Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/100D6BFE19FE11F09073C9026EB8BCC6.roa
File: 100D6BFE19FE11F09073C9026EB8BCC6.roa (raw, json)
Hash identifier: thaFsfECcbNhGY5ckd02prMuoFtEbA+vLPVqY8uqYZA=
Subject key identifier: 21:17:39:4E:01:31:BA:C0:C7:1B:2A:06:78:02:D5:78:6E:41:38:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C62
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/100D6BFE19FE11F09073C9026EB8BCC6.roa
Signing time: Tue 15 Apr 2025 13:32:23 +0000
ROA not before: Tue 15 Apr 2025 13:32:14 +0000
ROA not after: Thu 15 May 2025 13:32:14 +0000
asID: 134365
IP address blocks: 156.226.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85090 (0x14c62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 13:32:14 2025 GMT
Not After : May 15 13:32:14 2025 GMT
Subject: CN=67fe5fe7-b17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:97:02:5c:74:4c:34:70:89:19:30:7c:90:
9d:1b:31:be:68:bd:4b:63:b5:ed:f8:2c:57:70:0f:
7c:20:05:52:cd:7d:27:dc:e9:19:d7:2d:70:1c:11:
d8:a5:ad:c4:82:98:c0:8b:b4:f0:1d:0f:12:4d:8c:
36:88:9c:47:6a:89:a0:d8:6a:a9:18:63:7f:63:92:
4a:76:0a:01:b4:a9:a1:2d:c3:29:49:b0:5e:c4:23:
31:4d:93:08:ef:b1:00:34:a1:e4:38:34:fd:90:14:
fc:6f:e3:7c:20:eb:76:e7:ad:46:82:b4:67:b7:15:
4e:54:80:32:c1:87:f3:96:ff:f4:a5:5b:8a:6b:1a:
56:25:df:e4:20:45:ee:76:4f:ad:d8:f8:d2:51:04:
e3:e7:36:4d:14:58:28:8c:33:52:5b:23:53:1b:ec:
de:85:62:5d:3c:f0:23:6d:e8:fb:9a:3e:a5:3c:d7:
00:8c:f5:32:ce:ac:c2:91:5a:26:88:ac:1c:1a:13:
cc:3d:d1:c5:6c:bf:fb:76:2f:08:4c:0d:4c:75:8b:
38:eb:9a:fd:38:71:27:b0:fd:e9:d6:6a:af:d9:42:
ab:34:40:cc:02:a8:e8:16:5f:ec:29:97:af:e5:a4:
e8:09:46:54:26:0a:6b:98:e8:83:80:bb:4c:09:94:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:39:4E:01:31:BA:C0:C7:1B:2A:06:78:02:D5:78:6E:41:38:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/100D6BFE19FE11F09073C9026EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/21
Signature Algorithm: sha256WithRSAEncryption
28:6a:d4:b1:ce:84:a8:38:8c:70:25:e8:07:ec:f3:b4:6d:fd:
89:e1:06:f4:e0:08:83:f2:1e:8e:c4:4e:51:0b:cc:23:07:ed:
e8:25:aa:c6:68:48:53:59:4e:9e:ca:64:34:9d:63:5a:d8:4f:
1a:db:d1:96:e4:e9:1c:f6:83:26:2f:78:8a:aa:9f:9d:4f:41:
fa:78:8c:a7:ec:f5:01:89:15:0a:f9:a6:0e:f9:5e:53:15:e1:
0f:66:95:91:f9:1e:66:15:bd:d2:98:a5:a3:a3:9f:4e:d5:e4:
a2:2f:3b:19:cb:c2:1d:a9:da:88:0a:0e:7d:19:89:ef:97:5e:
7a:04:97:f0:6f:76:10:2c:09:14:9f:86:c0:13:c5:f3:47:1d:
7b:ea:26:ed:de:6a:a4:18:bb:9e:07:9b:73:69:e0:73:3c:0f:
f8:4c:9d:95:0e:d2:03:91:81:7c:a9:ad:5e:86:52:5c:2f:29:
c3:22:85:b3:39:f3:f0:ec:42:64:1e:b6:7d:56:93:7d:fd:bf:
d6:8d:fa:b4:95:be:cd:39:8d:11:4b:a0:ee:01:d6:0a:8c:41:
de:6c:c7:c4:2e:f2:da:f9:82:ca:36:1c:67:df:33:13:03:d0:
81:a2:c7:8c:04:e5:7e:6b:17:73:04:a9:9c:a7:87:16:67:53:
dc:66:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:42 2025 by rpki-client on console.sobornost.net