Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8770F8A1C7C11F0958DF884DAE4EC9C.roa
File: C8770F8A1C7C11F0958DF884DAE4EC9C.roa (raw, json)
Hash identifier: TMuKHt8CLxwn8FmqlmWo2VMigHGBg/wOE2Jjr4jxzAw=
Subject key identifier: 1F:41:74:03:77:68:7D:FC:5B:CB:26:CD:39:80:76:E6:D8:27:40:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8770F8A1C7C11F0958DF884DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 17:44:32 +0000
ROA not before: Fri 18 Apr 2025 17:44:27 +0000
ROA not after: Tue 27 May 2025 17:44:27 +0000
asID: 44559
IP address blocks: 156.246.150.0/24 maxlen: 24
156.246.152.0/24 maxlen: 24
156.246.153.0/24 maxlen: 24
156.246.154.0/24 maxlen: 24
156.246.155.0/24 maxlen: 24
156.246.156.0/24 maxlen: 24
156.246.157.0/24 maxlen: 24
156.246.158.0/24 maxlen: 24
156.246.159.0/24 maxlen: 24
156.246.160.0/24 maxlen: 24
156.246.166.0/24 maxlen: 24
156.246.167.0/24 maxlen: 24
156.246.168.0/24 maxlen: 24
156.246.180.0/24 maxlen: 24
156.246.182.0/24 maxlen: 24
156.246.192.0/24 maxlen: 24
156.246.195.0/24 maxlen: 24
156.246.206.0/24 maxlen: 24
156.246.219.0/24 maxlen: 24
156.246.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85311 (0x14d3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 17:44:27 2025 GMT
Not After : May 27 17:44:27 2025 GMT
Subject: CN=68028f80-8e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:2f:a9:41:bc:a4:eb:9a:c4:e9:c5:51:97:
37:99:1a:cd:b5:21:5d:87:18:cc:a6:15:f2:c4:ea:
52:24:eb:1e:bc:25:ba:c1:4d:84:00:34:bf:a3:ed:
a0:fa:fb:3f:dc:5c:d1:be:4c:e0:26:92:dd:8b:20:
e0:7f:88:6a:82:6b:03:8a:ed:4d:72:d8:74:a3:22:
0d:6e:b4:12:2f:96:6b:47:f8:c3:8c:4d:cd:2a:ee:
2a:1e:e9:58:4d:85:dd:4b:a0:72:9e:6d:2a:5d:c6:
db:30:f7:4b:7f:6e:09:c4:19:47:1e:76:0b:d7:49:
c3:07:d4:5a:ad:2e:e6:7a:b4:c7:60:c1:ac:02:62:
79:5f:b6:96:9b:a2:2a:ac:9d:01:c3:ab:0e:8c:e6:
20:c2:b2:08:7b:2d:d5:0b:2c:4d:45:e0:a0:d1:df:
06:80:75:38:d7:a7:2c:a0:df:93:07:5b:8e:d0:7e:
f1:06:87:10:87:2f:3e:a3:98:43:42:1d:5d:92:c8:
c4:40:bf:d8:0c:d1:e2:31:90:77:0e:11:40:d5:5e:
fa:f8:56:e1:d6:7d:44:14:55:db:a2:ed:30:8d:6e:
c9:de:49:81:b4:08:4a:ef:18:bb:80:fb:73:b6:ea:
6b:79:6a:eb:f0:bf:2b:81:cf:5e:86:aa:bb:3b:21:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:74:03:77:68:7D:FC:5B:CB:26:CD:39:80:76:E6:D8:27:40:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8770F8A1C7C11F0958DF884DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.150.0/24
156.246.152.0-156.246.160.255
156.246.166.0-156.246.168.255
156.246.180.0/24
156.246.182.0/24
156.246.192.0/24
156.246.195.0/24
156.246.206.0/24
156.246.219.0/24
156.246.232.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c1:64:62:8e:39:70:87:2a:ae:e8:6d:ce:c1:c6:d2:82:e1:
84:0d:12:fb:65:f1:4f:c4:25:47:c2:af:4d:dd:01:d4:7f:ee:
99:cd:43:35:15:2c:35:36:41:4b:b6:03:41:09:11:cd:c6:84:
b7:ac:17:1e:de:4f:56:37:5d:51:3e:ce:a2:5e:05:f2:a3:65:
b3:2a:41:a1:50:9b:09:13:41:96:9b:7c:f9:4a:87:a5:a3:c2:
44:8f:c8:d3:6b:8d:c2:10:46:e1:4f:d3:52:35:c0:bd:69:64:
65:95:3b:8a:08:1a:53:b2:3b:ff:97:46:e0:5d:82:a1:af:f3:
97:e1:51:da:88:68:90:b8:86:de:d0:cf:62:39:46:12:48:c9:
27:42:40:a7:09:c5:ef:9c:bf:65:c2:41:ee:ad:83:85:d1:eb:
bb:ad:ba:7c:e0:f0:69:27:66:47:0a:2d:c8:28:8b:f1:29:4f:
dc:bb:76:4f:ac:f2:80:db:8b:ce:6f:a9:83:7a:ff:b0:12:e6:
82:d0:f3:b8:63:9c:5b:5f:9f:28:44:40:c0:80:bd:ad:6c:5f:
a1:df:7c:9a:ee:f1:4c:62:07:e4:90:d0:9d:f1:ec:8c:46:42:
df:9e:05:2e:f7:c3:5d:a7:32:62:a9:57:8f:f6:de:aa:72:2f:
e4:3c:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:17:31 2025 by rpki-client on console.sobornost.net