Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/067FAA28120311F0B9409C9B762E951A.roa
File: 067FAA28120311F0B9409C9B762E951A.roa (raw, json)
Hash identifier: FRd97EBV7XfgaJzEvr0jjkgNnml6S4cN75GoG3Jrrmw=
Subject key identifier: F0:33:5A:10:42:2B:5D:F8:7E:3A:B0:77:BB:2F:76:8F:3E:2E:2B:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/067FAA28120311F0B9409C9B762E951A.roa
Signing time: Sat 05 Apr 2025 09:47:45 +0000
ROA not before: Sat 05 Apr 2025 09:47:40 +0000
ROA not after: Wed 14 May 2025 09:47:40 +0000
asID: 64267
IP address blocks: 156.227.11.0/24 maxlen: 24
156.227.12.0/24 maxlen: 24
156.239.60.0/24 maxlen: 24
156.248.100.0/23 maxlen: 24
156.248.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84564 (0x14a54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 09:47:40 2025 GMT
Not After : May 14 09:47:40 2025 GMT
Subject: CN=67f0fc41-4014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:40:80:85:67:9b:7e:3f:c6:0f:0b:6f:8c:
f6:ad:61:1c:b4:c9:f4:0d:44:51:e8:bf:d5:4b:66:
06:d1:1c:74:8d:55:2d:c4:4f:cc:c1:36:81:62:3c:
49:fc:8c:fb:2c:82:1c:23:63:22:49:dd:98:4f:be:
5a:b1:c4:36:c0:fd:c1:7d:d0:4f:fd:51:53:9b:43:
a1:28:bf:99:2d:fe:03:d8:b5:34:9d:29:bd:89:79:
31:41:fc:54:ee:37:e2:6d:1c:6c:ae:bd:21:a5:c3:
ba:04:14:f2:41:3b:ba:84:56:f9:35:4a:8f:25:bf:
84:bf:c0:75:22:3f:ce:4e:93:4a:fd:09:bb:f9:e8:
c8:f1:fb:65:a1:45:33:3d:79:22:bf:28:c5:26:31:
f6:11:8f:51:84:fa:49:62:2a:b4:ad:0e:a6:e9:e0:
49:57:fb:d4:74:b6:22:bb:68:c4:f0:65:92:cf:4d:
75:f9:e4:6c:e0:6b:5f:02:3d:c7:ea:6a:a4:e8:f2:
c3:91:3c:ca:61:c6:ce:42:ce:53:ca:33:ad:1e:dc:
44:26:c7:19:f7:80:29:7e:d1:fe:96:19:09:fe:80:
51:cf:41:67:cf:0b:27:48:38:b6:68:f0:3e:b6:0f:
85:49:d9:68:9d:d7:2c:bd:6b:b5:9a:34:c5:78:13:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:33:5A:10:42:2B:5D:F8:7E:3A:B0:77:BB:2F:76:8F:3E:2E:2B:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/067FAA28120311F0B9409C9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.11.0-156.227.12.255
156.239.60.0/24
156.248.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:98:c6:41:af:3b:53:22:4d:73:0c:b1:03:33:31:16:a0:c0:
ab:6b:45:de:b4:7c:7e:6a:bc:f2:74:7d:f9:08:67:eb:bc:c0:
39:68:61:9b:92:0c:cf:92:15:89:df:b7:dc:fe:24:d1:ed:c0:
81:c2:29:35:43:98:94:c5:24:5e:8c:ae:30:41:c7:25:12:f8:
32:0c:0d:3d:15:63:db:c0:a0:c1:ea:2d:e6:ad:77:cb:e8:84:
ff:64:88:f0:14:89:1d:a6:8b:f1:54:1e:2c:e8:4e:90:50:f3:
f6:37:d4:6f:c5:5e:a2:70:c0:41:7b:67:d7:5c:9b:93:92:bf:
ca:ab:26:4b:57:e0:c9:df:63:46:63:5b:91:26:f9:51:5a:3b:
80:ba:5f:91:45:86:6e:38:7e:85:0b:d9:b6:8a:21:38:7a:5d:
3e:6b:3d:51:3e:d2:58:35:d0:b9:47:81:80:81:ba:41:2f:4a:
78:fa:1d:10:c0:23:66:ea:05:0e:44:fd:50:ac:14:a3:97:9c:
19:4c:99:39:ca:5f:a2:33:15:d3:5a:4e:f5:a9:00:c0:6c:3b:
d9:f5:b9:6e:4f:c1:7d:36:78:20:6a:6c:b2:e4:95:63:49:b5:
6a:d9:5b:a9:99:e3:f7:8b:bc:02:fe:45:2a:bd:81:38:b8:7f:
ac:d1:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:08 2025 by rpki-client on console.sobornost.net