Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F07E67EA201811F096A15BB4DAE4EC9C.roa
File: F07E67EA201811F096A15BB4DAE4EC9C.roa (raw, json)
Hash identifier: +Q0tBuNu3lgxj/HzWFCeLHeszGxGTGUPVwJbZZcuce4=
Subject key identifier: C2:3C:65:9D:33:FD:52:B9:E1:60:72:63:04:7A:8A:BD:45:7C:AD:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017AA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F07E67EA201811F096A15BB4DAE4EC9C.roa
Signing time: Wed 23 Apr 2025 07:59:54 +0000
ROA not before: Wed 23 Apr 2025 07:59:49 +0000
ROA not after: Tue 27 May 2025 07:59:49 +0000
asID: 3257
IP address blocks: 154.206.240.0/21 maxlen: 24
154.206.248.0/21 maxlen: 24
154.208.64.0/21 maxlen: 24
154.208.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96937 (0x17aa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:59:49 2025 GMT
Not After : May 27 07:59:49 2025 GMT
Subject: CN=68089dfa-1bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:e7:ca:2e:4a:87:e8:64:ba:c6:54:6f:07:
93:12:a1:7a:b9:93:55:19:1f:65:74:3d:7e:48:17:
1b:19:c5:70:3c:e7:80:6f:12:7e:40:ff:dd:51:80:
2d:2d:6f:24:ff:7e:48:36:8c:0b:21:af:2b:f0:9d:
35:5c:67:34:c0:fd:38:cc:22:12:3c:f2:08:be:5e:
21:62:e1:84:f7:fc:c1:a8:f7:48:e2:b7:19:e6:a8:
ce:e1:f9:9e:29:c0:b0:ea:20:14:e1:20:a8:ed:8b:
d8:85:fe:c9:67:d2:b7:f6:ba:37:8e:4c:01:d0:9f:
28:3c:9e:9a:17:fa:53:fd:7a:44:5a:e5:8d:76:ce:
81:18:57:18:4b:cd:e1:1c:5e:aa:aa:1b:bc:46:5f:
f2:a1:5a:7b:3e:d7:f8:e9:aa:34:67:e3:ca:b8:d1:
c2:e9:a3:7d:c4:3d:9d:81:44:54:87:db:03:1c:28:
df:58:31:17:36:28:21:52:3a:66:08:37:b7:1e:cb:
18:83:1c:4f:7b:5a:6a:b4:e2:76:01:02:2f:46:ad:
97:97:f7:ef:81:55:4e:3f:d4:c9:3f:1e:e3:ed:5b:
ca:c6:0d:5c:37:7d:cc:48:14:38:c7:1e:e2:e9:8b:
da:5c:39:15:f3:96:3f:e9:36:a4:48:8b:a9:11:c4:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3C:65:9D:33:FD:52:B9:E1:60:72:63:04:7A:8A:BD:45:7C:AD:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F07E67EA201811F096A15BB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.240.0/20
154.208.64.0/21
154.208.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:dc:35:9a:1a:3c:de:97:79:a7:2f:e9:dd:e3:c2:9d:8a:9c:
87:87:c9:85:d1:39:d9:63:b7:8d:db:e9:d8:f6:13:74:bc:d8:
3d:d8:14:4b:bd:4e:fc:6c:b9:28:b0:32:05:b8:76:5a:a6:39:
50:07:1b:4c:f5:d5:8e:bc:72:d6:2e:14:15:31:c2:58:ca:14:
05:10:0a:34:ca:43:82:2d:75:78:2f:36:2f:6c:35:ca:89:58:
63:f1:e2:a5:1e:4a:75:33:0d:92:a6:4c:28:cb:d5:60:ff:e0:
6a:8e:43:c3:0e:6b:b0:20:de:f1:89:df:68:6e:3e:be:41:21:
ab:cb:f1:85:69:bb:11:f1:77:eb:06:75:a5:9e:4c:31:e1:86:
66:fa:1d:89:c5:c1:d2:d4:a6:d3:55:7a:64:54:35:f8:f4:ce:
88:4e:4a:b4:44:34:87:4e:0a:66:21:55:e1:32:89:24:52:0d:
82:50:85:6e:5e:58:59:ba:1c:30:f0:5d:08:12:80:0b:ac:e9:
1c:2a:f8:f4:9e:a8:c6:60:fb:41:60:4f:08:27:35:7e:77:3e:
b8:41:ed:a0:68:57:5b:de:7d:42:ce:65:71:31:23:9a:ea:88:
41:24:d8:37:a9:1c:0f:d8:e7:13:ee:68:3a:3b:cb:e3:0c:7e:
27:1d:da:7f
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAXqpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDIzMDc1OTQ5WhcNMjUwNTI3MDc1OTQ5WjAYMRYw
FAYDVQQDEw02ODA4OWRmYS0xYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxvrnyi5Kh+hkusZUbweTEqF6uZNVGR9ldD1+SBcbGcVwPOeAbxJ+QP/d
UYAtLW8k/35INowLIa8r8J01XGc0wP04zCISPPIIvl4hYuGE9/zBqPdI4rcZ5qjO
4fmeKcCw6iAU4SCo7YvYhf7JZ9K39ro3jkwB0J8oPJ6aF/pT/XpEWuWNds6BGFcY
S83hHF6qqhu8Rl/yoVp7Ptf46ao0Z+PKuNHC6aN9xD2dgURUh9sDHCjfWDEXNigh
UjpmCDe3HssYgxxPe1pqtOJ2AQIvRq2Xl/fvgVVOP9TJPx7j7VvKxg1cN33MSBQ4
xx7i6YvaXDkV85Y/6TakSIupEcSYBQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFMI8
ZZ0z/VK54WByYwR6ir1FfK0qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMDdFNjdFQTIwMTgxMUYwOTZBMTVCQjREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEms7wAwQDmtBAAwQDmtBw
MA0GCSqGSIb3DQEBCwUAA4IBAQBc3DWaGjzel3mnL+nd48KdipyHh8mF0TnZY7eN
2+nY9hN0vNg92BRLvU78bLkosDIFuHZapjlQBxtM9dWOvHLWLhQVMcJYyhQFEAo0
ykOCLXV4LzYvbDXKiVhj8eKlHkp1Mw2Spkwoy9Vg/+BqjkPDDmuwIN7xid9obj6+
QSGry/GFabsR8XfrBnWlnkwx4YZm+h2JxcHS1KbTVXpkVDX49M6ITkq0RDSHTgpm
IVXhMokkUg2CUIVuXlhZuhww8F0IEoALrOkcKvj0nqjGYPtBYE8IJzV+dz64Qe2g
aFdb3n1CzmVxMSOa6ohBJNg3qRwP2OcT7mg6O8vjDH4nHdp/
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:40:41 2025 by rpki-client on console.sobornost.net