Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DEF5C201D0211F09CD25A8ADAE4EC9C.roa
File: 2DEF5C201D0211F09CD25A8ADAE4EC9C.roa (raw, json)
Hash identifier: YKjILwvOiEhM68D+hxFMSbWho5qcm6WSTOn2Zu/LSZA=
Subject key identifier: 03:7B:DA:50:B4:D4:BE:2B:FF:65:86:54:79:E4:7B:E2:6F:53:10:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DEF5C201D0211F09CD25A8ADAE4EC9C.roa
Signing time: Sat 19 Apr 2025 09:39:25 +0000
ROA not before: Sat 19 Apr 2025 09:39:20 +0000
ROA not after: Thu 01 May 2025 09:39:20 +0000
asID: 153656
IP address blocks: 156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85394 (0x14d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 09:39:20 2025 GMT
Not After : May 1 09:39:20 2025 GMT
Subject: CN=68036f4d-3b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:b0:5a:f5:eb:64:cc:7f:c9:12:5f:e3:8a:
f9:5d:c5:f4:99:e3:0f:2e:92:69:3f:76:a5:e2:d0:
4c:06:b0:8e:6f:70:c0:a7:d6:30:f7:17:54:ac:3c:
73:c8:7b:a6:83:67:cb:d1:63:d7:22:0b:6b:1b:66:
7f:37:4b:53:1b:b9:27:de:71:4e:a3:f2:b6:db:c0:
1b:c1:86:d3:4a:ec:55:59:35:f4:eb:06:61:10:77:
22:d7:15:e5:05:f1:e7:9f:b2:fe:93:15:bf:91:59:
79:71:4b:c3:d1:8e:96:c7:ee:b4:ca:75:82:26:52:
99:3b:53:71:83:cc:0a:ad:4b:f8:d8:2f:53:95:a6:
0e:74:82:da:1c:5e:2b:41:96:c4:6f:11:1f:e4:68:
65:83:be:09:82:1a:2a:14:77:f6:91:3e:05:97:7b:
eb:e0:ca:e1:93:33:f7:90:d0:f2:85:10:07:46:91:
86:dd:97:bf:f2:25:8f:93:55:08:73:32:56:fa:66:
b6:16:a0:6f:f7:1f:93:60:4b:a3:5d:a4:81:14:5e:
4b:e4:3c:75:26:c1:8f:b6:a7:fb:b9:4e:df:2b:45:
36:43:2b:2f:75:c0:a4:3c:ba:c2:e1:30:81:63:05:
e3:56:3f:82:36:f1:25:68:16:3b:a9:2a:c1:4b:f4:
4e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7B:DA:50:B4:D4:BE:2B:FF:65:86:54:79:E4:7B:E2:6F:53:10:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DEF5C201D0211F09CD25A8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
36:03:18:38:e0:cb:6b:69:21:24:be:e8:a4:a7:bf:ab:cf:05:
e5:bf:bb:25:4b:2d:1b:79:cb:4c:e7:cb:a3:59:61:d9:d3:ec:
bd:fd:99:4b:ef:d4:6c:83:d3:f6:f4:63:f6:b2:25:01:c6:92:
41:0b:a8:69:b5:af:79:44:f0:77:ca:3e:9d:db:a6:d3:6a:07:
54:5b:54:6f:00:7e:07:5c:c4:d5:05:64:67:ea:ca:3a:6b:28:
08:33:54:4d:2c:18:24:35:83:78:d6:e2:25:44:07:fc:11:38:
a3:40:ec:7a:01:a6:cb:67:a5:c4:37:3f:6c:bb:05:67:f6:8f:
85:4c:de:e3:3b:b2:95:64:7c:df:21:31:cb:2b:a2:4b:99:9f:
f4:ee:a5:2f:63:9f:dd:24:e3:71:46:b1:c5:59:71:76:24:68:
b4:2c:e7:df:05:c9:2a:0c:03:9f:53:86:6a:35:7a:c7:77:80:
4b:e8:ea:97:a8:f1:d4:99:de:03:0e:b0:e8:d2:ef:70:35:28:
09:c2:d9:28:5a:3b:eb:f2:31:9f:57:40:b7:68:0e:a3:05:b1:
79:eb:34:6e:90:81:69:05:05:6a:07:c9:cb:b3:d8:f4:8c:a5:
aa:6e:4a:10:63:ba:94:5b:4c:85:f5:72:ae:ae:e1:1b:fd:6e:
a3:97:38:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:41:20 2025 by rpki-client on console.sobornost.net