Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D0343001F6011F0A7F67DE2DAE4EC9C.roa
File: 9D0343001F6011F0A7F67DE2DAE4EC9C.roa (raw, json)
Hash identifier: pUubh7h22Joewra2ok7Qa4RZmu+Ov5qXSRCC+fNx3jY=
Subject key identifier: CC:4E:8B:93:B9:D6:D8:D1:00:C8:CB:13:3D:25:74:1F:8B:59:D9:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D0343001F6011F0A7F67DE2DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 10:00:26 +0000
ROA not before: Tue 22 Apr 2025 10:00:21 +0000
ROA not after: Thu 12 Jun 2025 10:00:21 +0000
asID: 57043
IP address blocks: 156.229.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85507 (0x14e03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 10:00:21 2025 GMT
Not After : Jun 12 10:00:21 2025 GMT
Subject: CN=680768ba-93bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:05:a4:a5:fd:02:d1:c8:7e:eb:47:c1:d1:
1b:f2:f3:30:c0:f0:a3:a4:b0:77:ee:9c:07:90:a0:
0e:01:eb:99:92:0d:ad:d6:30:45:d4:4d:0b:52:b0:
90:9c:64:47:c3:53:03:1a:30:8a:31:52:df:3c:84:
1f:d9:eb:65:ee:86:15:2e:44:b9:10:99:ba:bf:7f:
09:02:88:83:85:81:54:a9:7a:da:3e:d6:34:c2:12:
f8:10:04:d1:18:fb:1c:55:d0:ba:e5:22:0e:85:ad:
c9:0b:b9:46:d2:65:1c:fb:54:9c:62:9c:d2:45:eb:
26:44:7b:f5:7e:6a:26:7b:38:6f:b7:f5:d1:cb:69:
48:df:d7:3d:a6:cd:e7:38:40:a9:33:62:bc:c9:da:
82:2c:87:9e:d5:4f:b0:01:e1:88:fa:73:79:65:fc:
ea:aa:88:74:a1:1f:ba:b6:6c:1f:bd:d8:15:80:4b:
31:8e:6b:72:d2:8a:82:b9:33:b7:45:fe:b2:55:eb:
e9:62:28:dd:ef:f7:cd:f7:e4:bd:71:b4:1a:d3:99:
df:0b:db:42:40:c9:71:4d:56:a7:4a:a8:d8:63:d2:
3f:ff:e1:d9:92:76:9a:ce:a9:88:1e:25:00:f0:d3:
ad:e3:f3:25:4a:82:fb:72:2f:1b:40:77:4c:47:8d:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4E:8B:93:B9:D6:D8:D1:00:C8:CB:13:3D:25:74:1F:8B:59:D9:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D0343001F6011F0A7F67DE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b9:9a:2c:13:33:68:5a:3e:14:ec:c2:4f:c8:45:d6:27:e1:
30:47:5c:95:6e:2d:46:67:df:56:59:94:33:23:cd:73:00:eb:
a9:ec:ca:ec:73:50:7c:6b:6a:e7:54:7d:51:ef:fc:80:57:e2:
e6:37:f0:9c:cc:29:af:d2:a8:a1:14:4e:53:57:c7:c9:3d:af:
1f:c2:c0:e6:40:60:89:3e:55:db:3a:e4:0c:2c:8a:f3:f9:29:
5e:4f:22:88:6f:67:96:a6:d5:b1:70:d3:33:ed:0d:08:50:af:
fd:f4:37:45:e6:48:f9:c2:aa:21:58:b6:32:9b:30:33:7e:73:
60:27:99:88:86:3a:48:70:61:72:ab:ea:ef:f7:64:7a:b1:90:
da:af:9f:c2:cc:b3:b6:d2:a5:93:2c:59:07:3c:d1:42:b5:07:
e8:48:0e:42:e1:40:bb:18:30:4c:a0:fe:d9:8c:47:13:92:bd:
89:26:34:97:72:83:b3:36:25:d0:5f:c4:da:27:8f:36:b5:5f:
b3:2e:1f:56:ea:78:0d:9b:fb:9d:7f:42:63:a8:42:e7:ac:88:
6e:8d:2e:9f:0d:8d:1c:1d:f9:e8:eb:a4:46:dd:11:56:33:71:
50:88:5b:26:96:a0:ac:4f:47:20:98:71:5f:c7:2f:95:34:9a:
8c:07:ec:d0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU4DMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDIyMTAwMDIxWhcNMjUwNjEyMTAwMDIxWjAYMRYw
FAYDVQQDEw02ODA3NjhiYS05M2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwqEFpKX9AtHIfutHwdEb8vMwwPCjpLB37pwHkKAOAeuZkg2t1jBF1E0L
UrCQnGRHw1MDGjCKMVLfPIQf2etl7oYVLkS5EJm6v38JAoiDhYFUqXraPtY0whL4
EATRGPscVdC65SIOha3JC7lG0mUc+1ScYpzSResmRHv1fmomezhvt/XRy2lI39c9
ps3nOECpM2K8ydqCLIee1U+wAeGI+nN5Zfzqqoh0oR+6tmwfvdgVgEsxjmty0oqC
uTO3Rf6yVevpYijd7/fN9+S9cbQa05nfC9tCQMlxTVanSqjYY9I//+HZknaazqmI
HiUA8NOt4/MlSoL7ci8bQHdMR405swIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMxO
i5O51tjRAMjLEz0ldB+LWdkaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RDAzNDMwMDFGNjAxMUYwQTdGNjdERTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOUcMA0GCSqGSIb3DQEBCwUA
A4IBAQA6uZosEzNoWj4U7MJPyEXWJ+EwR1yVbi1GZ99WWZQzI81zAOup7Mrsc1B8
a2rnVH1R7/yAV+LmN/CczCmv0qihFE5TV8fJPa8fwsDmQGCJPlXbOuQMLIrz+Sle
TyKIb2eWptWxcNMz7Q0IUK/99DdF5kj5wqohWLYymzAzfnNgJ5mIhjpIcGFyq+rv
92R6sZDar5/CzLO20qWTLFkHPNFCtQfoSA5C4UC7GDBMoP7ZjEcTkr2JJjSXcoOz
NiXQX8TaJ482tV+zLh9W6ngNm/udf0JjqELnrIhujS6fDY0cHfno66RG3RFWM3FQ
iFsmlqCsT0cgmHFfxy+VNJqMB+zQ
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:48 2025 by rpki-client on console.sobornost.net