Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6426CD221F4C11F08BE0F7DCDAE4EC9C.roa
File: 6426CD221F4C11F08BE0F7DCDAE4EC9C.roa (raw, json)
Hash identifier: lFmQI47+3WOk7hG+7UYw8TAl5lXj1y3h97Po6I28ssg=
Subject key identifier: 54:F6:7F:2D:B0:BD:C0:DA:BF:C1:45:20:CF:DF:ED:36:4A:18:D2:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6426CD221F4C11F08BE0F7DCDAE4EC9C.roa
Signing time: Tue 22 Apr 2025 07:35:41 +0000
ROA not before: Tue 22 Apr 2025 07:35:36 +0000
ROA not after: Wed 28 May 2025 07:35:36 +0000
asID: 57043
IP address blocks: 156.233.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85474 (0x14de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 07:35:36 2025 GMT
Not After : May 28 07:35:36 2025 GMT
Subject: CN=680746cd-bb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:9f:6e:a4:64:bb:d5:b9:df:51:00:ce:09:
7e:d6:55:75:f8:ae:c0:79:67:ec:6b:b5:52:08:cc:
c3:9c:6e:cc:7c:31:bf:f7:dd:2a:12:c8:c7:fe:b5:
61:43:83:0c:0f:64:7d:58:49:eb:80:4f:8b:36:5f:
3b:95:6a:84:d4:ab:e1:82:1c:5f:13:e5:11:0c:b3:
aa:c0:2f:e9:5a:02:55:80:93:11:6c:e5:00:0c:02:
2d:91:b5:4e:7a:d1:02:ce:25:47:cd:94:92:69:5a:
69:2a:b0:aa:25:65:18:23:ad:2b:3f:4e:5b:e1:eb:
3d:31:34:ee:3a:b2:05:fd:3b:ff:5f:05:c9:74:eb:
23:38:cd:e4:3b:30:3d:0a:c2:c8:f8:21:a1:66:0b:
7d:a5:bd:b0:96:d7:86:64:58:be:e2:e4:26:42:57:
aa:cc:ec:a7:51:41:bf:2c:74:35:c0:74:e7:31:d9:
bc:e3:cd:1e:25:ee:51:ed:5e:d9:d4:7e:17:3a:7e:
78:98:c2:b6:75:5e:12:92:12:5d:d2:0a:6d:4c:e6:
de:2d:e6:3f:ce:38:e9:aa:42:36:62:9b:8d:83:03:
89:c0:67:bf:cc:b5:ab:ee:44:43:9e:1d:6b:5e:81:
60:56:45:24:14:f7:a7:c5:47:15:32:4a:a3:84:4b:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:7F:2D:B0:BD:C0:DA:BF:C1:45:20:CF:DF:ED:36:4A:18:D2:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6426CD221F4C11F08BE0F7DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.51.0/24
Signature Algorithm: sha256WithRSAEncryption
23:38:b0:bb:e0:e2:33:69:76:f3:c7:b7:00:23:ab:d6:61:56:
77:98:e1:b8:78:f5:35:00:2e:b1:97:48:a3:7a:7e:ff:82:c9:
49:36:17:85:48:a3:66:49:02:1d:e5:54:99:b4:56:9b:7c:1a:
b6:a7:34:51:70:f7:c0:b5:23:aa:24:52:c6:b6:28:81:79:74:
d0:50:be:79:2b:4d:fc:5d:e4:49:b4:4d:d0:e5:32:d6:d6:7c:
b5:b5:1f:8d:cc:81:30:4e:93:51:ac:b9:e0:14:2c:49:4a:03:
89:42:1a:be:ef:ef:18:6e:ea:24:c4:c1:75:83:95:77:ad:d0:
51:b8:0f:d2:7d:2c:2e:93:04:eb:63:c5:8e:5c:d1:9c:cf:75:
49:fa:f8:d2:8c:a4:d0:0f:fb:b2:88:81:26:e1:5f:ad:6c:ce:
9a:d1:47:19:bf:0a:f1:fe:aa:5a:30:71:8e:9d:d6:44:90:0e:
10:d8:f1:3a:be:4e:09:fd:aa:62:7a:45:35:ba:81:a6:c1:a5:
30:77:b0:a1:a5:b6:f5:08:95:6e:d7:70:bd:5e:70:e7:07:cc:
58:85:a7:0b:8a:e8:27:df:78:d7:28:15:db:65:de:8e:ae:65:
03:09:8d:ff:6b:96:ae:14:a8:32:f6:a3:3b:bf:3c:8d:f3:ef:
cc:8a:1c:1d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU3iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDIyMDczNTM2WhcNMjUwNTI4MDczNTM2WjAYMRYw
FAYDVQQDEw02ODA3NDZjZC1iYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqyKfbqRku9W531EAzgl+1lV1+K7AeWfsa7VSCMzDnG7MfDG/990qEsjH
/rVhQ4MMD2R9WEnrgE+LNl87lWqE1KvhghxfE+URDLOqwC/pWgJVgJMRbOUADAIt
kbVOetECziVHzZSSaVppKrCqJWUYI60rP05b4es9MTTuOrIF/Tv/XwXJdOsjOM3k
OzA9CsLI+CGhZgt9pb2wlteGZFi+4uQmQleqzOynUUG/LHQ1wHTnMdm8480eJe5R
7V7Z1H4XOn54mMK2dV4SkhJd0gptTObeLeY/zjjpqkI2YpuNgwOJwGe/zLWr7kRD
nh1rXoFgVkUkFPenxUcVMkqjhEtaEQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFT2
fy2wvcDav8FFIM/f7TZKGNJbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NDI2Q0QyMjFGNEMxMUYwOEJFMEY3RENEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOkzMA0GCSqGSIb3DQEBCwUA
A4IBAQAjOLC74OIzaXbzx7cAI6vWYVZ3mOG4ePU1AC6xl0ijen7/gslJNheFSKNm
SQId5VSZtFabfBq2pzRRcPfAtSOqJFLGtiiBeXTQUL55K038XeRJtE3Q5TLW1ny1
tR+NzIEwTpNRrLngFCxJSgOJQhq+7+8YbuokxMF1g5V3rdBRuA/SfSwukwTrY8WO
XNGcz3VJ+vjSjKTQD/uyiIEm4V+tbM6a0UcZvwrx/qpaMHGOndZEkA4Q2PE6vk4J
/apiekU1uoGmwaUwd7Chpbb1CJVu13C9XnDnB8xYhacLiugn33jXKBXbZd6OrmUD
CY3/a5auFKgy9qM7vzyN8+/Mihwd
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:09 2025 by rpki-client on console.sobornost.net