Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11F90708C34A11EF825E5D74762E951A.roa
File: 11F90708C34A11EF825E5D74762E951A.roa (raw, json)
Hash identifier: fyPzRk4rVhWG46KSZkFFcSqyrCyk/OKWwIcknWOxCj0=
Subject key identifier: BC:2D:04:DA:1B:0B:C2:E6:87:74:F7:A3:12:B3:77:FA:11:6F:35:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11F90708C34A11EF825E5D74762E951A.roa
Signing time: Thu 26 Dec 2024 05:27:17 +0000
ROA not before: Thu 26 Dec 2024 05:27:08 +0000
ROA not after: Wed 10 Dec 2025 05:27:08 +0000
asID: 984
IP address blocks: 156.245.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60467 (0xec33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 05:27:08 2024 GMT
Not After : Dec 10 05:27:08 2025 GMT
Subject: CN=676ce935-c3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:8c:98:1d:d9:f9:cf:33:82:d8:73:b5:b1:
40:83:f8:3a:20:f6:95:5e:bc:61:3a:47:72:28:49:
c7:55:59:61:8f:c6:66:b8:ef:de:f9:51:88:71:d1:
3b:8b:37:52:a3:e8:b9:e6:bb:9d:27:25:d7:c5:1a:
59:08:e0:91:00:b3:65:70:a2:bf:18:26:c8:45:1e:
d1:1f:20:de:80:89:9f:31:88:fc:3e:7c:e2:26:66:
50:cc:c7:84:a9:8d:1b:84:44:f3:f8:01:78:84:29:
b4:f1:2a:92:3d:50:d5:45:7d:ca:f5:48:57:23:84:
36:0c:7e:80:87:76:70:d0:bc:78:f8:77:6b:4b:e6:
b4:65:40:89:83:5c:d9:46:b9:f9:14:a3:bc:c2:95:
38:66:6a:9e:fe:86:db:e5:5c:3a:04:c4:a6:28:1b:
5f:90:85:51:45:8c:44:e5:0f:15:7f:46:4c:8c:85:
a4:96:13:a2:78:47:a1:d8:4a:02:b6:af:99:16:cc:
5f:25:79:0b:84:3a:9b:9b:ab:2c:34:08:67:8a:ba:
6c:b7:cd:11:4c:45:93:ea:7b:ae:b4:5f:bb:f3:23:
ff:5a:1f:19:95:f1:a2:46:98:f4:30:7c:34:62:18:
b1:9a:56:a2:2e:5d:83:9f:bf:23:e3:87:04:4a:0d:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2D:04:DA:1B:0B:C2:E6:87:74:F7:A3:12:B3:77:FA:11:6F:35:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11F90708C34A11EF825E5D74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.216.0/24
Signature Algorithm: sha256WithRSAEncryption
22:60:da:c1:4c:1f:97:31:82:85:43:79:ed:18:74:c1:90:a6:
a2:ee:4e:bd:c3:94:51:32:f9:b6:4f:f3:7d:bd:4c:14:f0:9a:
55:23:87:01:b9:5b:38:82:f2:d9:71:52:da:47:32:ca:d5:5e:
eb:8d:0e:97:70:6c:f8:db:a6:c9:7b:2f:f0:b0:80:34:65:54:
1c:33:19:7c:dd:c1:ad:64:06:70:cd:fe:37:ad:b4:7d:a9:3f:
2b:b3:55:59:42:8f:98:e8:7a:cb:ce:9d:b1:07:ad:28:14:94:
01:6f:2b:fe:81:5c:1a:0b:6b:8f:95:be:e3:11:98:93:42:cd:
ed:62:15:2f:cc:bd:e0:8e:cc:e9:8e:48:ea:59:54:45:91:4a:
ee:8a:ea:db:80:bb:dd:ad:58:d3:83:ba:42:79:bb:28:19:2c:
02:0e:52:37:bb:11:bd:a6:e6:39:fd:df:14:38:ff:94:5c:1b:
ed:5f:e2:66:bb:19:98:e5:cf:67:5a:fb:a8:0e:63:61:54:a0:
db:b4:e8:3e:99:c0:bc:53:9e:b5:eb:b8:4d:bf:ce:42:65:8e:
f8:b8:d0:5a:03:dc:ad:3d:a1:d2:00:a3:c1:b8:96:a9:4b:2f:
b1:da:47:de:66:71:94:c6:fb:60:28:8b:79:3c:0b:e6:cc:3f:
f6:af:8f:1a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOwzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDUyNzA4WhcNMjUxMjEwMDUyNzA4WjAYMRYw
FAYDVQQDEw02NzZjZTkzNS1jM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnYWMmB3Z+c8zgthztbFAg/g6IPaVXrxhOkdyKEnHVVlhj8ZmuO/e+VGI
cdE7izdSo+i55rudJyXXxRpZCOCRALNlcKK/GCbIRR7RHyDegImfMYj8PnziJmZQ
zMeEqY0bhETz+AF4hCm08SqSPVDVRX3K9UhXI4Q2DH6Ah3Zw0Lx4+HdrS+a0ZUCJ
g1zZRrn5FKO8wpU4Zmqe/obb5Vw6BMSmKBtfkIVRRYxE5Q8Vf0ZMjIWklhOieEeh
2EoCtq+ZFsxfJXkLhDqbm6ssNAhnirpst80RTEWT6nuutF+78yP/Wh8ZlfGiRpj0
MHw0YhixmlaiLl2Dn78j44cESg3ZHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLwt
BNobC8Lmh3T3oxKzd/oRbzV1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMUY5MDcwOEMzNEExMUVGODI1RTVENzQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPXYMA0GCSqGSIb3DQEBCwUA
A4IBAQAiYNrBTB+XMYKFQ3ntGHTBkKai7k69w5RRMvm2T/N9vUwU8JpVI4cBuVs4
gvLZcVLaRzLK1V7rjQ6XcGz426bJey/wsIA0ZVQcMxl83cGtZAZwzf43rbR9qT8r
s1VZQo+Y6HrLzp2xB60oFJQBbyv+gVwaC2uPlb7jEZiTQs3tYhUvzL3gjszpjkjq
WVRFkUruiurbgLvdrVjTg7pCebsoGSwCDlI3uxG9puY5/d8UOP+UXBvtX+JmuxmY
5c9nWvuoDmNhVKDbtOg+mcC8U56167hNv85CZY74uNBaA9ytPaHSAKPBuJapSy+x
2kfeZnGUxvtgKIt5PAvmzD/2r48a
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:08:22 2025 by rpki-client on console.sobornost.net