Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07BC9DBA1A0A11F0933817D26DB8BCC6.roa
File: 07BC9DBA1A0A11F0933817D26DB8BCC6.roa (raw, json)
Hash identifier: O5vs6B1qQ91fQ+7vGe1VAhWIuG62tSsjc1E7sSkT8T4=
Subject key identifier: A3:17:2D:2E:10:DA:D9:F5:FC:49:20:5A:0A:4C:DD:F2:4C:5B:09:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07BC9DBA1A0A11F0933817D26DB8BCC6.roa
Signing time: Tue 15 Apr 2025 14:58:04 +0000
ROA not before: Tue 15 Apr 2025 14:57:59 +0000
ROA not after: Sun 19 Apr 2026 14:57:59 +0000
asID: 136513
IP address blocks: 156.246.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85116 (0x14c7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 14:57:59 2025 GMT
Not After : Apr 19 14:57:59 2026 GMT
Subject: CN=67fe73fb-b3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:6e:c4:43:a1:3c:e8:8a:f3:bd:fd:b4:02:
57:5e:bd:56:88:76:7a:88:a3:15:3e:81:83:2f:8b:
96:86:e9:b7:cc:ab:c4:d4:df:5c:e3:13:6e:60:d1:
6f:fb:2f:86:33:b4:7e:1e:19:2a:4d:41:a7:8e:c7:
81:fa:e2:6b:0c:c0:62:a9:28:b2:96:6f:ab:d9:84:
32:66:46:46:f5:a3:5e:ff:cd:5f:e4:2e:61:b7:a8:
bc:39:7d:3a:c4:c1:5c:0b:c8:13:64:16:e2:bf:7c:
31:eb:ec:f2:af:d3:6e:68:4b:4e:14:eb:30:18:7a:
07:62:87:22:28:6e:c1:98:94:3a:e8:e1:84:52:52:
4f:88:a0:12:a3:34:0e:1b:0e:78:6d:cb:4e:64:79:
f7:ca:ba:a4:5d:d1:f3:36:6d:bb:8e:9f:2c:28:d4:
52:44:2f:d8:d2:e5:e8:d7:76:77:8c:5d:cf:99:16:
5e:78:a2:c3:ab:f4:fe:69:ad:20:28:b0:60:e1:f2:
fa:a2:f7:0e:3d:a3:66:6a:53:e6:89:88:a9:48:19:
9d:68:07:37:63:ce:e2:1b:94:af:94:f1:3a:c5:80:
2d:1c:3f:14:63:82:41:5d:f8:8d:23:7b:37:c6:b5:
66:cc:c6:2a:11:90:7e:88:d8:f1:eb:ae:b1:af:d2:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:17:2D:2E:10:DA:D9:F5:FC:49:20:5A:0A:4C:DD:F2:4C:5B:09:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07BC9DBA1A0A11F0933817D26DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:fd:b1:4e:e1:fc:95:bc:07:66:c0:36:3a:42:e5:3b:a3:5a:
a4:f5:d2:df:f1:36:55:77:85:84:49:9c:93:e1:9f:fa:68:34:
b6:fc:5a:f3:c3:98:ab:c2:c0:ce:c5:00:9a:7d:51:88:c6:5b:
29:e8:ca:03:da:6e:16:86:a8:9f:c2:80:c8:3f:00:8b:6b:19:
03:da:d4:87:ae:40:6b:8c:20:53:af:86:00:fb:41:00:c4:a7:
16:da:39:2d:34:28:dc:fc:30:5a:e0:5a:e0:8b:23:b4:92:39:
8b:f4:07:76:99:17:d6:72:21:9b:dd:8e:85:04:ab:70:d5:b1:
c7:9e:ec:c7:e9:1e:3c:21:71:74:65:40:ff:2e:7c:11:7e:e4:
16:a2:4a:4f:d0:6f:48:98:03:6c:52:98:ec:6b:7b:6b:85:94:
d6:b4:d3:40:66:0d:f1:7b:d5:24:65:68:1c:3c:84:de:73:59:
c0:f8:42:79:c1:13:11:98:34:19:e4:4b:ff:23:ae:d5:61:cb:
f1:aa:21:3b:93:38:01:f5:81:d0:b6:6e:74:d3:d1:dc:0d:eb:
5d:7b:51:6f:d2:da:19:f9:fa:60:d6:24:e9:15:ba:7d:3a:2b:
ae:9c:67:8b:85:6c:d8:f4:9e:09:5c:b5:f0:4c:7d:15:b5:d5:
d5:c0:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:09 2025 by rpki-client on console.sobornost.net