Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AC7F6B6B5F711EF9851E476762E951A.roa
File: 0AC7F6B6B5F711EF9851E476762E951A.roa (raw, json)
Hash identifier: WG3jP4qO/oYj4Eq5lY6XY9TcvStBFW09QdMxvJEnkGk=
Subject key identifier: E5:F8:11:49:87:E7:B4:EB:97:4E:7A:F0:E9:FB:99:4E:7A:53:C2:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E130
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AC7F6B6B5F711EF9851E476762E951A.roa
Signing time: Mon 09 Dec 2024 06:30:11 +0000
ROA not before: Mon 09 Dec 2024 06:30:08 +0000
ROA not after: Mon 19 Oct 2026 06:30:08 +0000
asID: 150706
IP address blocks: 156.226.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57648 (0xe130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 9 06:30:08 2024 GMT
Not After : Oct 19 06:30:08 2026 GMT
Subject: CN=67568e73-465f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:b8:ed:fa:f8:46:29:99:68:53:59:82:0c:
b8:69:5d:65:7a:a8:2b:31:17:5f:86:2f:a0:36:44:
a3:8c:0c:fb:ba:f2:fd:d1:93:27:a4:e8:28:81:7a:
a5:b5:ed:b3:e1:86:ac:ae:7e:e9:52:5c:0d:b2:29:
57:5e:d5:4d:98:0f:b2:b4:de:14:50:4d:1f:fa:72:
bd:1d:da:10:c8:e6:e2:3b:d5:56:08:14:a1:47:f3:
4e:23:64:2b:f9:56:95:e0:d8:4f:08:1b:79:f8:93:
cf:c7:b5:aa:35:11:d7:00:eb:7c:1a:93:22:f3:8e:
17:eb:a0:ab:04:8f:8b:e9:4f:e1:b4:5b:17:24:57:
8c:2d:95:0e:2e:c4:d0:7d:f4:c0:d7:43:3a:48:a3:
45:7b:3d:11:92:47:fe:53:1c:92:94:c4:9c:64:aa:
7b:6c:a5:f0:6a:b7:93:65:0b:34:df:4b:d4:fe:af:
9b:22:d6:db:95:9c:dc:a4:c5:82:bc:27:32:4f:d2:
c0:e4:63:29:79:1e:62:95:fb:e9:14:37:1a:e7:cb:
19:0c:96:1f:33:9f:76:b0:3a:98:64:32:7e:c3:21:
63:da:f9:e6:a7:ea:d0:b4:1d:3c:ae:69:39:0b:13:
f5:84:71:97:0d:d3:6d:21:fc:03:40:37:e5:ac:01:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F8:11:49:87:E7:B4:EB:97:4E:7A:F0:E9:FB:99:4E:7A:53:C2:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AC7F6B6B5F711EF9851E476762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:e0:17:2c:38:85:e8:12:f1:48:34:f6:9f:76:fb:4a:fb:64:
7b:a8:42:d6:9c:de:fb:dd:bb:e5:48:a3:7f:ec:30:b3:1f:42:
02:c2:07:c6:cb:72:b5:7d:73:9d:62:a0:70:57:21:10:0c:cc:
0d:ba:9e:b1:0d:1a:9f:ef:6c:01:99:5a:42:94:a9:92:fe:7c:
4a:ca:60:33:da:44:8a:5e:43:6f:65:3e:98:62:2d:94:4b:74:
f0:e8:34:bd:01:1a:d7:ab:aa:98:d2:60:48:71:0a:b6:88:2b:
3d:fa:9f:3d:31:fc:2f:21:25:2a:39:cf:d7:90:71:ff:7c:41:
f4:ba:f6:fa:7d:a5:69:ce:19:c1:f0:14:a7:d7:77:0f:6f:00:
d5:79:f8:e5:cc:95:6b:73:64:62:ae:0b:e8:59:a2:36:01:dc:
99:54:1c:7f:80:ca:b1:31:9e:4d:2b:af:e1:95:f7:94:67:fb:
ff:7f:2e:34:f3:32:97:67:83:bf:4b:15:97:64:41:6f:74:c4:
9c:af:de:77:72:36:91:d8:d5:ca:e3:9b:74:d2:73:be:b3:93:
e6:8f:b4:89:5f:03:a5:b3:eb:dd:9d:52:ca:34:08:7a:4f:16:
27:2a:ca:70:7d:52:17:ec:6b:65:18:41:0c:57:a5:94:8e:11:
62:47:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:49:01 2025 by rpki-client on console.sobornost.net