Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E965C6E1F6511F0BD755782DAE4EC9C.roa
File: 1E965C6E1F6511F0BD755782DAE4EC9C.roa (raw, json)
Hash identifier: bABjVIwIWO2FjVGfmwg8HVtAPmaLd97/RumlwiIfkoU=
Subject key identifier: AC:15:0E:CE:7B:BB:D8:E9:37:A8:6F:37:13:00:A9:16:CE:20:F1:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E965C6E1F6511F0BD755782DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 10:32:42 +0000
ROA not before: Tue 22 Apr 2025 10:32:37 +0000
ROA not after: Thu 22 May 2025 10:32:37 +0000
asID: 198154
IP address blocks: 156.253.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85521 (0x14e11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 10:32:37 2025 GMT
Not After : May 22 10:32:37 2025 GMT
Subject: CN=6807704a-66b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:41:20:b3:f1:9b:7f:25:73:9c:de:84:a2:
6c:28:73:3b:08:58:41:22:f0:e7:7f:b7:d6:17:37:
45:b9:ea:96:1c:86:87:ed:fe:37:57:8f:22:83:73:
c4:aa:00:a2:0c:fb:41:b0:80:6b:8c:ab:7a:78:82:
8a:dd:e2:11:e0:cd:46:ba:a4:5b:28:e4:3b:c6:1c:
64:09:e6:fa:04:83:9d:cf:40:1d:22:7b:a2:23:b6:
37:36:a1:50:f0:e4:0c:54:b2:d2:08:c2:2f:ea:3c:
4f:37:56:f6:0a:ea:ee:b8:8c:cf:71:af:2e:ed:ba:
3e:f8:6e:59:00:d4:fb:77:12:49:fb:1d:a3:28:35:
55:87:e7:f6:33:eb:35:3c:a2:cc:b0:b2:2d:ed:0f:
a7:2a:a3:5f:5b:71:5e:5b:8e:46:54:ef:fd:e9:06:
b9:86:a5:07:3f:b3:67:48:2d:9a:5d:c3:7f:95:57:
ae:bb:54:f9:18:f8:b8:fd:41:bc:02:81:a1:96:22:
23:21:b6:3e:b2:a1:93:dc:a1:33:d1:3a:d1:0d:ea:
7d:eb:6e:bb:ee:ba:c5:5c:a0:89:22:cd:5a:b3:d7:
25:12:1c:61:ef:56:2d:e5:da:31:72:36:cf:51:0f:
cb:a5:94:cb:36:40:df:a8:ad:e6:b6:9f:d2:f2:a0:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:15:0E:CE:7B:BB:D8:E9:37:A8:6F:37:13:00:A9:16:CE:20:F1:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E965C6E1F6511F0BD755782DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.234.0/24
Signature Algorithm: sha256WithRSAEncryption
36:28:d2:58:0c:81:33:cb:0d:5b:22:b6:1f:90:8c:29:9d:1d:
26:b6:a0:7f:64:05:e6:94:53:28:8b:3a:20:b6:22:68:a3:d8:
39:e5:a5:8c:56:db:a9:48:a6:5a:82:f8:1e:06:60:99:3a:cc:
bc:a2:91:c2:48:78:6d:12:35:9c:18:00:0a:46:32:1b:05:42:
8a:c7:36:42:83:53:03:44:ad:50:af:2d:02:60:78:5b:79:63:
b3:44:50:9d:90:f3:15:dc:e7:47:b8:12:69:54:4e:f9:06:f9:
7b:dc:c7:9f:29:71:bd:d8:6a:fc:79:22:63:0f:b3:04:f3:3e:
71:74:21:e8:93:13:e2:e6:55:ef:4d:e7:3a:8c:11:a2:9e:90:
c5:bc:97:b0:e8:20:6e:33:1c:3d:f4:75:b2:7c:cd:98:fc:fd:
d9:b1:ce:15:b4:d1:33:67:81:67:b7:6b:04:e1:2a:21:6e:47:
c4:b2:2c:00:c5:f8:fc:d9:36:d0:b9:f7:e0:53:7c:8c:22:64:
6b:c9:dd:0c:e1:1e:bd:cf:56:bf:5d:6b:6f:52:3a:b6:80:1b:
2a:bd:48:1f:8f:3a:7d:2b:6a:03:6b:d1:19:64:a1:91:50:52:
d2:d3:b4:5c:62:ca:a8:b7:aa:94:be:16:7d:2c:8d:21:31:8c:
f1:6d:14:5a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU4RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDIyMTAzMjM3WhcNMjUwNTIyMTAzMjM3WjAYMRYw
FAYDVQQDEw02ODA3NzA0YS02NmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy59BILPxm38lc5zehKJsKHM7CFhBIvDnf7fWFzdFueqWHIaH7f43V48i
g3PEqgCiDPtBsIBrjKt6eIKK3eIR4M1GuqRbKOQ7xhxkCeb6BIOdz0AdInuiI7Y3
NqFQ8OQMVLLSCMIv6jxPN1b2CuruuIzPca8u7bo++G5ZANT7dxJJ+x2jKDVVh+f2
M+s1PKLMsLIt7Q+nKqNfW3FeW45GVO/96Qa5hqUHP7NnSC2aXcN/lVeuu1T5GPi4
/UG8AoGhliIjIbY+sqGT3KEz0TrRDep962677rrFXKCJIs1as9clEhxh71Yt5dox
cjbPUQ/LpZTLNkDfqK3mtp/S8qA7ZwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKwV
Ds57u9jpN6hvNxMAqRbOIPEOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRTk2NUM2RTFGNjUxMUYwQkQ3NTU3ODJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP3qMA0GCSqGSIb3DQEBCwUA
A4IBAQA2KNJYDIEzyw1bIrYfkIwpnR0mtqB/ZAXmlFMoizogtiJoo9g55aWMVtup
SKZagvgeBmCZOsy8opHCSHhtEjWcGAAKRjIbBUKKxzZCg1MDRK1Qry0CYHhbeWOz
RFCdkPMV3OdHuBJpVE75Bvl73MefKXG92Gr8eSJjD7ME8z5xdCHokxPi5lXvTec6
jBGinpDFvJew6CBuMxw99HWyfM2Y/P3Zsc4VtNEzZ4Fnt2sE4SohbkfEsiwAxfj8
2TbQuffgU3yMImRryd0M4R69z1a/XWtvUjq2gBsqvUgfjzp9K2oDa9EZZKGRUFLS
07RcYsqot6qUvhZ9LI0hMYzxbRRa
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:49:11 2025 by rpki-client on console.sobornost.net