Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A36469015E911F091A430BE6DB8BCC6.roa
File: 2A36469015E911F091A430BE6DB8BCC6.roa (raw, json)
Hash identifier: oGflFvqch/rrgf4RP4NNNo79GcZdI/oy43THMMK0wtY=
Subject key identifier: 28:47:8F:14:10:28:67:FD:97:8A:1E:C0:3F:16:FB:6E:AD:37:FC:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A36469015E911F091A430BE6DB8BCC6.roa
Signing time: Thu 10 Apr 2025 08:52:43 +0000
ROA not before: Thu 10 Apr 2025 08:52:39 +0000
ROA not after: Sat 10 May 2025 08:52:39 +0000
asID: 142032
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84829 (0x14b5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 08:52:39 2025 GMT
Not After : May 10 08:52:39 2025 GMT
Subject: CN=67f786db-558e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:97:72:88:3e:d4:3d:d4:45:20:2b:b8:78:
bf:9c:4a:72:cd:1f:b8:d5:63:28:58:f5:bc:6b:f6:
61:a5:0d:44:24:6c:61:27:75:9c:c6:8c:b8:7a:a2:
af:4d:8b:67:43:0f:75:38:4d:35:b5:5c:21:76:ef:
15:21:a4:44:b6:6b:61:75:cc:39:f5:b8:00:de:4c:
fa:fb:6e:a3:e1:28:dc:b9:bf:1b:eb:fa:e0:78:f0:
91:c2:fa:d2:9c:3c:9f:e4:1b:26:38:fe:0c:30:43:
8a:3b:58:57:2d:54:8d:fb:7f:09:35:25:13:1d:0f:
3f:a5:1d:60:21:3d:c1:28:7b:03:25:ff:c2:8d:4a:
68:5b:c5:25:66:0a:4c:5b:c6:2c:92:39:b9:aa:d8:
2c:99:45:2f:36:5e:9d:76:d9:43:6c:42:bc:e0:4c:
80:e2:95:4f:cc:d9:ba:24:88:9c:d9:a0:13:21:d5:
8e:0e:15:6e:83:ea:20:85:ca:a2:6f:5d:f8:c3:5f:
a3:04:2c:ef:9d:76:81:36:a8:13:19:f8:4e:08:48:
48:f1:f2:9b:9f:f6:2e:cf:b3:89:65:ae:be:10:ca:
11:75:08:51:c5:cc:0f:a0:7d:c8:e5:9f:3b:c5:83:
b9:6d:27:86:96:fb:17:83:92:1a:af:78:01:03:fe:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:47:8F:14:10:28:67:FD:97:8A:1E:C0:3F:16:FB:6E:AD:37:FC:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A36469015E911F091A430BE6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:2c:22:2e:1d:06:28:e8:b3:6a:5c:1f:d5:4e:44:3c:34:4a:
0a:a9:08:cb:b1:52:e1:a7:21:d7:8d:e5:31:bc:93:f7:1c:74:
23:41:63:69:83:69:63:17:47:2c:fd:4d:57:ed:d5:c9:2e:24:
32:13:73:5d:74:fa:da:04:3d:f7:a4:15:e7:90:3a:0b:52:a6:
ef:98:70:31:b7:80:dc:30:fd:47:1a:fb:b9:1d:d2:9d:74:dc:
b3:98:f5:ee:10:85:55:6b:06:c6:be:80:aa:39:6b:13:c7:de:
d0:47:ef:16:31:31:be:6e:0b:cf:78:1e:a1:a1:1e:da:b9:c5:
68:c3:d6:ca:51:f7:78:60:cd:b6:a3:d7:3d:3d:9d:7a:f3:6a:
79:b3:37:e3:b1:48:ef:9e:0f:cd:de:26:53:f1:46:43:33:80:
f3:3f:47:20:ab:05:b7:3b:a9:cd:e8:28:3d:bd:2f:34:da:23:
39:f2:27:9a:63:46:9d:c9:c7:1e:be:ae:a0:47:de:aa:f7:43:
83:41:e6:34:61:b3:f4:b1:53:da:82:b5:c3:57:42:36:55:2a:
de:6c:fa:12:c2:2d:b4:f0:fb:7c:75:43:6c:3c:fe:24:63:45:
86:4a:02:5f:b1:56:a8:cd:72:ea:cc:af:80:ff:17:18:cf:62:
d0:61:b7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:08:31 2025 by rpki-client on console.sobornost.net