Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2468E42C144811F09594A06E762E951A.roa
File: 2468E42C144811F09594A06E762E951A.roa (raw, json)
Hash identifier: OsfauCp47T0+nN1gI3uiGAGaTD7PJoon2DzqR7mGNsA=
Subject key identifier: 97:9B:86:88:56:A1:17:A9:F4:92:89:1E:6E:E0:37:D9:1C:1A:99:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014AD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2468E42C144811F09594A06E762E951A.roa
Signing time: Tue 08 Apr 2025 07:07:34 +0000
ROA not before: Tue 08 Apr 2025 07:07:29 +0000
ROA not after: Wed 14 May 2025 07:07:29 +0000
asID: 20473
IP address blocks: 156.236.77.0/24 maxlen: 24
156.236.78.0/23 maxlen: 24
156.240.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84693 (0x14ad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 8 07:07:29 2025 GMT
Not After : May 14 07:07:29 2025 GMT
Subject: CN=67f4cb36-ce83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:4a:63:8b:ed:0d:97:3f:19:c1:57:48:7f:
5f:7a:39:0d:88:c8:d0:e7:b0:9c:24:f0:b5:dd:91:
c3:34:77:6d:79:23:b5:92:76:c4:85:81:26:0f:2f:
08:3c:68:80:82:0f:3b:5c:1b:7f:f1:82:8c:09:35:
b5:36:ca:d1:44:cc:fd:11:62:c7:02:8c:74:87:31:
33:3d:c9:e8:f4:ba:8f:97:31:76:4d:6e:d3:72:9b:
be:39:7a:e8:5e:74:d2:a9:e0:f9:bf:ee:27:20:7e:
00:a5:c0:1e:5a:09:76:28:62:f1:87:5c:56:59:98:
30:ea:15:4d:2b:81:8a:6b:bc:a1:0b:33:96:43:6c:
7f:bf:b9:ec:f3:ae:f9:e7:56:10:38:d4:6c:88:95:
90:12:2b:ff:6f:44:c5:79:16:8a:5a:ac:fb:0a:42:
10:41:f9:78:db:03:ce:2e:ce:e9:a6:75:9c:99:54:
d8:b7:c9:e8:c2:d1:d1:85:77:e8:7a:55:94:fc:a6:
b5:c1:15:ea:22:51:40:66:22:15:1d:8e:a4:ff:e9:
77:62:14:5e:99:c0:9b:ad:5c:3f:d2:98:ed:c4:ae:
dd:4c:85:ca:4e:5d:25:25:d3:77:0c:10:a6:8b:cb:
e5:ac:3a:08:33:e4:2d:e4:a4:2e:72:31:56:a1:67:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9B:86:88:56:A1:17:A9:F4:92:89:1E:6E:E0:37:D9:1C:1A:99:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2468E42C144811F09594A06E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.77.0-156.236.79.255
156.240.98.0/24
Signature Algorithm: sha256WithRSAEncryption
33:da:a9:38:49:66:61:e9:b2:17:92:3e:f2:9c:78:2d:a6:87:
af:db:cc:62:ec:c1:dd:a3:1b:83:94:5b:b7:42:b0:90:63:56:
40:af:ba:94:67:d3:1a:c3:18:89:c7:ba:aa:1f:2c:61:87:23:
6a:ce:2c:2f:6a:f0:ad:94:6b:71:60:05:1c:0c:0d:d3:31:dd:
50:03:55:dc:ea:9a:00:ce:23:32:92:05:60:1d:c3:bf:cb:20:
98:84:1a:48:76:7d:0f:eb:11:b0:27:ab:a2:2a:ee:09:a4:29:
14:76:0a:91:63:c0:3f:e5:20:3a:de:d1:c7:b6:40:aa:d6:b7:
46:b6:de:72:ce:e4:c3:ff:91:02:8b:ab:4c:b5:e9:91:2d:84:
9a:62:64:97:19:ae:fc:9b:5b:e8:eb:ad:b1:b9:9c:b6:5f:78:
5e:ea:39:13:0b:51:bf:9d:49:74:d1:54:6e:e8:d0:c2:39:52:
d6:ee:f8:1d:29:a9:25:71:a4:e9:cd:4b:0f:60:ee:99:05:c9:
6c:e4:79:07:98:2d:d9:1c:8c:98:11:df:19:f2:49:3a:6d:cf:
e3:3d:26:23:7f:2a:69:c7:98:bb:8b:34:78:94:67:f9:92:02:
5d:f6:56:a9:fb:af:95:25:db:d0:97:ca:98:07:14:2b:20:e5:
e2:aa:9b:fd
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAUrVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA4MDcwNzI5WhcNMjUwNTE0MDcwNzI5WjAYMRYw
FAYDVQQDEw02N2Y0Y2IzNi1jZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtNtKY4vtDZc/GcFXSH9fejkNiMjQ57CcJPC13ZHDNHdteSO1knbEhYEm
Dy8IPGiAgg87XBt/8YKMCTW1NsrRRMz9EWLHAox0hzEzPcno9LqPlzF2TW7Tcpu+
OXroXnTSqeD5v+4nIH4ApcAeWgl2KGLxh1xWWZgw6hVNK4GKa7yhCzOWQ2x/v7ns
867551YQONRsiJWQEiv/b0TFeRaKWqz7CkIQQfl42wPOLs7ppnWcmVTYt8nowtHR
hXfoelWU/Ka1wRXqIlFAZiIVHY6k/+l3YhRemcCbrVw/0pjtxK7dTIXKTl0lJdN3
DBCmi8vlrDoIM+Qt5KQucjFWoWcFcwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJeb
hohWoRep9JKJHm7gN9kcGplAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNDY4RTQyQzE0NDgxMUYwOTU5NEEwNkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACc7E0DBASc7EADBACc8GIw
DQYJKoZIhvcNAQELBQADggEBADPaqThJZmHpsheSPvKceC2mh6/bzGLswd2jG4OU
W7dCsJBjVkCvupRn0xrDGInHuqofLGGHI2rOLC9q8K2Ua3FgBRwMDdMx3VADVdzq
mgDOIzKSBWAdw7/LIJiEGkh2fQ/rEbAnq6Iq7gmkKRR2CpFjwD/lIDre0ce2QKrW
t0a23nLO5MP/kQKLq0y16ZEthJpiZJcZrvybW+jrrbG5nLZfeF7qORMLUb+dSXTR
VG7o0MI5Utbu+B0pqSVxpOnNSw9g7pkFyWzkeQeYLdkcjJgR3xnySTptz+M9JiN/
KmnHmLuLNHiUZ/mSAl32Vqn7r5Ul29CXypgHFCsg5eKqm/0=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:28 2025 by rpki-client on console.sobornost.net