8d:8c:21:61:ce:57:0a:8b:17:b8:3a:5a:
d1:1b:1f:6c:86:a4:e0:9e:f5:2f:cd:64:62:0d:fc:
30:1f:54:14:b1:03:93:49:05:87:65:f1:91:5f:f1:
51:62:bc:9e:ad:10:37:06:51:91:19:12:ac:88:fc:
39:56:04:09:54:ec:e5:f4:77:4a:9f:90:82:3e:e5:
ce:38:7e:ba:a7:75:7c:f2:77:34:d7:28:7d:7c:cc:
41:b6:d6:9e:78:21:2c:f7:64:fa:d3:1d:12:85:79:
70:41:29:55:89:04:6c:be:36:00:02:f6:95:02:0a:
08:7a:89:7f:1f:ec:01:c0:06:01:5c:65:64:91:0b:
ee:6f:fa:11:e0:98:55:5c:04:98:d6:7f:a4:ed:3a:
ca:07:9d:49:08:18:9a:67:96:84:01:78:cd:7e:45:
14:9e:05:b7:d7:4f:b4:67:f5:ca:3f:a3:e4:27:64:
52:e9:5b:d2:ba:78:8b:a2:82:c0:5c:1b:21:71:71:
e9:88:8b:f9:47:c6:65:fa:6a:0e:d6:13:d2:49:d7:
3d:d0:a5:fe:a9:c0:74:3a:e4:48:42:ce:08:da:4f:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E4:1B:72:E3:44:CE:A7:AB:40:50:89:3E:D8:0A:CC:AE:3D:DC:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5146310120311F0A96AAF9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.32.0/24
154.201.35.0/24
154.202.64.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:fc:99:a4:bb:18:38:79:c7:bc:36:85:0f:2a:f6:71:1a:84:
07:2b:2e:e5:dd:11:47:44:96:48:85:ee:d5:ef:f3:ba:a3:38:
45:c1:54:f8:b6:7e:fe:d2:21:f4:e6:a0:26:fc:2c:2a:62:5b:
8b:0b:d8:3e:45:9c:cd:22:5e:2f:c6:12:fc:a4:80:76:84:ea:
a4:58:d5:46:3b:31:75:99:a2:ab:ba:a0:58:a1:48:46:db:a1:
a7:13:50:5d:2e:8d:d2:8a:95:de:96:e7:0f:e0:09:8d:fb:b2:
4b:a5:f1:41:a8:f4:9b:fc:93:90:6b:d8:bc:8a:38:be:df:65:
7a:d2:2b:44:34:68:53:5d:51:47:a3:1a:ca:0c:d8:50:16:3f:
8d:ae:ef:19:39:15:36:31:58:79:8b:48:f1:63:a3:7c:46:7f:
a1:22:44:79:3e:1c:62:d8:f2:54:e4:a6:5c:9b:04:47:46:49:
03:94:eb:26:31:78:53:11:bc:0a:9e:70:9c:55:25:ab:4d:cb:
b2:70:28:c7:d7:67:10:4f:ce:b7:06:4c:b8:7a:dd:2b:3b:fb:
c7:72:be:14:14:fe:b0:a1:76:67:52:d8:f1:f1:ea:9b:c3:7d:
6c:a4:87:2f:92:93:56:a3:34:bb:4f:c8:26:50:77:57:9f:5f:
7d:75:c7:b4
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAXfoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA1MDk1MzI2WhcNMjUwNTE0MDk1MzI2WjAYMRYw
FAYDVQQDEw02N2YwZmQ5Yy05NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8jbY0mto7jhfbH0BaBZjxHTnG0QcP78SLsosZ0oNI+qNjCFhzlcKixe4
OlrRGx9shqTgnvUvzWRiDfwwH1QUsQOTSQWHZfGRX/FRYryerRA3BlGRGRKsiPw5
VgQJVOzl9HdKn5CCPuXOOH66p3V88nc01yh9fMxBttaeeCEs92T60x0ShXlwQSlV
iQRsvjYAAvaVAgoIeol/H+wBwAYBXGVkkQvub/oR4JhVXASY1n+k7TrKB51JCBia
Z5aEAXjNfkUUngW310+0Z/XKP6PkJ2RS6VvSuniLooLAXBshcXHpiIv5R8Zl+moO
1hPSSdc90KX+qcB0OuRIQs4I2k+ZVwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFPLk
G3LjRM6nq0BQiT7YCsyuPdxrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENTE0NjMxMDEyMDMxMUYwQTk2QUFGOUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmskgAwQAmskjAwQAmspA
MA0GCSqGSIb3DQEBCwUAA4IBAQC//Jmkuxg4ece8NoUPKvZxGoQHKy7l3RFHRJZI
he7V7/O6ozhFwVT4tn7+0iH05qAm/CwqYluLC9g+RZzNIl4vxhL8pIB2hOqkWNVG
OzF1maKruqBYoUhG26GnE1BdLo3SipXelucP4AmN+7JLpfFBqPSb/JOQa9i8iji+
32V60itENGhTXVFHoxrKDNhQFj+Nru8ZORU2MVh5i0jxY6N8Rn+hIkR5Phxi2PJU
5KZcmwRHRkkDlOsmMXhTEbwKnnCcVSWrTcuycCjH12cQT863Bky4et0rO/vHcr4U
FP6woXZnUtjx8eqbw31spIcvkpNWozS7T8gmUHdXn199dce0
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:57:40 2025 by rpki-client on console.sobornost.net