Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A0A280615F511F096802D0C6EB8BCC6.roa
File: 2A0A280615F511F096802D0C6EB8BCC6.roa (raw, json)
Hash identifier: ulZg9AknV83aUeJjt4EEYleGz7iSCai/OSdc7tg2nKU=
Subject key identifier: 99:6C:21:B2:9D:C1:02:C6:9F:9C:BD:A1:E7:F3:9A:16:5C:E0:24:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A0A280615F511F096802D0C6EB8BCC6.roa
Signing time: Thu 10 Apr 2025 10:18:37 +0000
ROA not before: Thu 10 Apr 2025 10:18:33 +0000
ROA not after: Thu 08 May 2025 10:18:33 +0000
asID: 60223
IP address blocks: 156.229.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84868 (0x14b84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 10:18:33 2025 GMT
Not After : May 8 10:18:33 2025 GMT
Subject: CN=67f79afc-33c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:79:ae:a1:ed:43:ad:4b:a2:61:de:16:b7:74:
54:10:97:bc:0a:47:32:55:ee:20:55:ef:2b:7c:45:
9d:82:5f:1b:5e:3a:74:c8:cd:30:90:d9:a9:34:b5:
a7:d9:38:9a:0a:c4:92:74:d4:64:70:99:1b:eb:ca:
a9:db:1d:80:99:a1:ce:01:e5:51:b4:5f:05:ff:0a:
87:cc:04:c1:d7:5d:a0:01:bf:bf:8e:13:75:ab:d5:
45:7a:18:c6:ab:40:4b:f4:3d:81:43:91:ae:06:c1:
93:90:d6:c7:8b:b4:f7:1e:a4:ca:b5:ab:69:49:81:
72:3c:da:e5:78:e4:d1:49:50:ef:3a:5d:5d:3c:26:
84:1d:46:6d:20:67:56:af:0c:01:51:27:3a:f8:fd:
18:aa:b5:bb:40:ff:4c:5c:5a:fe:a9:84:3b:39:38:
9d:a3:ad:0d:ba:4b:6b:33:e0:05:c6:cc:43:8b:3f:
0e:0e:d3:7e:49:c5:84:06:57:4c:cd:e0:57:ae:0f:
37:d9:fe:42:c3:fd:44:d1:b4:87:64:e0:e7:c4:df:
de:32:82:75:36:c3:d9:bc:b2:02:5c:d0:b1:ea:78:
5e:f5:fd:c0:23:69:d4:6d:7d:af:74:cd:1d:46:72:
4a:54:3c:c9:3d:ff:68:72:ca:7e:ab:2e:52:aa:6c:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6C:21:B2:9D:C1:02:C6:9F:9C:BD:A1:E7:F3:9A:16:5C:E0:24:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A0A280615F511F096802D0C6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.247.0/24
Signature Algorithm: sha256WithRSAEncryption
62:9c:bd:6d:70:07:16:fb:12:ff:01:90:ad:d0:f4:80:85:3c:
51:73:37:b0:8d:36:76:f7:a4:b8:19:b9:d6:99:c1:b8:24:f2:
35:68:b7:d3:14:cb:28:1d:25:1f:c9:86:3b:a4:8e:f6:94:dd:
08:66:59:af:8b:ec:68:b2:c4:9c:0c:3e:2c:f7:13:06:98:dc:
c9:26:9b:b5:e0:6f:af:1e:4e:c4:30:7f:54:9f:0e:ae:1e:c4:
15:15:5c:71:70:85:8e:e0:80:25:13:78:63:72:c6:bc:42:95:
61:8a:0a:a2:c5:d8:08:61:1f:3a:28:4e:dd:f0:df:01:8e:cb:
cc:b7:cc:b2:70:3d:20:d7:2b:a0:68:9d:52:f3:ff:d3:65:5b:
f4:6d:f6:b8:3d:1a:8f:d1:bb:e2:f7:c5:0e:80:cd:0f:30:3f:
cc:d3:1a:59:a9:63:59:85:0a:c1:c0:bf:2d:49:86:eb:f7:10:
77:8a:36:9d:ea:64:26:9e:f2:b1:77:e8:5e:b4:b2:02:33:9e:
85:8a:f3:1d:2a:5c:3d:d7:59:a7:41:2f:3a:05:b8:b6:fb:6a:
7a:d2:fc:a1:f8:d1:fe:cc:79:f1:c7:74:68:a6:b2:0f:47:e2:
58:4a:9c:9c:01:1b:32:cd:bd:98:5c:a6:59:32:0c:41:38:a2:
9d:1c:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:49:14 2025 by rpki-client on console.sobornost.net