Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07CF2F901A0311F082854C226EB8BCC6.roa
File: 07CF2F901A0311F082854C226EB8BCC6.roa (raw, json)
Hash identifier: SCl6n3aZ73qks1YwxoCQv/iP9z79ce9uHC4ltJEbtUo=
Subject key identifier: BD:B0:5F:48:20:A9:52:93:0A:AF:AE:B4:28:D0:B4:6F:51:D4:FF:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07CF2F901A0311F082854C226EB8BCC6.roa
Signing time: Tue 15 Apr 2025 14:07:57 +0000
ROA not before: Tue 15 Apr 2025 14:07:52 +0000
ROA not after: Thu 22 May 2025 14:07:52 +0000
asID: 49791
IP address blocks: 156.253.236.0/24 maxlen: 24
156.253.237.0/24 maxlen: 24
156.253.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85098 (0x14c6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 14:07:52 2025 GMT
Not After : May 22 14:07:52 2025 GMT
Subject: CN=67fe683d-074b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:d9:23:fe:90:ff:cb:65:04:55:b0:50:56:
0d:91:79:34:d9:a9:85:1a:49:4a:ca:76:0a:2b:b1:
2c:42:33:1d:9f:3d:3c:58:76:c6:8d:c4:c4:01:3f:
02:b6:29:cc:9f:53:ff:39:3a:ed:b1:77:bf:77:d9:
59:a2:6d:b5:55:89:0f:e7:c8:33:a9:20:61:30:98:
fc:3b:46:23:79:88:71:4b:2f:02:24:16:b1:95:60:
93:0b:a8:40:c1:f3:7e:42:fd:41:b6:84:b9:e7:d2:
17:7f:93:ca:78:03:fb:51:5b:8b:07:7c:c7:eb:f6:
ba:03:73:21:f2:09:f6:74:c5:7b:65:a8:25:63:be:
1c:59:d1:1b:9f:c2:8b:e3:fa:3e:41:5e:95:fb:11:
ca:47:6f:83:d3:45:d2:84:29:2b:ac:2e:6e:6c:5e:
4b:74:0e:19:2e:6c:09:24:ef:0e:82:80:59:a0:0a:
4e:f7:8b:42:a2:2e:8d:fd:1b:eb:53:38:83:72:d9:
89:89:32:8a:47:a7:d7:d2:e7:19:f0:e2:7e:bd:41:
0f:5d:20:5a:44:30:b7:2e:94:3a:3d:76:61:ca:bb:
a7:6d:33:b2:79:a0:d1:7c:17:2f:dd:48:b7:9f:c8:
e4:b5:df:d5:bb:f0:27:0a:c6:31:80:8c:ab:90:df:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:5F:48:20:A9:52:93:0A:AF:AE:B4:28:D0:B4:6F:51:D4:FF:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07CF2F901A0311F082854C226EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.236.0/23
156.253.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:18:f4:42:bd:33:9e:f9:6d:1f:e1:54:86:7c:97:5c:fb:52:
90:7c:c1:4b:bf:ca:8b:23:af:2a:96:87:7b:81:16:8f:dc:1e:
52:73:34:d3:a1:fe:3e:fc:3e:8d:e1:d4:8e:95:7b:46:a7:dd:
e5:48:e7:f8:c8:33:95:a5:bc:92:05:50:9c:48:e1:e4:0d:47:
57:91:19:15:06:04:89:a8:01:f3:d4:95:76:4b:b1:38:6d:e4:
64:dd:ce:cf:ee:a8:50:2a:bd:1d:07:c1:bd:98:a8:a4:37:ad:
c5:4b:de:62:de:61:51:33:0f:9a:9b:17:01:81:b2:52:d7:08:
30:d6:2f:d9:29:37:bd:78:ee:9c:da:67:d9:4a:ec:ec:73:78:
fe:a5:fc:1b:47:d7:62:e9:ab:e2:a1:38:aa:f5:b5:dd:94:21:
77:7e:72:ad:31:ef:b5:30:27:37:1d:3b:80:3f:50:d2:ca:bd:
dc:cc:55:dc:21:0f:97:7c:91:11:59:05:7f:c8:c2:e6:1d:f6:
ae:58:0f:fc:f8:50:5a:d1:86:a9:51:ae:e2:3c:79:b8:1f:aa:
4b:2d:9d:f6:82:36:8a:3f:e5:5b:70:36:3b:dd:0f:dd:ca:94:
66:d7:bf:90:79:5b:3d:c9:e2:25:63:96:d9:94:f4:1f:e9:05:
c0:5d:79:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:09 2025 by rpki-client on console.sobornost.net