Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74306FDE211311F0B46988BADAE4EC9C.roa
File: 74306FDE211311F0B46988BADAE4EC9C.roa (raw, json)
Hash identifier: SlGglWi1e+a3LDj1OVRC/cI0nk2obwmfbC73+0OtZnY=
Subject key identifier: 5B:C1:43:21:F4:D9:9B:C2:F7:56:57:12:27:2D:4E:F9:4F:B5:90:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74306FDE211311F0B46988BADAE4EC9C.roa
Signing time: Thu 24 Apr 2025 13:53:09 +0000
ROA not before: Thu 24 Apr 2025 13:53:04 +0000
ROA not after: Fri 30 May 2025 13:53:04 +0000
asID: 137547
IP address blocks: 156.245.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85634 (0x14e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 13:53:04 2025 GMT
Not After : May 30 13:53:04 2025 GMT
Subject: CN=680a4245-08d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:23:b3:ed:f6:d0:bb:0e:3f:4e:34:df:4e:
aa:18:a0:00:f9:73:3d:1e:ce:0b:60:aa:23:51:3b:
f3:95:94:57:ca:93:d4:15:b4:5f:fd:0f:62:db:a6:
d8:22:47:7b:8a:f5:36:ca:b0:af:fa:21:1a:cf:d6:
88:7a:16:83:7d:39:5f:e5:b0:c2:3b:91:d9:2a:85:
6e:88:8a:ca:2b:29:b5:5c:73:80:9f:52:ee:fb:fa:
9c:18:d5:3a:8c:16:74:27:ad:a4:c3:70:5b:5d:6f:
23:f2:c3:91:bb:3f:bc:76:d9:76:d7:0f:c6:a5:76:
f0:de:19:aa:8e:04:f4:6d:8b:4c:3f:a9:01:97:d2:
fe:4d:24:f5:4e:ca:f9:3f:89:7b:d6:26:a3:b7:7f:
a1:14:a8:bc:4e:02:03:2e:af:5c:d7:78:3f:98:a4:
da:f9:a0:42:3c:5b:df:47:64:56:f3:4b:3d:89:d8:
2f:5c:e1:d9:0f:c2:4b:ef:c7:02:35:2a:41:4b:75:
3f:75:d2:32:05:cc:98:37:56:4c:4a:7c:5b:11:63:
6e:ce:ce:bd:69:99:ec:7b:e9:d1:6f:89:21:89:3d:
3c:73:96:49:45:e5:8c:ff:56:eb:06:9b:ff:0c:d2:
ca:0c:43:4b:68:05:80:f6:c7:34:be:b3:b1:84:a0:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C1:43:21:F4:D9:9B:C2:F7:56:57:12:27:2D:4E:F9:4F:B5:90:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74306FDE211311F0B46988BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
99:2d:bc:1d:4c:b0:1f:5e:df:06:f6:11:5b:a7:2d:72:9e:f1:
b3:f8:08:5e:27:24:bd:84:37:1f:6a:46:30:5b:7a:3d:82:07:
84:31:d6:17:94:49:32:16:2f:a7:59:d6:a7:b0:7c:bb:e0:d3:
15:e7:a2:4a:8d:e7:a5:b7:9b:d5:13:6f:cf:36:46:99:d2:fc:
3d:eb:c2:be:0d:ce:ae:68:8c:a1:62:da:ca:5d:39:b1:f3:3c:
35:06:83:2a:5f:ba:6c:00:a2:a8:bf:0a:c0:19:f8:49:a1:7b:
2a:15:be:09:5c:b4:e2:92:b7:0c:8f:9d:f5:c0:7a:37:8a:4f:
b7:3b:18:0f:b1:6d:7e:c7:38:83:87:90:d4:39:c9:4a:7f:af:
a7:29:38:e9:a9:34:6d:c6:a1:52:7c:4d:df:21:47:35:48:8c:
11:ba:77:d0:dd:ea:ba:1e:79:86:9e:b8:10:23:f1:46:76:98:
35:e0:d5:08:ec:7c:2c:fc:84:8f:1e:48:52:62:c8:03:b6:29:
ae:67:ef:ed:38:bf:31:8b:fd:e4:af:f3:72:32:80:49:3c:b5:
ff:dd:d2:b9:d3:4f:34:04:3e:5d:4f:c6:83:6d:0e:ae:15:11:
55:9d:81:c7:58:30:9f:3e:54:fc:f5:32:5a:07:6a:97:fc:01:
7f:bc:ca:49
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU6CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI0MTM1MzA0WhcNMjUwNTMwMTM1MzA0WjAYMRYw
FAYDVQQDEw02ODBhNDI0NS0wOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv3wjs+320LsOP040306qGKAA+XM9Hs4LYKojUTvzlZRXypPUFbRf/Q9i
26bYIkd7ivU2yrCv+iEaz9aIehaDfTlf5bDCO5HZKoVuiIrKKym1XHOAn1Lu+/qc
GNU6jBZ0J62kw3BbXW8j8sORuz+8dtl21w/GpXbw3hmqjgT0bYtMP6kBl9L+TST1
Tsr5P4l71iajt3+hFKi8TgIDLq9c13g/mKTa+aBCPFvfR2RW80s9idgvXOHZD8JL
78cCNSpBS3U/ddIyBcyYN1ZMSnxbEWNuzs69aZnse+nRb4khiT08c5ZJReWM/1br
Bpv/DNLKDENLaAWA9sc0vrOxhKAgxwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFvB
QyH02ZvC91ZXEictTvlPtZDdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NDMwNkZERTIxMTMxMUYwQjQ2OTg4QkFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPX4MA0GCSqGSIb3DQEBCwUA
A4IBAQCZLbwdTLAfXt8G9hFbpy1ynvGz+AheJyS9hDcfakYwW3o9ggeEMdYXlEky
Fi+nWdansHy74NMV56JKjeelt5vVE2/PNkaZ0vw968K+Dc6uaIyhYtrKXTmx8zw1
BoMqX7psAKKovwrAGfhJoXsqFb4JXLTikrcMj531wHo3ik+3OxgPsW1+xziDh5DU
OclKf6+nKTjpqTRtxqFSfE3fIUc1SIwRunfQ3eq6HnmGnrgQI/FGdpg14NUI7Hws
/ISPHkhSYsgDtimuZ+/tOL8xi/3kr/NyMoBJPLX/3dK50080BD5dT8aDbQ6uFRFV
nYHHWDCfPlT89TJaB2qX/AF/vMpJ
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:50:08 2025 by rpki-client on console.sobornost.net