Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3A10DCC1CA511F083D83D93DAE4EC9C.roa
File: A3A10DCC1CA511F083D83D93DAE4EC9C.roa (raw, json)
Hash identifier: L/kbyGTQq3QeAzolEDzYDIF/0n3kjjzYwyJGaSvJCso=
Subject key identifier: E8:4C:2F:53:73:24:ED:95:76:67:E8:A7:88:2E:C5:3E:1A:E6:93:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3A10DCC1CA511F083D83D93DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 22:36:59 +0000
ROA not before: Fri 18 Apr 2025 22:36:55 +0000
ROA not after: Wed 04 Jun 2025 22:36:55 +0000
asID: 398478
IP address blocks: 156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85345 (0x14d61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 22:36:55 2025 GMT
Not After : Jun 4 22:36:55 2025 GMT
Subject: CN=6802d40b-d5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:d1:f5:90:be:9c:28:10:45:53:51:81:33:
37:85:aa:54:9c:bd:21:a5:d9:b5:af:e1:84:b7:b1:
e9:50:e5:cd:cc:88:bf:61:6c:6d:e5:9b:86:f1:ef:
3c:a0:18:8d:e7:55:bf:65:89:b1:cd:14:97:a4:a2:
77:6b:d4:f7:3d:1b:01:bf:65:d3:52:6e:e0:af:fe:
79:cb:16:02:34:9a:54:49:52:c2:67:59:28:21:ba:
ea:07:f3:51:78:9c:2c:b4:09:78:c9:39:b5:0e:2f:
d7:9b:0e:0d:18:0d:06:d1:91:9a:3a:fa:8d:47:dd:
d8:60:57:16:77:af:d9:bc:db:f5:1b:1d:8e:ff:ca:
d0:6a:01:cb:b8:6a:05:17:cd:5f:66:5a:50:e3:15:
11:1e:11:a7:30:92:a6:2e:0c:2f:cf:9b:fe:8e:7c:
47:ab:29:e7:0a:a2:ca:77:b6:12:8c:e9:67:26:19:
49:43:1f:6d:a6:9b:79:db:c0:77:5c:50:e0:ab:7e:
51:86:6d:65:28:8f:32:48:f1:0d:a2:ee:00:b0:a1:
94:55:39:70:7f:20:b8:1a:ed:10:96:24:74:11:8a:
02:09:98:49:53:1f:39:47:c1:27:89:3a:d4:e6:1a:
0f:fa:ee:4f:c4:ad:f9:74:1c:51:06:e5:f6:ac:3c:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:2F:53:73:24:ED:95:76:67:E8:A7:88:2E:C5:3E:1A:E6:93:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3A10DCC1CA511F083D83D93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0-156.229.223.255
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
98:1b:6f:e5:80:d5:43:66:ee:58:42:2b:1a:c1:2c:3c:29:f1:
b8:2b:08:a4:78:15:43:35:46:0a:a9:8d:ea:38:60:53:36:94:
4c:15:c6:a9:12:25:11:b9:b7:40:87:53:9a:b3:0f:23:72:58:
bf:0e:61:a2:73:01:e0:8a:ae:a0:a2:8e:68:4d:97:87:12:2e:
67:46:75:81:92:25:4b:fe:7c:42:4f:42:09:74:1e:7e:ff:c2:
80:46:26:a8:cd:09:c1:bd:6d:ad:80:35:53:49:55:3a:85:ec:
44:39:0e:e7:2f:07:54:e5:dc:17:1e:31:a7:a3:a9:2d:f0:f9:
26:b1:50:46:eb:47:19:1a:e0:5a:c5:3c:ef:bd:46:11:98:d1:
4c:7f:06:03:bb:31:61:6d:6b:68:93:25:c4:50:fe:72:b1:c7:
1e:95:71:96:79:94:cd:fe:15:77:9a:85:c0:ef:91:bb:96:8a:
dc:e4:66:02:c3:0b:1e:ea:60:56:e6:6f:9b:41:e6:45:91:2e:
06:67:26:28:f7:99:df:cb:d6:ba:53:da:27:f4:b8:63:33:80:
b9:3e:b3:aa:93:f1:eb:53:17:cf:46:c1:f0:f3:79:f9:f5:83:
5b:38:9e:e9:15:4b:41:73:a2:b6:35:e5:1e:b5:0c:36:58:34:
4a:7b:7a:6b
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAU1hMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDE4MjIzNjU1WhcNMjUwNjA0MjIzNjU1WjAYMRYw
FAYDVQQDEw02ODAyZDQwYi1kNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsBvR9ZC+nCgQRVNRgTM3hapUnL0hpdm1r+GEt7HpUOXNzIi/YWxt5ZuG
8e88oBiN51W/ZYmxzRSXpKJ3a9T3PRsBv2XTUm7gr/55yxYCNJpUSVLCZ1koIbrq
B/NReJwstAl4yTm1Di/Xmw4NGA0G0ZGaOvqNR93YYFcWd6/ZvNv1Gx2O/8rQagHL
uGoFF81fZlpQ4xURHhGnMJKmLgwvz5v+jnxHqynnCqLKd7YSjOlnJhlJQx9tppt5
28B3XFDgq35Rhm1lKI8ySPENou4AsKGUVTlwfyC4Gu0QliR0EYoCCZhJUx85R8En
iTrU5hoP+u5PxK35dBxRBuX2rDxvawIDAQABo4ICuDCCArQwHQYDVR0OBBYEFOhM
L1NzJO2Vdmfop4guxT4a5pMFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BM0ExMERDQzFDQTUxMUYwODNEODNEOTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBASc5bADBAWc5cAwDAMEBJz8
kAMEBJz8oDANBgkqhkiG9w0BAQsFAAOCAQEAmBtv5YDVQ2buWEIrGsEsPCnxuCsI
pHgVQzVGCqmN6jhgUzaUTBXGqRIlEbm3QIdTmrMPI3JYvw5honMB4IquoKKOaE2X
hxIuZ0Z1gZIlS/58Qk9CCXQefv/CgEYmqM0Jwb1trYA1U0lVOoXsRDkO5y8HVOXc
Fx4xp6OpLfD5JrFQRutHGRrgWsU8771GEZjRTH8GA7sxYW1raJMlxFD+crHHHpVx
lnmUzf4Vd5qFwO+Ru5aK3ORmAsMLHupgVuZvm0HmRZEuBmcmKPeZ38vWulPaJ/S4
YzOAuT6zqpPx61MXz0bB8PN5+fWDWzie6RVLQXOitjXlHrUMNlg0Snt6aw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:53 2025 by rpki-client on console.sobornost.net