Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8324E2C414D711F0837EEF056EB8BCC6.roa
File: 8324E2C414D711F0837EEF056EB8BCC6.roa (raw, json)
Hash identifier: O1Cepg/PIyjb8AkPD+vhItiPXIu9KJFUNiAUlgt9Srw=
Subject key identifier: 59:13:45:1A:01:50:54:1D:A9:05:C6:FB:4E:08:90:72:17:27:2C:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014AEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8324E2C414D711F0837EEF056EB8BCC6.roa
Signing time: Wed 09 Apr 2025 00:13:50 +0000
ROA not before: Wed 09 Apr 2025 00:00:45 +0000
ROA not after: Tue 29 Apr 2025 00:00:45 +0000
asID: 62468
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.188.0/23 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
156.245.210.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
156.245.244.0/22 maxlen: 24
156.245.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84719 (0x14aef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 00:00:45 2025 GMT
Not After : Apr 29 00:00:45 2025 GMT
Subject: CN=67f5bbbe-d5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:4d:a7:08:e2:b4:a2:31:0c:da:c7:e0:8f:
97:4e:99:bf:64:ca:9a:4a:87:91:fb:4b:1f:05:14:
24:54:1f:82:48:ce:7c:20:e5:fb:4a:c9:74:7f:fa:
73:0d:08:b6:af:2a:00:34:1c:69:ab:d3:53:8f:08:
e4:05:4e:be:e7:6c:81:89:c1:77:c8:6e:54:fd:90:
95:1f:97:03:4d:39:b9:09:11:50:65:bf:85:4e:c0:
94:a1:4d:d2:4d:1f:0d:98:91:d2:74:e8:19:f4:1d:
7f:20:97:c6:e1:92:06:2b:3e:29:78:86:55:2d:34:
ba:5e:fc:48:d6:07:09:26:5d:fa:f9:61:1f:a3:58:
23:5e:64:31:85:e9:10:a6:cb:c4:12:53:a6:d9:01:
e3:19:37:59:69:61:49:74:6d:8e:5e:04:25:1c:09:
ad:36:5a:3f:b9:08:de:13:b5:46:ae:8f:9c:14:9b:
de:09:18:26:f4:18:f8:f7:02:96:ff:6c:ab:10:89:
12:12:d3:b9:bc:f4:ee:7f:d5:3e:75:f7:f0:5b:b1:
b9:42:45:a6:23:bb:3e:5a:4f:cf:a3:0d:2d:0a:0d:
22:b5:1c:3d:45:4d:04:69:b2:65:ec:0b:17:e0:09:
b2:5d:7f:3e:8e:23:c0:1e:f2:3b:00:74:a1:66:60:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:45:1A:01:50:54:1D:A9:05:C6:FB:4E:08:90:72:17:27:2C:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8324E2C414D711F0837EEF056EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.188.0/23
156.245.198.0-156.245.203.255
156.245.209.0-156.245.210.255
156.245.242.0-156.245.255.255
Signature Algorithm: sha256WithRSAEncryption
17:d6:5d:eb:a2:d5:aa:7c:5d:70:66:2c:8a:8d:a4:84:54:63:
96:ef:93:1d:75:14:37:d9:49:c6:68:2f:b1:20:6b:30:ec:12:
b5:86:c3:be:6c:75:b3:48:e0:b3:cb:db:7f:17:62:d0:82:3d:
56:bf:be:a0:b2:f8:64:a5:55:db:8b:95:a0:70:fb:20:ac:ca:
ce:6a:25:91:60:59:09:68:f4:76:64:b5:36:a5:1d:d3:59:ce:
88:b6:98:e6:d5:1a:5b:73:24:eb:dd:43:df:ac:db:76:39:4f:
07:c5:b7:e4:89:ed:64:c4:e8:12:dd:22:41:3b:47:98:38:4e:
40:fd:35:3e:d9:11:8a:9c:06:48:24:5e:5b:18:5d:65:10:9a:
ed:78:80:2e:9b:67:f6:f2:8e:15:59:c3:03:55:76:12:55:cc:
e8:bb:af:3e:46:85:bd:93:7a:16:4e:a4:b7:68:0a:01:dd:49:
73:44:f3:ed:66:5f:77:75:4f:6e:62:d6:3d:39:95:5d:6b:54:
b6:42:fa:fb:b8:d6:80:1c:c9:8d:e3:f6:c6:cf:b4:f1:97:5f:
bb:4b:cd:5c:41:c8:62:36:58:f5:d9:60:58:71:84:8c:ce:20:
07:71:1a:7f:ce:e6:e2:cb:e4:21:79:3a:1a:dd:3b:44:93:ce:
4b:e1:e8:fc
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIDAUrvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA5MDAwMDQ1WhcNMjUwNDI5MDAwMDQ1WjAYMRYw
FAYDVQQDEw02N2Y1YmJiZS1kNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxRFNpwjitKIxDNrH4I+XTpm/ZMqaSoeR+0sfBRQkVB+CSM58IOX7Ssl0
f/pzDQi2ryoANBxpq9NTjwjkBU6+52yBicF3yG5U/ZCVH5cDTTm5CRFQZb+FTsCU
oU3STR8NmJHSdOgZ9B1/IJfG4ZIGKz4peIZVLTS6XvxI1gcJJl36+WEfo1gjXmQx
hekQpsvEElOm2QHjGTdZaWFJdG2OXgQlHAmtNlo/uQjeE7VGro+cFJveCRgm9Bj4
9wKW/2yrEIkSEtO5vPTuf9U+dffwW7G5QkWmI7s+Wk/Pow0tCg0itRw9RU0EabJl
7AsX4AmyXX8+jiPAHvI7AHShZmASRQIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFFkT
RRoBUFQdqQXG+04IkHIXJywwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MzI0RTJDNDE0RDcxMUYwODM3RUVGMDU2RUI4QkNDNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1AwQDnPWAAwQBnPW8MAwDBAGc9cYD
BAKc9cgwDAMEAJz10QMEAJz10jALAwQBnPXyAwMBnPQwDQYJKoZIhvcNAQELBQAD
ggEBABfWXeui1ap8XXBmLIqNpIRUY5bvkx11FDfZScZoL7EgazDsErWGw75sdbNI
4LPL238XYtCCPVa/vqCy+GSlVduLlaBw+yCsys5qJZFgWQlo9HZktTalHdNZzoi2
mObVGltzJOvdQ9+s23Y5TwfFt+SJ7WTE6BLdIkE7R5g4TkD9NT7ZEYqcBkgkXlsY
XWUQmu14gC6bZ/byjhVZwwNVdhJVzOi7rz5Ghb2TehZOpLdoCgHdSXNE8+1mX3d1
T25i1j05lV1rVLZC+vu41oAcyY3j9sbPtPGXX7tLzVxByGI2WPXZYFhxhIzOIAdx
Gn/O5uLL5CF5OhrdO0STzkvh6Pw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:39:25 2025 by rpki-client on console.sobornost.net