Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A6E04E21F5511F09452F097DAE4EC9C.roa
File: 3A6E04E21F5511F09452F097DAE4EC9C.roa (raw, json)
Hash identifier: wYnZyLgRJxTPnZ48a+drcnqDT/+YEqfRzqk4wXcnLtM=
Subject key identifier: 30:8D:34:F9:43:74:AA:00:D3:E6:8D:99:5B:70:AC:05:1E:5C:3F:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A6E04E21F5511F09452F097DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 08:38:57 +0000
ROA not before: Tue 22 Apr 2025 08:38:51 +0000
ROA not after: Wed 28 May 2025 08:38:51 +0000
asID: 25160
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85492 (0x14df4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:38:51 2025 GMT
Not After : May 28 08:38:51 2025 GMT
Subject: CN=680755a0-ffd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:23:00:d1:2c:25:d8:ac:06:cd:4d:6c:c6:
49:be:45:4b:a7:69:42:f2:9b:a9:cc:d5:aa:17:e8:
a3:42:05:3b:69:5e:f6:f7:5a:47:29:5a:96:89:60:
a0:b9:f7:5c:b2:1d:10:3b:db:86:8c:bf:92:d6:4c:
1e:42:01:42:10:21:99:56:e7:20:f4:70:fc:f1:6e:
c1:ff:4d:78:91:a7:73:b2:e7:ea:69:76:80:4f:1b:
1c:86:91:e2:ef:93:6e:61:7b:7a:9c:24:f0:08:79:
57:4b:9a:3d:19:95:81:04:5a:59:2d:9a:73:18:64:
de:5d:2b:5c:1e:b1:70:bb:85:ca:8c:06:68:e3:4f:
11:4b:f6:c7:bf:98:d4:de:85:ce:a3:30:5e:5a:3d:
5c:9a:8e:d5:47:fa:c9:fa:17:ee:4b:b6:14:bf:00:
6c:5f:19:f0:67:a9:5f:52:24:a1:8d:be:d3:ba:c3:
fb:77:4f:31:33:08:5a:08:fc:45:2f:a3:46:2c:d4:
a9:f1:c3:0c:c0:c4:38:17:3f:5e:fc:b9:37:f1:f2:
91:2d:ca:60:f8:4b:3c:40:42:86:aa:ff:63:9c:31:
8d:83:47:56:32:23:79:21:91:5a:95:be:6b:5a:d9:
49:63:2f:a5:40:1d:67:11:1d:1b:ff:cc:a5:88:d3:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:34:F9:43:74:AA:00:D3:E6:8D:99:5B:70:AC:05:1E:5C:3F:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A6E04E21F5511F09452F097DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:49:d6:56:aa:ec:16:ee:35:f0:f7:8a:a8:19:50:1d:46:7c:
51:2f:c0:c0:be:b2:a5:cb:e3:b9:b9:6e:89:89:42:6a:d2:18:
63:c0:75:d0:a5:d5:2a:d8:81:01:14:0e:f7:48:a2:ce:72:c8:
8f:b3:a5:0e:9e:b0:a2:59:f8:4b:1f:32:3c:65:a2:9b:42:63:
de:09:b0:a8:4e:89:8d:56:e5:3f:9d:13:81:54:2a:0b:6b:40:
d6:56:ae:47:e7:49:7e:a9:91:67:4e:00:81:91:4e:69:4e:91:
63:c4:a5:b2:ae:51:46:53:6e:6f:38:5d:d8:87:44:c4:18:40:
e7:16:06:96:24:30:eb:fe:64:42:0d:64:33:4a:e3:54:15:fd:
36:77:40:1e:42:3c:7e:4b:d5:96:c2:08:e4:05:d7:cd:50:c0:
6b:e9:cb:92:58:92:5e:48:16:8d:a5:62:c7:42:62:a5:24:26:
77:5d:b3:86:67:e9:13:a2:20:97:fe:8b:f9:d4:ef:bf:db:14:
1a:84:c6:a1:0e:af:70:45:aa:bb:38:f9:7b:ae:6c:6d:d9:26:
fd:d7:43:5e:aa:76:39:41:55:c2:c8:36:43:78:fe:36:5d:0b:
40:4c:0b:ad:89:d6:fe:0e:b9:aa:76:90:63:04:e2:28:21:81:
3f:8e:36:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:43 2025 by rpki-client on console.sobornost.net