Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D61C6C26152311F0B6E1E4176EB8BCC6.roa
File: D61C6C26152311F0B6E1E4176EB8BCC6.roa (raw, json)
Hash identifier: KSmVUdEjkrkyFfpdxmj6hJyfm6nYIfFQfTI3gXKw7/c=
Subject key identifier: 3F:92:DB:A5:D7:BA:63:0D:86:5C:B6:F0:57:84:DC:9E:61:60:51:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01789C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D61C6C26152311F0B6E1E4176EB8BCC6.roa
Signing time: Wed 09 Apr 2025 09:20:11 +0000
ROA not before: Wed 09 Apr 2025 09:20:07 +0000
ROA not after: Fri 16 May 2025 09:20:07 +0000
asID: 395793
IP address blocks: 154.83.8.0/24 maxlen: 24
154.83.9.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.11.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
154.91.152.0/24 maxlen: 24
154.91.153.0/24 maxlen: 24
154.91.154.0/24 maxlen: 24
154.91.155.0/24 maxlen: 24
154.91.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96412 (0x1789c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 09:20:07 2025 GMT
Not After : May 16 09:20:07 2025 GMT
Subject: CN=67f63bcb-33f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:9e:f7:fe:d3:3e:4a:42:f1:7d:91:24:0e:
7e:a5:c9:83:53:90:16:44:c6:b9:76:a5:78:c3:2e:
ae:d2:5f:40:03:1f:19:77:ae:5a:6f:1e:2f:00:a7:
2f:ad:8f:b6:25:4e:bc:33:53:da:20:11:4d:23:64:
c8:0a:4a:2c:26:42:95:ca:21:b7:25:c8:3d:d0:0e:
21:91:93:35:b4:cd:ce:14:6a:9d:91:25:bb:1a:58:
2c:cc:bf:1a:29:68:ce:f8:60:00:33:a8:11:c6:89:
52:e6:89:fa:9a:79:f4:41:ea:0e:80:b7:d6:11:fe:
c8:0c:ea:ec:01:ab:c0:d6:14:e1:b5:ed:cf:22:6e:
f4:de:a1:9b:8b:0f:28:49:96:52:36:ab:05:3f:1e:
25:db:a0:99:a7:5e:bb:fc:8e:e4:8b:f5:95:df:54:
10:da:bf:51:42:89:e8:29:02:5a:2e:9f:ec:fd:93:
6c:fc:13:60:e9:4e:3f:04:14:4e:c1:6c:54:c0:d8:
4f:fb:f3:80:58:43:2c:09:b8:64:c7:ca:5c:a9:96:
d2:58:8c:e2:87:ae:f1:ab:bf:8a:d9:21:5c:ca:01:
9c:d4:57:71:70:b5:e0:f6:55:2f:ac:39:7f:ee:29:
ce:6a:0f:b7:e7:5b:66:41:ce:d1:79:30:bc:6c:2c:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:92:DB:A5:D7:BA:63:0D:86:5C:B6:F0:57:84:DC:9E:61:60:51:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D61C6C26152311F0B6E1E4176EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.8.0/22
154.83.24.0/24
154.91.152.0-154.91.156.255
Signature Algorithm: sha256WithRSAEncryption
9c:03:9b:14:f0:8d:6c:01:90:ac:63:f8:0f:ca:b8:5f:57:9f:
3f:81:f2:55:99:e4:99:bd:7a:af:ca:4f:3a:ea:98:34:d0:c6:
8b:5c:40:1e:6c:1d:4d:d5:ba:ee:c1:82:66:03:93:8d:6a:04:
41:b4:1b:0c:16:33:b7:e4:c3:7f:71:a3:19:22:a7:31:04:48:
ee:60:b8:30:de:c1:94:39:da:79:31:5c:3b:0b:a4:5b:a1:09:
4a:dc:35:47:1d:a2:48:d7:78:2b:e4:9c:21:39:71:32:4d:d6:
68:41:b2:f0:8f:4c:a9:4c:18:f5:9c:bc:c8:56:ef:1f:6f:3c:
10:f6:25:d3:17:6a:f4:c3:2c:4c:15:5e:e4:c3:71:67:32:2d:
c7:29:e1:55:c4:16:aa:72:56:d1:c3:1e:0b:de:56:67:17:8f:
52:41:bb:a8:0a:ef:ed:42:29:5b:f3:a2:1a:0b:26:dc:4b:93:
14:14:79:14:67:c6:1a:4f:59:c7:c6:29:4a:99:c3:e0:09:ae:
9c:d2:d0:3d:69:87:56:af:f3:e1:74:3b:4b:c0:f1:6b:4b:bd:
32:6f:bd:d2:03:37:d2:4a:33:0f:f2:38:1e:5e:52:f2:66:b3:
ee:e2:43:bf:f2:4b:4e:76:26:30:1f:d7:13:ba:b7:0c:6b:ea:
e8:80:32:60
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAXicMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA5MDkyMDA3WhcNMjUwNTE2MDkyMDA3WjAYMRYw
FAYDVQQDEw02N2Y2M2JjYi0zM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoLCe9/7TPkpC8X2RJA5+pcmDU5AWRMa5dqV4wy6u0l9AAx8Zd65abx4v
AKcvrY+2JU68M1PaIBFNI2TICkosJkKVyiG3Jcg90A4hkZM1tM3OFGqdkSW7Glgs
zL8aKWjO+GAAM6gRxolS5on6mnn0QeoOgLfWEf7IDOrsAavA1hThte3PIm703qGb
iw8oSZZSNqsFPx4l26CZp167/I7ki/WV31QQ2r9RQonoKQJaLp/s/ZNs/BNg6U4/
BBROwWxUwNhP+/OAWEMsCbhkx8pcqZbSWIzih67xq7+K2SFcygGc1FdxcLXg9lUv
rDl/7inOag+351tmQc7ReTC8bCyANwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFD+S
26XXumMNhly28FeE3J5hYFE+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENjFDNkMyNjE1MjMxMUYwQjZFMUU0MTc2RUI4QkNDNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCmlMIAwQAmlMYMAwDBAOa
W5gDBACaW5wwDQYJKoZIhvcNAQELBQADggEBAJwDmxTwjWwBkKxj+A/KuF9Xnz+B
8lWZ5Jm9eq/KTzrqmDTQxotcQB5sHU3Vuu7BgmYDk41qBEG0GwwWM7fkw39xoxki
pzEESO5guDDewZQ52nkxXDsLpFuhCUrcNUcdokjXeCvknCE5cTJN1mhBsvCPTKlM
GPWcvMhW7x9vPBD2JdMXavTDLEwVXuTDcWcyLccp4VXEFqpyVtHDHgveVmcXj1JB
u6gK7+1CKVvzohoLJtxLkxQUeRRnxhpPWcfGKUqZw+AJrpzS0D1ph1av8+F0O0vA
8WtLvTJvvdIDN9JKMw/yOB5eUvJms+7iQ7/yS052JjAf1xO6twxr6uiAMmA=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:37 2025 by rpki-client on console.sobornost.net