Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF166E9215EC11F090885FD56DB8BCC6.roa
File: EF166E9215EC11F090885FD56DB8BCC6.roa (raw, json)
Hash identifier: tJp0fPz0LNWX5+1YutM4HkxTQ/g4ioEXYzYq7yz694k=
Subject key identifier: 26:91:3E:87:2E:5E:55:F1:A2:1C:32:F8:A1:85:2B:7A:1B:1E:01:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF166E9215EC11F090885FD56DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:19:42 +0000
ROA not before: Thu 10 Apr 2025 09:19:38 +0000
ROA not after: Fri 16 May 2025 09:19:38 +0000
asID: 20473
IP address blocks: 45.207.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84839 (0x14b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 09:19:38 2025 GMT
Not After : May 16 09:19:38 2025 GMT
Subject: CN=67f78d2e-070e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:b8:70:d6:e8:c7:ee:96:d4:60:06:59:95:
20:bd:d4:e3:6d:97:88:25:73:3c:ac:b6:3f:2f:ce:
39:fb:c7:59:1d:8c:08:8f:c5:98:10:9d:f7:fd:8e:
b7:5b:b6:17:82:c8:b2:e0:bf:d9:84:b3:c6:d0:0e:
f6:eb:5e:74:2d:c2:88:26:c1:1a:6d:e8:77:35:cb:
e8:24:b4:dc:5f:6c:13:8b:08:19:d7:e0:30:96:53:
34:6d:6e:5e:28:92:49:46:c2:c1:93:a2:0e:17:b7:
f7:3e:8f:98:60:51:31:4c:18:4e:b6:79:42:6c:48:
64:f0:11:90:99:14:52:02:35:6c:8e:d1:d1:9a:cc:
25:74:b0:ba:a7:0c:4f:0a:75:89:23:5a:45:2b:28:
96:40:36:15:4d:ad:5e:05:33:3b:f7:43:bd:ac:92:
6c:f6:f9:bc:f4:b0:5b:8f:db:93:aa:ae:49:14:19:
c4:5d:ff:ab:69:90:fb:88:06:3f:2f:84:1d:cf:f1:
7c:62:e3:53:61:d4:1b:62:0e:b0:1e:a3:be:0b:95:
89:e4:c1:86:db:f8:48:5a:f9:d8:51:fd:07:e0:b3:
5a:ec:35:eb:1b:9f:cc:47:72:c0:00:54:44:f3:9e:
68:24:95:b2:3a:bc:28:d0:8f:22:19:cf:ea:09:0c:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:91:3E:87:2E:5E:55:F1:A2:1C:32:F8:A1:85:2B:7A:1B:1E:01:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF166E9215EC11F090885FD56DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.26.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e9:f6:dd:03:d3:2a:9b:8b:0f:d1:db:75:e3:a7:df:0c:a4:
9d:a1:ed:88:f4:7a:0f:27:e3:25:c7:cb:b0:25:d2:ed:db:57:
07:82:eb:d4:54:07:70:d8:a4:80:ca:7c:5d:e8:b3:0f:2e:47:
ee:9b:e0:31:dc:f0:99:59:50:42:6e:b5:f7:25:f4:dc:dc:37:
a6:1f:df:29:34:bf:d0:5e:99:ec:a7:94:0c:84:a9:76:20:81:
ce:dd:c0:38:46:9c:84:a2:a6:74:66:13:d7:0a:4a:f5:f6:6f:
01:24:12:8d:84:e6:79:02:05:4c:a3:a6:93:c9:db:d3:b8:ae:
12:f0:be:9b:e0:b0:63:67:93:e7:d3:12:e2:e5:aa:ad:59:cf:
73:48:56:0c:b6:af:2a:07:1c:67:35:4e:ec:43:13:c6:53:09:
38:f4:d2:22:61:cc:4c:41:cb:ab:62:f5:41:98:c4:c2:5d:7a:
01:a9:67:93:31:87:5c:7b:62:38:e7:c9:60:96:78:e0:da:58:
59:33:fc:1c:70:d2:15:c4:01:09:39:7e:a8:04:7a:5b:44:5b:
65:a4:4d:6f:2c:bb:db:7a:9e:45:32:be:27:91:55:48:d8:25:
84:7d:07:a7:a1:e9:b8:a3:f3:c1:07:e5:57:6e:09:09:31:11:
c5:d5:44:9a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUtnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDEwMDkxOTM4WhcNMjUwNTE2MDkxOTM4WjAYMRYw
FAYDVQQDEw02N2Y3OGQyZS0wNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3li4cNbox+6W1GAGWZUgvdTjbZeIJXM8rLY/L845+8dZHYwIj8WYEJ33
/Y63W7YXgsiy4L/ZhLPG0A726150LcKIJsEabeh3NcvoJLTcX2wTiwgZ1+AwllM0
bW5eKJJJRsLBk6IOF7f3Po+YYFExTBhOtnlCbEhk8BGQmRRSAjVsjtHRmswldLC6
pwxPCnWJI1pFKyiWQDYVTa1eBTM790O9rJJs9vm89LBbj9uTqq5JFBnEXf+raZD7
iAY/L4Qdz/F8YuNTYdQbYg6wHqO+C5WJ5MGG2/hIWvnYUf0H4LNa7DXrG5/MR3LA
AFRE855oJJWyOrwo0I8iGc/qCQyj+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCaR
PocuXlXxohwy+KGFK3obHgE3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRjE2NkU5MjE1RUMxMUYwOTA4ODVGRDU2REI4QkNDNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8aMA0GCSqGSIb3DQEBCwUA
A4IBAQBy6fbdA9Mqm4sP0dt146ffDKSdoe2I9HoPJ+Mlx8uwJdLt21cHguvUVAdw
2KSAynxd6LMPLkfum+Ax3PCZWVBCbrX3JfTc3DemH98pNL/QXpnsp5QMhKl2IIHO
3cA4RpyEoqZ0ZhPXCkr19m8BJBKNhOZ5AgVMo6aTydvTuK4S8L6b4LBjZ5Pn0xLi
5aqtWc9zSFYMtq8qBxxnNU7sQxPGUwk49NIiYcxMQcurYvVBmMTCXXoBqWeTMYdc
e2I458lglnjg2lhZM/wccNIVxAEJOX6oBHpbRFtlpE1vLLvbep5FMr4nkVVI2CWE
fQenoem4o/PBB+VXbgkJMRHF1USa
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:43 2025 by rpki-client on console.sobornost.net