Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A7E12A8187511F09A9230BC6DB8BCC6.roa
File: 1A7E12A8187511F09A9230BC6DB8BCC6.roa (raw, json)
Hash identifier: 7tBJHEm44IiNkigL7WCz/T9cT7T35Sd+fDrretYPb/4=
Subject key identifier: 18:97:AE:33:2C:99:BA:AA:69:EE:96:5F:87:83:1F:98:6C:D3:AD:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A7E12A8187511F09A9230BC6DB8BCC6.roa
Signing time: Sun 13 Apr 2025 14:39:28 +0000
ROA not before: Sun 13 Apr 2025 14:39:24 +0000
ROA not after: Thu 05 Jun 2025 14:39:24 +0000
asID: 398478
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.252.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84985 (0x14bf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 14:39:24 2025 GMT
Not After : Jun 5 14:39:24 2025 GMT
Subject: CN=67fbcca0-1d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:1c:c1:63:ed:fe:1d:ec:82:8d:2e:ec:fa:
09:72:19:3c:43:a4:14:ca:40:cc:d3:76:f4:cb:7b:
29:37:16:63:e3:68:8f:d2:0e:20:33:26:d3:06:50:
c4:0f:29:13:ce:57:da:c2:98:df:62:f4:3a:c5:24:
eb:32:18:84:15:80:3a:cc:2b:b7:83:41:95:ab:f1:
b1:79:69:87:c3:7b:a3:bf:a5:7f:a7:4d:0f:1a:83:
0a:af:29:8c:6a:60:11:7f:e1:59:fb:c5:07:e7:23:
08:f6:8b:f0:ee:18:86:22:e5:08:eb:9f:87:fc:a8:
e7:5f:9e:ca:bf:6d:b6:e5:79:22:1b:00:2b:e6:ed:
07:ba:6e:71:18:e3:49:cc:2c:f3:06:39:2f:e4:04:
ce:0d:38:1d:de:94:3a:70:0b:5a:eb:99:84:dd:7a:
7c:6c:f6:01:09:34:44:2d:93:39:eb:c2:80:f5:0d:
d7:77:81:e3:e9:81:4e:b3:5e:63:ad:8c:51:52:0a:
d8:d4:3f:0e:5f:fd:97:9c:12:6b:67:96:25:d4:8a:
46:14:bf:cf:ec:93:e4:a9:8d:38:f5:23:b3:58:58:
67:92:13:10:55:63:76:45:bd:7b:f5:1c:e7:8d:fb:
53:0e:c8:57:58:37:b0:46:75:80:4d:b3:00:a0:e4:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:97:AE:33:2C:99:BA:AA:69:EE:96:5F:87:83:1F:98:6C:D3:AD:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A7E12A8187511F09A9230BC6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.252.96.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:10:09:a5:2e:7c:d6:01:d1:38:ff:bb:9a:a3:c9:43:ae:d7:
98:c9:ed:1a:54:53:8b:58:72:df:d0:f5:b3:5f:b9:84:9c:4b:
5f:8f:6c:dd:f6:f7:28:9c:90:3b:f6:56:c6:4e:28:09:e3:fa:
c6:c2:e9:10:fe:d9:88:bb:ae:f9:7e:d9:c9:40:be:59:5a:aa:
52:51:55:cf:65:89:85:81:ee:27:a2:77:3b:a6:18:3e:58:33:
08:67:83:74:01:99:75:f9:ac:ba:de:ee:ce:d6:26:1c:ed:0c:
bf:85:2f:96:d8:06:fc:11:eb:ca:a7:ba:3f:04:f4:68:ba:ab:
c4:d4:62:8c:d7:5b:94:5e:4f:69:b8:3a:1e:cd:d5:4c:23:f5:
b4:c4:fa:a7:f1:25:a7:98:32:50:d5:84:35:26:2c:61:83:e6:
f5:5f:bc:3c:21:ac:07:62:27:81:56:42:ed:75:03:04:f6:d9:
d5:3e:a3:e1:be:0f:37:04:43:dc:a8:6f:03:65:90:33:08:e3:
80:d5:ed:7d:34:c9:94:60:cc:a1:7c:7e:52:4e:90:5c:c0:fb:
8c:12:5c:15:7b:b8:27:c9:6e:2a:08:99:fa:08:c6:75:8c:33:
fd:d5:1d:83:88:bf:71:54:b5:37:4b:ff:2c:08:59:d1:8f:af:
96:92:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:49:10 2025 by rpki-client on console.sobornost.net