Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/B5E34AB41FC411F08383C1F2DAE4EC9C.roa
File: B5E34AB41FC411F08383C1F2DAE4EC9C.roa (raw, json)
Hash identifier: tv2g7fBLEkGwfRIA98uHxsVaQARroQ6iH0sntcIrsFo=
Subject key identifier: 4F:ED:94:0C:4C:5F:E2:75:35:69:94:0A:FF:1A:FA:6B:1E:FD:58:F2
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 05F4
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/B5E34AB41FC411F08383C1F2DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 21:56:58 +0000
ROA not before: Wed 23 Apr 2025 21:56:52 +0000
ROA not after: Thu 23 Oct 2025 21:56:52 +0000
asID: 2914
IP address blocks: 196.44.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1524 (0x5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Apr 23 21:56:52 2025 GMT
Not After : Oct 23 21:56:52 2025 GMT
Subject: CN=680810aa-2978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:fb:14:7b:e7:31:45:16:67:6d:e5:40:b6:
20:89:ae:6c:33:92:61:8e:dd:28:70:10:1d:21:3a:
6e:1b:a3:d9:9d:26:ae:c6:a9:8d:b4:9a:bd:e8:fe:
24:6b:cd:64:64:84:6c:b3:ad:bc:d5:2b:b9:22:06:
f3:d9:c9:0e:c8:5d:08:8a:84:29:63:32:77:ad:3b:
b3:ff:fe:6b:d9:67:73:d7:6e:4e:89:6c:1c:ea:6a:
26:2b:e0:40:0b:b2:b3:a7:03:2c:2b:30:b2:d3:66:
dc:66:e1:8f:81:45:05:f2:ec:50:48:82:2d:2f:da:
ad:f0:42:e6:ca:6a:62:af:e7:a3:d2:09:80:65:ff:
15:ff:42:ee:6c:7c:c0:5a:c5:e9:16:c7:11:7b:6e:
37:9c:e4:bc:1c:f3:54:16:52:03:42:c4:4f:f3:ee:
8e:17:85:09:cc:57:6d:b2:96:8e:f1:00:ab:68:84:
dd:49:f1:47:ec:7d:ec:01:80:85:72:1c:39:e5:8d:
47:e4:59:dc:47:75:e5:f9:cb:0e:13:ad:6f:6d:17:
78:68:3a:b4:dc:74:06:1c:4b:c0:e3:e2:83:80:81:
28:86:22:97:63:6d:ea:cc:a5:71:07:3b:3e:31:6d:
6e:ba:6c:7f:85:4b:26:1a:e0:22:fe:e2:e5:ed:a0:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:94:0C:4C:5F:E2:75:35:69:94:0A:FF:1A:FA:6B:1E:FD:58:F2
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/B5E34AB41FC411F08383C1F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.117.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a9:30:47:c3:58:09:f4:cf:04:8e:9b:45:07:8b:0e:a8:6a:
e6:d1:0d:e9:dc:a6:0b:de:7e:a7:96:5e:29:81:f7:e5:93:6c:
82:af:33:b4:9b:56:48:98:c7:4a:69:2b:76:13:2d:57:b7:a3:
b9:fc:9b:47:80:55:fb:2e:08:75:3e:c5:b2:cc:20:98:a6:d9:
93:b1:16:fb:f1:c9:d0:49:8d:69:e1:77:c0:2f:36:3a:9b:2c:
c3:29:da:49:35:f9:7b:29:a9:26:76:76:12:5d:b8:18:80:20:
36:03:c7:dd:85:d1:a0:ce:73:ac:23:2f:e8:c2:2e:32:24:2f:
24:dd:de:59:7d:34:93:b0:e4:8e:98:d4:ba:ec:8c:69:d9:6c:
b4:75:a0:f5:bb:ca:84:f1:e8:55:db:40:d7:5a:1d:b6:94:d0:
ab:84:bd:2c:76:78:a3:8f:d1:56:72:07:61:fc:ee:1f:d9:6e:
f3:54:21:da:06:96:e7:3c:36:23:aa:cc:9b:30:a3:83:c6:00:
ef:ba:8e:23:c8:92:26:1a:55:1d:d0:15:ea:aa:7b:3f:ee:8c:
2d:9c:75:f7:96:ad:17:9e:be:bc:31:96:37:dc:35:10:2a:30:
5a:cb:3c:1a:0c:09:e4:b8:2d:fd:4b:7b:57:56:66:7e:3b:c0:
40:e1:38:21
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNTA0MjMyMTU2NTJaFw0yNTEwMjMyMTU2NTJaMBgxFjAU
BgNVBAMTDTY4MDgxMGFhLTI5NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDckPsUe+cxRRZnbeVAtiCJrmwzkmGO3ShwEB0hOm4bo9mdJq7GqY20mr3o
/iRrzWRkhGyzrbzVK7kiBvPZyQ7IXQiKhCljMnetO7P//mvZZ3PXbk6JbBzqaiYr
4EALsrOnAywrMLLTZtxm4Y+BRQXy7FBIgi0v2q3wQubKamKv56PSCYBl/xX/Qu5s
fMBaxekWxxF7bjec5Lwc81QWUgNCxE/z7o4XhQnMV22ylo7xAKtohN1J8UfsfewB
gIVyHDnljUfkWdxHdeX5yw4TrW9tF3hoOrTcdAYcS8Dj4oOAgSiGIpdjberMpXEH
Oz4xbW66bH+FSyYa4CL+4uXtoEixAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUT+2U
DExf4nU1aZQK/xr6ax79WPIwHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFL0I1RTM0QUI0MUZDNDExRjA4MzgzQzFGMkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELHUwDQYJKoZIhvcNAQEL
BQADggEBAEOpMEfDWAn0zwSOm0UHiw6oaubRDencpgvefqeWXimB9+WTbIKvM7Sb
VkiYx0ppK3YTLVe3o7n8m0eAVfsuCHU+xbLMIJim2ZOxFvvxydBJjWnhd8AvNjqb
LMMp2kk1+XspqSZ2dhJduBiAIDYDx92F0aDOc6wjL+jCLjIkLyTd3ll9NJOw5I6Y
1LrsjGnZbLR1oPW7yoTx6FXbQNdaHbaU0KuEvSx2eKOP0VZyB2H87h/ZbvNUIdoG
luc8NiOqzJswo4PGAO+6jiPIkiYaVR3QFeqqez/ujC2cdfeWrReevrwxljfcNRAq
MFrLPBoMCeS4Lf1Le1dWZn47wEDhOCE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:38:35 2025 by rpki-client on console.sobornost.net