Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53B45CE21E2611F0AE8BE5A0DAE4EC9C.roa
File: 53B45CE21E2611F0AE8BE5A0DAE4EC9C.roa (raw, json)
Hash identifier: lJWpGtbPzefwWBeOG3XJ//cNJLhSTeB+UjhitATMVXg=
Subject key identifier: F5:03:D7:0D:F3:0B:8D:90:02:4F:2C:08:18:2D:05:2A:21:1E:37:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DB3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53B45CE21E2611F0AE8BE5A0DAE4EC9C.roa
Signing time: Sun 20 Apr 2025 20:30:41 +0000
ROA not before: Sun 20 Apr 2025 20:30:35 +0000
ROA not after: Sun 27 Apr 2025 20:30:35 +0000
asID: 39600
IP address blocks: 156.237.106.0/24 maxlen: 24
156.237.107.0/24 maxlen: 24
156.237.108.0/24 maxlen: 24
156.237.109.0/24 maxlen: 24
156.237.110.0/24 maxlen: 24
156.237.111.0/24 maxlen: 24
156.237.112.0/24 maxlen: 24
156.237.113.0/24 maxlen: 24
156.237.114.0/24 maxlen: 24
156.237.115.0/24 maxlen: 24
156.237.116.0/24 maxlen: 24
156.237.117.0/24 maxlen: 24
156.237.118.0/24 maxlen: 24
156.237.119.0/24 maxlen: 24
156.237.120.0/24 maxlen: 24
156.237.121.0/24 maxlen: 24
156.237.122.0/24 maxlen: 24
156.237.123.0/24 maxlen: 24
156.237.124.0/24 maxlen: 24
156.237.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85427 (0x14db3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 20 20:30:35 2025 GMT
Not After : Apr 27 20:30:35 2025 GMT
Subject: CN=68055971-1848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:3b:d6:54:a7:b5:3d:68:7f:d5:96:bf:6c:
bf:f9:e8:52:31:28:b0:bd:82:0d:84:d4:c8:72:5b:
99:6c:cb:fc:ca:d4:43:1f:7d:a6:f8:87:7b:cc:a1:
10:14:e6:e6:60:65:c1:7b:0e:47:1a:23:81:40:3a:
73:04:4b:94:7f:dc:23:b7:bd:26:b9:b2:a0:da:bf:
48:d5:61:86:af:d2:48:7c:30:a6:cc:68:40:b5:82:
e5:6e:6c:31:59:a9:18:83:94:b4:ed:0b:76:16:c3:
41:b0:dc:55:d5:3d:cc:ce:23:ce:ed:ae:29:cc:f3:
db:99:07:00:f6:59:5d:63:ab:8d:6c:8d:84:a4:a4:
a2:7b:ad:1e:02:a2:3b:86:9a:84:b2:0e:57:cd:41:
59:d3:7f:3d:2c:2e:4e:ee:9a:7b:ab:5c:05:88:c1:
b3:04:99:ec:74:fe:10:00:a5:5b:9b:a5:da:4c:ac:
2c:28:db:15:56:78:93:b2:59:96:b9:f6:0a:94:32:
e2:74:90:66:25:6a:74:8f:39:dd:13:21:19:37:c7:
61:f9:44:18:45:68:08:78:64:f4:61:83:dd:51:f0:
4b:4e:8b:40:a1:fd:8d:ae:be:ed:23:dc:ea:87:a3:
fb:dd:9f:af:cc:c8:37:94:eb:e5:4a:ce:63:fd:ef:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:03:D7:0D:F3:0B:8D:90:02:4F:2C:08:18:2D:05:2A:21:1E:37:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53B45CE21E2611F0AE8BE5A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.106.0-156.237.125.255
Signature Algorithm: sha256WithRSAEncryption
8d:8c:14:24:59:d4:8a:96:36:52:30:8f:ce:8d:98:64:a1:ba:
cc:5b:78:33:ef:17:97:1f:43:8f:67:f9:1f:94:69:b3:22:35:
0f:b2:a8:d7:e0:eb:dd:c2:93:47:03:3b:63:d6:4a:8e:b6:b2:
f4:53:10:94:5a:f4:be:8d:78:9d:47:32:45:e6:3a:6b:ca:fe:
55:fd:b6:97:2b:9e:81:4f:c0:26:d5:17:40:b2:08:f0:e8:8a:
76:1c:e7:dd:b2:33:9e:e4:b8:6c:58:ab:59:4f:14:8d:2a:af:
ca:52:d9:7b:e2:d6:b7:47:74:86:70:f3:42:d4:0a:fa:61:7c:
62:e1:6a:04:d8:94:a6:d5:56:fb:1a:7b:5d:69:6e:cf:25:ea:
35:55:79:47:de:c1:af:4c:98:86:2b:79:b5:46:6b:c8:99:9d:
f4:fd:ef:c2:d7:5f:86:db:68:dd:c9:97:b0:2c:e2:47:1e:40:
7b:fc:99:96:2e:3e:a8:ad:dd:fc:95:e7:62:5c:23:6e:94:4b:
cc:98:f0:f0:8a:e8:1b:ea:1d:44:f1:8d:5a:91:89:4c:5f:80:
bd:b7:c7:67:fc:43:ec:31:97:62:f2:09:37:d9:41:8c:2f:7a:
e9:28:61:f6:4c:d7:d7:e0:ef:a0:f1:e5:d8:24:26:ed:b9:dc:
67:80:11:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:03 2025 by rpki-client on console.sobornost.net