Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7716AEA61C5A11F09EEA5FA2DAE4EC9C.roa
File: 7716AEA61C5A11F09EEA5FA2DAE4EC9C.roa (raw, json)
Hash identifier: mXDngtSlp6vOcb5G2KhtdGoKxQz42YNtSmhRFKAMhmc=
Subject key identifier: C5:04:8F:C6:F5:96:5A:4D:24:82:49:1E:EC:9D:A8:DD:50:89:76:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014CFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7716AEA61C5A11F09EEA5FA2DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 13:38:52 +0000
ROA not before: Fri 18 Apr 2025 13:38:48 +0000
ROA not after: Sat 24 May 2025 13:38:48 +0000
asID: 54801
IP address blocks: 156.229.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85243 (0x14cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 13:38:48 2025 GMT
Not After : May 24 13:38:48 2025 GMT
Subject: CN=680255ec-afb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1a:74:12:4f:b7:16:33:97:d0:14:a2:4f:8d:
96:6b:26:04:0b:3b:d2:e7:f4:73:5d:95:29:db:7f:
51:c5:67:4a:a5:80:a8:00:98:21:9e:83:c9:a4:af:
2e:1a:81:5b:1f:a5:f4:d6:73:a3:32:eb:06:45:e1:
8c:08:f2:28:1b:a4:3b:8f:1d:f1:d9:dc:ac:91:50:
68:9e:10:58:5c:61:f6:08:ff:55:22:57:99:5b:d2:
70:fa:47:f8:9c:47:e9:be:b0:b5:17:46:b1:a4:aa:
d4:ce:e8:b0:bb:3b:a3:aa:95:2c:14:89:33:9f:4a:
d7:f0:19:27:1f:c6:b2:a3:65:d4:7f:ea:e5:18:18:
f4:e6:f8:7f:f2:48:48:12:00:ff:55:86:3f:b2:76:
97:95:48:35:ba:3f:dc:ef:1d:73:59:6d:e3:ad:4b:
78:82:b2:85:49:47:34:21:78:85:e2:57:e1:69:e0:
75:5c:32:d3:7c:89:e8:9c:3f:31:92:7b:c4:c8:a9:
54:81:84:1d:73:6a:1a:06:4b:e3:03:a7:c4:22:e5:
26:7d:9d:c3:7a:ea:77:32:32:45:b9:c5:11:7d:ed:
c1:48:bd:21:62:ac:19:5a:c0:55:11:eb:56:61:34:
85:8e:f7:86:b8:d1:70:64:df:eb:59:16:74:74:62:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:8F:C6:F5:96:5A:4D:24:82:49:1E:EC:9D:A8:DD:50:89:76:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7716AEA61C5A11F09EEA5FA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.128.0/19
Signature Algorithm: sha256WithRSAEncryption
93:77:d4:a4:b4:b5:1b:2c:72:39:cd:37:88:75:8e:2f:ea:f9:
c7:1f:c6:a2:e2:b4:a1:41:22:13:ba:d8:db:38:87:2e:28:e4:
e5:3f:a7:60:34:66:ab:7c:08:ba:d9:ae:c3:e7:91:e4:3d:e0:
ff:e7:b7:2d:fd:7a:5c:b4:88:64:0f:e2:0f:c3:99:2c:b0:1b:
2d:38:e5:9e:af:0b:39:d0:ab:10:be:44:91:31:12:55:35:13:
18:d6:44:49:3f:b2:a2:c2:5a:20:28:df:e1:60:dd:59:72:a9:
8f:69:06:fb:75:7d:f5:18:75:7f:86:3b:20:53:f9:2d:e2:26:
71:fe:d9:ba:f8:47:84:ad:a7:69:c5:ec:5f:5c:0c:20:b6:7f:
3f:14:cb:8d:1e:1f:84:9e:9b:00:73:ac:c2:3b:9d:7a:99:e0:
8f:d4:95:0f:88:8b:ed:43:af:99:41:af:f9:9a:09:21:44:5d:
8e:9b:ee:ad:67:c1:75:50:c1:62:bd:8b:ba:82:54:93:93:d6:
cd:b6:26:80:e4:28:b2:c5:0b:52:73:04:da:4e:65:49:ac:b5:
e8:5c:cc:89:f5:5a:8e:f1:4c:66:8d:4b:0f:cf:75:ae:b9:fc:
67:09:03:3c:a9:25:07:e5:c6:fb:78:9b:f7:a0:ee:f4:95:64:
35:b3:6f:38
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUz7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDE4MTMzODQ4WhcNMjUwNTI0MTMzODQ4WjAYMRYw
FAYDVQQDEw02ODAyNTVlYy1hZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3xp0Ek+3FjOX0BSiT42WayYECzvS5/RzXZUp239RxWdKpYCoAJghnoPJ
pK8uGoFbH6X01nOjMusGReGMCPIoG6Q7jx3x2dyskVBonhBYXGH2CP9VIleZW9Jw
+kf4nEfpvrC1F0axpKrUzuiwuzujqpUsFIkzn0rX8BknH8ayo2XUf+rlGBj05vh/
8khIEgD/VYY/snaXlUg1uj/c7x1zWW3jrUt4grKFSUc0IXiF4lfhaeB1XDLTfIno
nD8xknvEyKlUgYQdc2oaBkvjA6fEIuUmfZ3Deup3MjJFucURfe3BSL0hYqwZWsBV
EetWYTSFjveGuNFwZN/rWRZ0dGIVDwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMUE
j8b1llpNJIJJHuydqN1QiXafMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NzE2QUVBNjFDNUExMUYwOUVFQTVGQTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnOWAMA0GCSqGSIb3DQEBCwUA
A4IBAQCTd9SktLUbLHI5zTeIdY4v6vnHH8ai4rShQSITutjbOIcuKOTlP6dgNGar
fAi62a7D55HkPeD/57ct/XpctIhkD+IPw5kssBstOOWerws50KsQvkSRMRJVNRMY
1kRJP7KiwlogKN/hYN1ZcqmPaQb7dX31GHV/hjsgU/kt4iZx/tm6+EeEradpxexf
XAwgtn8/FMuNHh+EnpsAc6zCO516meCP1JUPiIvtQ6+ZQa/5mgkhRF2Om+6tZ8F1
UMFivYu6glSTk9bNtiaA5CiyxQtScwTaTmVJrLXoXMyJ9VqO8UxmjUsPz3Wuufxn
CQM8qSUH5cb7eJv3oO70lWQ1s284
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:06:42 2025 by rpki-client on console.sobornost.net