Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7EB09DC13F111F085A3AA50762E951A.roa
File: D7EB09DC13F111F085A3AA50762E951A.roa (raw, json)
Hash identifier: bLgSh9DBBFMwHlk3STZXDOa0B7uP0Ps/0q4Xq2/OroY=
Subject key identifier: 39:AA:FA:73:DE:F0:84:7D:11:AF:7A:A3:AE:69:B1:70:5C:79:E3:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017843
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7EB09DC13F111F085A3AA50762E951A.roa
Signing time: Mon 07 Apr 2025 20:49:48 +0000
ROA not before: Mon 07 Apr 2025 20:49:44 +0000
ROA not after: Fri 13 Jun 2025 20:49:44 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96323 (0x17843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 20:49:44 2025 GMT
Not After : Jun 13 20:49:44 2025 GMT
Subject: CN=67f43a6c-ed09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:f4:67:08:7d:56:75:c0:40:25:be:af:03:
46:34:9b:45:9b:d3:3e:9c:7e:e3:bc:0c:95:ba:25:
e1:ce:a2:63:cc:4b:73:b8:ab:10:ef:e9:31:3d:af:
77:81:03:ed:51:b3:a3:c4:93:90:dd:8e:8c:8a:7e:
0a:bd:b2:6b:fb:96:80:4a:97:17:20:7a:44:b2:a5:
fe:63:79:0f:ab:ec:a8:fb:7f:8c:dc:c6:fa:44:15:
01:71:a3:10:90:94:6d:e9:5c:4c:40:59:d9:f7:df:
bf:9c:4b:a3:6a:92:1d:87:bd:b6:dd:02:eb:f3:c0:
33:6a:8a:bc:98:b1:05:a0:25:70:9a:04:08:10:81:
bf:3b:1e:58:1c:21:3a:a7:59:47:78:a3:ab:15:30:
51:77:af:71:b7:51:d0:39:e3:2f:7e:1f:bb:1c:26:
f9:86:13:60:0f:59:3c:60:75:94:85:62:1e:dd:41:
50:eb:5b:ca:85:56:17:d2:fb:0e:a3:ad:e1:4a:39:
7f:65:5d:10:f6:b6:bb:bf:af:59:85:9d:a4:3d:56:
16:b9:a1:78:9a:ae:cb:15:d2:38:d7:ff:75:d9:a7:
84:2b:05:58:39:3f:97:5c:52:b4:13:88:92:75:c2:
6b:94:48:41:bf:14:0c:1e:b9:0a:ef:95:89:df:d6:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AA:FA:73:DE:F0:84:7D:11:AF:7A:A3:AE:69:B1:70:5C:79:E3:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7EB09DC13F111F085A3AA50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0-154.91.223.255
Signature Algorithm: sha256WithRSAEncryption
99:01:4b:df:87:f5:f5:f8:cd:eb:28:bc:b0:1a:45:53:41:6a:
c1:74:a5:f2:86:d1:54:be:f4:3d:2c:47:cd:49:1f:b4:9a:36:
1b:88:ea:d2:a1:4c:a9:53:90:a4:20:7d:b0:8e:30:82:ea:a5:
f7:bc:f5:24:12:0d:4f:31:e0:8b:db:4e:ce:22:9c:6a:29:ed:
4b:94:d0:d3:f4:bc:72:16:4c:3a:89:07:2d:33:94:2f:57:d1:
84:e8:af:56:fd:ed:78:c7:c4:75:83:1e:ab:fc:03:ce:e3:49:
4e:5f:c7:2b:0a:cc:21:40:d5:5a:f1:aa:c6:1d:d5:ba:f3:40:
73:54:09:1d:ab:54:bd:4d:cc:ca:0f:e1:a5:a8:b4:81:29:75:
f2:43:ba:4b:a6:0b:7a:c2:34:33:51:5c:39:e5:0d:9c:00:13:
56:d2:4c:8a:8a:ec:5e:c7:c4:26:69:cc:b1:bc:7f:a0:c8:8a:
45:89:d6:57:9f:36:f5:34:f4:87:d7:4d:e3:81:88:2a:88:58:
a8:3e:07:77:f8:49:b8:59:2b:d9:1e:4a:ac:99:95:18:3b:1e:
06:53:0e:f0:9e:bf:14:3f:5a:30:b4:e9:2e:4d:c4:cc:c3:3d:
00:15:29:f4:c2:0d:51:33:13:7a:6e:68:1f:dc:b2:03:61:36:
99:c8:a8:77
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAXhDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA3MjA0OTQ0WhcNMjUwNjEzMjA0OTQ0WjAYMRYw
FAYDVQQDEw02N2Y0M2E2Yy1lZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2uz0Zwh9VnXAQCW+rwNGNJtFm9M+nH7jvAyVuiXhzqJjzEtzuKsQ7+kx
Pa93gQPtUbOjxJOQ3Y6Min4KvbJr+5aASpcXIHpEsqX+Y3kPq+yo+3+M3Mb6RBUB
caMQkJRt6VxMQFnZ99+/nEujapIdh7223QLr88Azaoq8mLEFoCVwmgQIEIG/Ox5Y
HCE6p1lHeKOrFTBRd69xt1HQOeMvfh+7HCb5hhNgD1k8YHWUhWIe3UFQ61vKhVYX
0vsOo63hSjl/ZV0Q9ra7v69ZhZ2kPVYWuaF4mq7LFdI41/912aeEKwVYOT+XXFK0
E4iSdcJrlEhBvxQMHrkK75WJ39b7OQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDmq
+nPe8IR9Ea96o65psXBceeNuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EN0VCMDlEQzEzRjExMUYwODVBM0FBNTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKaW8wDBAWaW8AwDQYJ
KoZIhvcNAQELBQADggEBAJkBS9+H9fX4zesovLAaRVNBasF0pfKG0VS+9D0sR81J
H7SaNhuI6tKhTKlTkKQgfbCOMILqpfe89SQSDU8x4IvbTs4inGop7UuU0NP0vHIW
TDqJBy0zlC9X0YTor1b97XjHxHWDHqv8A87jSU5fxysKzCFA1VrxqsYd1brzQHNU
CR2rVL1NzMoP4aWotIEpdfJDukumC3rCNDNRXDnlDZwAE1bSTIqK7F7HxCZpzLG8
f6DIikWJ1lefNvU09IfXTeOBiCqIWKg+B3f4SbhZK9keSqyZlRg7HgZTDvCevxQ/
WjC06S5NxMzDPQAVKfTCDVEzE3puaB/csgNhNpnIqHc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:18:53 2025 by rpki-client on console.sobornost.net