Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF1630B0187311F0B9E022B76DB8BCC6.roa
File: EF1630B0187311F0B9E022B76DB8BCC6.roa (raw, json)
Hash identifier: 7xCmmTHk+QnU6aK7FJMUYm4lU62zce7eQMbdwkDRDqY=
Subject key identifier: 83:75:3E:17:0D:1D:A8:FE:C5:66:8E:26:3B:57:46:DE:E7:BC:56:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF1630B0187311F0B9E022B76DB8BCC6.roa
Signing time: Sun 13 Apr 2025 14:31:06 +0000
ROA not before: Sun 13 Apr 2025 14:31:02 +0000
ROA not after: Thu 05 Jun 2025 14:31:02 +0000
asID: 398993
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.252.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84981 (0x14bf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 14:31:02 2025 GMT
Not After : Jun 5 14:31:02 2025 GMT
Subject: CN=67fbcaaa-89fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:13:83:a7:e3:96:e9:ec:52:5c:a4:6b:f6:
02:13:8e:8c:23:b5:5f:9c:d3:64:1d:ba:27:d7:58:
15:f5:c3:aa:0b:03:8e:5b:a1:61:c4:9a:3b:e9:4b:
de:bc:80:68:ac:0c:1a:17:76:52:70:15:e5:9f:19:
42:c6:eb:38:cc:76:c1:63:5a:9d:4c:e3:c7:84:9c:
4d:90:cb:66:93:2f:88:e9:ff:b5:08:62:25:6e:23:
a9:ea:9d:ce:cb:c0:2d:3d:76:f1:2a:66:f5:24:ec:
29:e8:b8:ca:6c:69:c5:77:0e:84:10:ea:14:1f:4d:
d5:e8:ec:7f:1a:48:ec:ce:52:eb:21:36:af:6b:57:
da:9a:af:40:1c:f3:11:88:dc:e6:18:b3:f9:c6:78:
8e:45:a8:46:54:64:d4:f8:da:5d:50:7b:05:09:2d:
3a:f5:82:9a:d8:fd:07:b0:5d:2a:fc:0f:3c:81:81:
98:46:84:a9:16:55:35:d8:7b:92:29:49:44:e2:55:
ff:13:6d:4a:0f:7b:f4:3f:37:cf:e0:37:6d:20:b6:
fe:74:01:e4:3d:65:67:ea:ef:fb:52:55:d3:bf:85:
f2:95:aa:5a:8a:a0:de:aa:66:c7:12:e3:99:41:b2:
8c:0c:59:5c:11:01:21:98:7c:2e:99:08:11:a7:f4:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:75:3E:17:0D:1D:A8:FE:C5:66:8E:26:3B:57:46:DE:E7:BC:56:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF1630B0187311F0B9E022B76DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.252.96.0/19
Signature Algorithm: sha256WithRSAEncryption
95:a4:9e:bf:19:e4:e7:fa:ad:4d:86:52:7a:8a:df:b9:58:f0:
e6:5d:15:fb:fb:5c:93:3f:d7:2d:1b:63:cb:dc:7e:81:8f:9a:
71:32:5f:15:57:d2:fa:a8:d1:ad:2b:89:60:a8:db:e4:e2:e4:
27:d0:f1:db:87:24:f6:3d:14:27:24:c4:03:72:84:b0:f8:3f:
e7:b1:14:00:fe:8e:29:90:bd:57:be:2e:46:3f:f3:ab:38:48:
c0:ea:2c:d7:67:85:c1:ec:bd:1f:f6:21:a7:36:19:37:df:cc:
5c:5e:cf:73:b7:fa:76:81:6f:51:ef:7b:18:c2:51:44:c6:fd:
da:6a:8c:65:3f:55:a6:5e:83:2d:87:7a:fa:84:aa:7f:09:8f:
0b:de:33:5d:0e:ff:21:a6:d7:3c:df:70:aa:c7:e1:53:15:17:
55:3e:1b:40:ec:00:64:71:b4:52:9e:a6:b8:1a:48:a5:27:86:
e8:19:3e:42:e4:4d:b7:48:55:88:c4:83:e5:5f:23:60:fd:01:
d4:1d:3d:a3:0c:0c:66:09:d3:de:5f:36:6c:bf:8d:38:d1:22:
1f:85:1d:a5:1a:30:5a:2e:db:cf:22:83:5b:20:2c:bd:29:f2:
c9:70:3a:d6:79:fb:57:69:94:9a:ea:6e:73:f8:c3:d9:5a:89:
8b:5c:62:6b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUv1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDEzMTQzMTAyWhcNMjUwNjA1MTQzMTAyWjAYMRYw
FAYDVQQDEw02N2ZiY2FhYS04OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoJUTg6fjlunsUlyka/YCE46MI7VfnNNkHbon11gV9cOqCwOOW6FhxJo7
6UvevIBorAwaF3ZScBXlnxlCxus4zHbBY1qdTOPHhJxNkMtmky+I6f+1CGIlbiOp
6p3Oy8AtPXbxKmb1JOwp6LjKbGnFdw6EEOoUH03V6Ox/GkjszlLrITava1famq9A
HPMRiNzmGLP5xniORahGVGTU+NpdUHsFCS069YKa2P0HsF0q/A88gYGYRoSpFlU1
2HuSKUlE4lX/E21KD3v0PzfP4DdtILb+dAHkPWVn6u/7UlXTv4XylapaiqDeqmbH
EuOZQbKMDFlcEQEhmHwumQgRp/RtJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIN1
PhcNHaj+xWaOJjtXRt7nvFYRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRjE2MzBCMDE4NzMxMUYwQjlFMDIyQjc2REI4QkNDNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFnOOgAwQFnPxgMA0GCSqGSIb3
DQEBCwUAA4IBAQCVpJ6/GeTn+q1NhlJ6it+5WPDmXRX7+1yTP9ctG2PL3H6Bj5px
Ml8VV9L6qNGtK4lgqNvk4uQn0PHbhyT2PRQnJMQDcoSw+D/nsRQA/o4pkL1Xvi5G
P/OrOEjA6izXZ4XB7L0f9iGnNhk338xcXs9zt/p2gW9R73sYwlFExv3aaoxlP1Wm
XoMth3r6hKp/CY8L3jNdDv8hptc833Cqx+FTFRdVPhtA7ABkcbRSnqa4GkilJ4bo
GT5C5E23SFWIxIPlXyNg/QHUHT2jDAxmCdPeXzZsv4040SIfhR2lGjBaLtvPIoNb
ICy9KfLJcDrWeftXaZSa6m5z+MPZWomLXGJr
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:31 2025 by rpki-client on console.sobornost.net