Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A51DAEB417A811F0AE9454E86DB8BCC6.roa
File: A51DAEB417A811F0AE9454E86DB8BCC6.roa (raw, json)
Hash identifier: 2EInldwz8KWHHsmSsBIQmD48ILkC7g6DJ2kxZiSU46g=
Subject key identifier: 27:B0:FD:DD:3B:48:05:E4:96:91:21:BD:91:E7:2D:B3:6D:4E:C0:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A51DAEB417A811F0AE9454E86DB8BCC6.roa
Signing time: Sat 12 Apr 2025 14:15:54 +0000
ROA not before: Sat 12 Apr 2025 14:15:50 +0000
ROA not after: Mon 09 Jun 2025 14:15:50 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 24
156.234.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84960 (0x14be0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 14:15:50 2025 GMT
Not After : Jun 9 14:15:50 2025 GMT
Subject: CN=67fa759a-5ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:9e:a9:0d:3b:d6:a8:91:35:0b:5f:2a:fa:
d7:2e:d3:5a:8b:6e:84:03:65:1b:40:4e:41:9c:c7:
f4:15:23:a4:19:60:ef:eb:d1:81:23:46:c7:12:29:
c9:42:8a:a6:77:88:f9:87:29:63:05:47:f8:6d:8c:
b4:d4:a6:47:e2:98:2c:77:34:24:15:df:f8:da:ad:
f5:bc:d3:51:42:a8:8b:2e:00:f6:4f:e0:a5:89:bb:
bb:3e:c6:34:31:39:4c:80:2b:99:79:44:b0:12:e8:
87:43:2b:bc:a7:69:20:12:90:c0:7a:b1:05:45:b7:
fb:f5:9e:e3:c9:6f:e6:9e:62:a9:58:92:ae:66:61:
f5:a9:7c:28:d6:2d:e6:bc:c2:7c:22:e1:b3:33:f4:
9a:be:56:20:56:5d:5e:2d:59:5c:11:d2:e2:34:8f:
ef:de:5d:c9:2c:b8:84:d7:d4:c8:c9:61:5a:20:54:
f8:22:55:c3:b3:62:b8:f5:1d:35:c6:fb:69:98:27:
ee:ce:d0:27:fb:36:97:19:84:d7:6b:bc:2c:cd:8a:
66:a0:62:35:54:5b:42:94:3c:20:44:6e:e0:dc:53:
fd:54:cf:66:62:ca:87:ee:37:fe:a2:d5:d2:f6:2e:
cd:ad:8f:b1:de:06:bc:87:b9:ec:7d:79:89:94:0b:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B0:FD:DD:3B:48:05:E4:96:91:21:BD:91:E7:2D:B3:6D:4E:C0:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A51DAEB417A811F0AE9454E86DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b3:40:9d:1c:b7:f4:40:8e:ed:5f:0c:9b:16:72:82:f3:54:
ef:70:c0:b7:65:83:24:b5:60:3b:a7:60:cc:59:09:ad:88:69:
4d:91:85:57:9b:0d:c7:fa:2d:54:03:e7:e6:da:32:cc:23:b6:
29:d8:07:ca:2c:d0:a5:6c:a7:09:8d:42:f3:36:f5:54:0b:87:
d1:f1:18:bf:77:f8:45:dc:54:f1:af:3d:74:77:94:58:77:bf:
d7:c7:05:98:e2:ee:e1:0a:8d:24:38:85:95:9d:f0:fb:44:5a:
18:d6:e2:88:ff:62:5e:d8:86:40:74:c1:93:34:5e:72:b9:f0:
be:d0:9c:bb:f8:ea:8e:17:69:ef:39:8a:83:25:44:f8:b9:b0:
e1:3c:e4:be:7e:17:8e:4d:cd:cf:b3:2f:ed:18:b5:4b:31:92:
80:af:8d:34:01:ab:fb:4b:4f:c6:f6:e9:db:48:63:ec:32:f1:
da:e5:df:d5:0a:70:10:07:ab:1c:93:4e:60:dc:19:b8:44:65:
37:f9:d0:dd:c7:8e:e2:c6:83:96:57:86:67:88:18:9e:04:08:
e7:db:26:92:fd:c0:9f:0f:c7:6c:20:75:c1:e9:d5:a8:0d:5a:
13:c7:45:52:1e:05:66:09:fe:de:b5:9b:48:ac:7e:93:e8:f0:
c8:93:d6:db
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUvgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDEyMTQxNTUwWhcNMjUwNjA5MTQxNTUwWjAYMRYw
FAYDVQQDEw02N2ZhNzU5YS01ZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArvGeqQ071qiRNQtfKvrXLtNai26EA2UbQE5BnMf0FSOkGWDv69GBI0bH
EinJQoqmd4j5hyljBUf4bYy01KZH4pgsdzQkFd/42q31vNNRQqiLLgD2T+Clibu7
PsY0MTlMgCuZeUSwEuiHQyu8p2kgEpDAerEFRbf79Z7jyW/mnmKpWJKuZmH1qXwo
1i3mvMJ8IuGzM/SavlYgVl1eLVlcEdLiNI/v3l3JLLiE19TIyWFaIFT4IlXDs2K4
9R01xvtpmCfuztAn+zaXGYTXa7wszYpmoGI1VFtClDwgRG7g3FP9VM9mYsqH7jf+
otXS9i7NrY+x3ga8h7nsfXmJlAsGiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCew
/d07SAXklpEhvZHnLbNtTsC4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNTFEQUVCNDE3QTgxMUYwQUU5NDU0RTg2REI4QkNDNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOp2AwQAnOp7MA0GCSqGSIb3
DQEBCwUAA4IBAQCqs0CdHLf0QI7tXwybFnKC81TvcMC3ZYMktWA7p2DMWQmtiGlN
kYVXmw3H+i1UA+fm2jLMI7Yp2AfKLNClbKcJjULzNvVUC4fR8Ri/d/hF3FTxrz10
d5RYd7/XxwWY4u7hCo0kOIWVnfD7RFoY1uKI/2Je2IZAdMGTNF5yufC+0Jy7+OqO
F2nvOYqDJUT4ubDhPOS+fheOTc3Psy/tGLVLMZKAr400Aav7S0/G9unbSGPsMvHa
5d/VCnAQB6sck05g3Bm4RGU3+dDdx47ixoOWV4ZniBieBAjn2yaS/cCfD8dsIHXB
6dWoDVoTx0VSHgVmCf7etZtIrH6T6PDIk9bb
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:41 2025 by rpki-client on console.sobornost.net