Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD0A6F5C1E1911F0889C61CDDAE4EC9C.roa
File: DD0A6F5C1E1911F0889C61CDDAE4EC9C.roa (raw, json)
Hash identifier: UXa1EhiXF97Qk12+aNuPJ+JQGPHlVlnx+OK7bblYzVE=
Subject key identifier: 37:D1:18:9E:65:B4:48:0E:21:AD:D5:7C:5E:4E:42:8A:12:81:4C:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD0A6F5C1E1911F0889C61CDDAE4EC9C.roa
Signing time: Sun 20 Apr 2025 19:01:28 +0000
ROA not before: Sun 20 Apr 2025 19:01:23 +0000
ROA not after: Sun 27 Apr 2025 19:01:23 +0000
asID: 39600
IP address blocks: 154.84.148.0/24 maxlen: 24
154.84.149.0/24 maxlen: 24
154.84.150.0/24 maxlen: 24
154.84.151.0/24 maxlen: 24
154.84.188.0/24 maxlen: 24
154.84.189.0/24 maxlen: 24
154.84.190.0/24 maxlen: 24
154.84.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96826 (0x17a3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 19:01:23 2025 GMT
Not After : Apr 27 19:01:23 2025 GMT
Subject: CN=68054488-a4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c4:26:8c:d4:14:85:9e:0b:99:b6:bd:d4:d6:
76:50:08:41:00:d4:4d:9c:c1:36:af:e3:0e:09:24:
5a:f7:6b:fa:4f:d6:45:e8:73:13:75:b1:f0:ec:23:
80:83:bc:34:36:aa:fe:bf:68:eb:69:e7:bf:4e:62:
23:1c:9f:4e:d9:b9:29:57:bc:f8:ed:54:15:2c:05:
7f:ab:df:77:47:0d:ed:6a:2f:67:fc:ff:ef:3f:05:
90:4d:a8:e7:59:4c:05:67:2d:6d:68:66:24:e6:b5:
ab:83:5f:a3:9b:bb:0f:cd:6a:d4:16:27:cd:89:09:
39:a4:41:fb:d8:65:d6:e1:3c:6b:b7:fc:7c:b6:71:
6c:32:8b:83:76:dd:4a:41:05:c6:51:16:85:8f:53:
72:db:11:99:4c:3c:6e:10:9b:01:65:ec:30:e4:d2:
2a:36:0a:f0:a4:6c:49:6b:c8:37:a2:0e:a9:ab:bf:
2f:5d:d0:9e:31:48:c8:a6:38:a9:eb:a1:39:c2:01:
21:44:51:1d:97:af:73:d0:5b:34:6a:46:51:14:17:
a0:4d:c5:73:71:3e:27:4c:ba:df:04:26:03:17:fe:
de:3a:ec:9e:2d:ee:7a:a1:6e:6f:b4:82:2d:07:b3:
0b:a9:a0:37:cf:48:3d:25:a3:aa:c1:90:04:06:4c:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D1:18:9E:65:B4:48:0E:21:AD:D5:7C:5E:4E:42:8A:12:81:4C:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD0A6F5C1E1911F0889C61CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.148.0/22
154.84.188.0/22
Signature Algorithm: sha256WithRSAEncryption
14:d8:71:ab:87:0e:30:f3:b2:8d:db:34:cb:24:f1:fc:e6:de:
0b:1b:47:a5:15:c3:78:61:d9:57:b1:df:7b:11:4b:97:45:de:
bc:48:bf:0c:cf:e5:47:6a:b2:51:15:b6:d5:47:e7:4a:8d:3b:
3c:c9:c1:2e:ea:9c:0e:d3:7e:7c:ed:40:db:a1:75:4b:3e:94:
ea:67:20:ae:51:54:68:f1:eb:9f:1c:eb:83:a2:e4:f9:44:d7:
c0:14:aa:aa:11:f4:c7:f3:2d:77:c0:bb:72:b4:8e:5b:e4:e1:
61:b7:45:ee:5f:4a:01:93:06:26:52:1c:92:9f:e0:41:6d:75:
b0:47:12:29:cc:b7:57:22:fc:9f:a1:ee:16:7e:60:37:55:66:
a6:2c:2e:1a:aa:51:9e:b9:6c:a3:b3:c9:85:73:32:69:ef:55:
9f:e0:82:35:3f:8e:60:ee:66:73:4c:d4:e8:f6:f9:28:46:c1:
dc:56:14:ed:ce:5c:de:af:32:29:5f:3c:15:70:79:28:1f:7d:
0a:27:5e:6c:16:51:e2:3d:69:af:1a:a3:2b:ee:27:9c:29:11:
71:1a:fc:ec:4e:e7:44:23:6f:26:60:15:78:38:c8:b7:90:7c:
cc:d3:98:03:dc:83:58:58:b5:9d:39:92:b3:2c:69:e0:ae:e5:
40:32:dc:9f
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAXo6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDIwMTkwMTIzWhcNMjUwNDI3MTkwMTIzWjAYMRYw
FAYDVQQDEw02ODA1NDQ4OC1hNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4MQmjNQUhZ4Lmba91NZ2UAhBANRNnME2r+MOCSRa92v6T9ZF6HMTdbHw
7COAg7w0Nqr+v2jraee/TmIjHJ9O2bkpV7z47VQVLAV/q993Rw3tai9n/P/vPwWQ
TajnWUwFZy1taGYk5rWrg1+jm7sPzWrUFifNiQk5pEH72GXW4Txrt/x8tnFsMouD
dt1KQQXGURaFj1Ny2xGZTDxuEJsBZeww5NIqNgrwpGxJa8g3og6pq78vXdCeMUjI
pjip66E5wgEhRFEdl69z0Fs0akZRFBegTcVzcT4nTLrfBCYDF/7eOuyeLe56oW5v
tIItB7MLqaA3z0g9JaOqwZAEBkwYdQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFDfR
GJ5ltEgOIa3VfF5OQooSgUwCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERDBBNkY1QzFFMTkxMUYwODg5QzYxQ0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmlSUAwQCmlS8MA0GCSqG
SIb3DQEBCwUAA4IBAQAU2HGrhw4w87KN2zTLJPH85t4LG0elFcN4YdlXsd97EUuX
Rd68SL8Mz+VHarJRFbbVR+dKjTs8ycEu6pwO03587UDboXVLPpTqZyCuUVRo8euf
HOuDouT5RNfAFKqqEfTH8y13wLtytI5b5OFht0XuX0oBkwYmUhySn+BBbXWwRxIp
zLdXIvyfoe4WfmA3VWamLC4aqlGeuWyjs8mFczJp71Wf4II1P45g7mZzTNTo9vko
RsHcVhTtzlzerzIpXzwVcHkoH30KJ15sFlHiPWmvGqMr7iecKRFxGvzsTudEI28m
YBV4OMi3kHzM05gD3INYWLWdOZKzLGngruVAMtyf
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:40:34 2025 by rpki-client on console.sobornost.net