Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C6E36441C7B11F08FC82B7EDAE4EC9C.roa
File: 9C6E36441C7B11F08FC82B7EDAE4EC9C.roa (raw, json)
Hash identifier: PxrljCGA3BdyOrhx38wShxVfMALpED7oEaFmfxV6II0=
Subject key identifier: 07:04:F8:43:DF:DF:B9:4A:EA:A6:AA:85:D2:A3:0A:5E:F5:31:56:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C6E36441C7B11F08FC82B7EDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 17:36:08 +0000
ROA not before: Fri 18 Apr 2025 17:36:04 +0000
ROA not after: Tue 27 May 2025 17:36:04 +0000
asID: 44559
IP address blocks: 156.246.196.0/24 maxlen: 24
156.246.198.0/24 maxlen: 24
156.246.199.0/24 maxlen: 24
156.246.200.0/24 maxlen: 24
156.246.201.0/24 maxlen: 24
156.246.202.0/24 maxlen: 24
156.246.203.0/24 maxlen: 24
156.246.204.0/24 maxlen: 24
156.246.205.0/24 maxlen: 24
156.246.243.0/24 maxlen: 24
156.246.244.0/24 maxlen: 24
156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
156.246.249.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85309 (0x14d3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 17:36:04 2025 GMT
Not After : May 27 17:36:04 2025 GMT
Subject: CN=68028d88-e45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:0c:e6:34:0c:f5:b6:f1:83:3b:25:df:a6:
f1:31:81:84:72:2a:ae:15:52:b8:1e:56:0e:0a:da:
59:c9:5e:32:a7:a4:8d:5e:79:f9:32:3d:44:78:0c:
4a:68:70:b8:5e:3f:c5:d2:81:87:35:38:de:fa:63:
98:17:3e:51:d3:ad:00:b8:e2:1a:d0:0a:84:e5:8f:
e1:23:93:96:1d:80:19:1e:41:35:74:26:1e:ea:cc:
7f:f7:03:23:c0:bf:6d:a3:6d:a6:1a:cb:e0:16:be:
e8:54:7e:32:3c:cc:40:3a:5b:f2:85:35:5e:cd:30:
48:4a:9a:47:4f:13:c5:71:04:a1:b9:7b:be:af:9d:
1d:ba:5e:49:9b:ac:65:e5:53:5c:45:c6:0f:e7:e7:
23:66:02:d3:8c:f2:36:b6:fa:41:af:4c:fe:c4:c9:
ba:69:3b:28:4e:79:21:52:43:07:83:d4:89:28:f9:
75:53:47:c2:59:07:67:1c:96:b5:2d:65:33:76:ca:
46:72:64:7c:1a:ce:f0:63:4a:59:33:d5:24:1c:11:
48:ac:87:e3:57:a1:d6:b6:ce:e0:8d:c8:72:6d:96:
a9:6a:a0:26:ec:b6:ff:55:5e:c9:e0:22:a7:de:ea:
f5:80:ea:6a:9d:f0:3f:79:6c:52:01:ee:7f:07:bf:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:04:F8:43:DF:DF:B9:4A:EA:A6:AA:85:D2:A3:0A:5E:F5:31:56:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C6E36441C7B11F08FC82B7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.196.0/24
156.246.198.0-156.246.205.255
156.246.243.0-156.246.251.255
156.246.253.0-156.246.254.255
Signature Algorithm: sha256WithRSAEncryption
7d:73:02:6c:b7:cf:15:0d:06:23:26:da:5b:6e:e7:c3:55:33:
48:a2:d7:20:4b:bb:d5:7b:93:8a:4a:37:2d:af:b5:56:a8:02:
58:ed:a2:21:92:f7:ef:61:f8:fc:8a:cb:10:75:f9:92:d4:26:
97:b5:51:13:ca:67:20:55:b5:31:5b:e6:55:b1:4f:f3:16:8b:
77:d9:6a:9c:a0:a6:a1:de:4c:aa:19:7b:24:ba:14:ce:24:cc:
43:ba:0e:0e:93:50:64:97:bc:8e:87:ed:f9:cb:3a:fd:d6:be:
75:b0:1f:7e:23:6d:de:c0:f0:96:db:19:53:51:b3:02:82:4b:
fe:bc:6b:0c:be:a6:6f:26:64:d9:d7:38:45:1f:68:7d:f1:e4:
03:97:8f:44:76:e4:fc:66:8f:77:5f:a0:87:be:e2:5d:62:d7:
96:1d:7a:32:4d:ad:9b:23:07:6f:b2:24:a9:53:fa:81:04:cb:
e7:9e:5e:07:98:d2:b2:b4:c9:4c:cf:14:bd:98:72:45:54:c3:
75:47:13:08:09:47:5b:8d:a0:62:a7:d6:14:00:0d:26:36:61:
bb:ed:6e:0d:ee:bd:b9:28:c3:df:8f:bd:3c:b4:15:85:79:b2:
b7:4e:58:ee:29:0a:f1:cb:bd:8a:a2:8c:cb:44:a6:b3:4e:e3:
1b:53:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:48 2025 by rpki-client on console.sobornost.net