Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E2D624A13BA11F0939A4973762E951A.roa
File: 3E2D624A13BA11F0939A4973762E951A.roa (raw, json)
Hash identifier: B2kN95IBdy4Ev+9bIjMlpY2Dr1DHVuEiGqIcNjdts2g=
Subject key identifier: F7:93:E6:3F:A7:1E:5F:45:7A:90:2F:6A:5D:BB:14:C2:2C:D3:4C:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E2D624A13BA11F0939A4973762E951A.roa
Signing time: Mon 07 Apr 2025 14:11:48 +0000
ROA not before: Mon 07 Apr 2025 14:11:44 +0000
ROA not after: Sun 04 May 2025 14:11:44 +0000
asID: 213465
IP address blocks: 156.228.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84592 (0x14a70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 14:11:44 2025 GMT
Not After : May 4 14:11:44 2025 GMT
Subject: CN=67f3dd24-9f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:28:23:9b:f4:c2:62:27:7f:e2:1f:0d:30:
12:d3:86:3c:d1:02:6f:1b:0b:0b:fb:30:2b:bd:40:
38:ba:ec:ba:74:26:c8:02:eb:d9:7a:c1:2a:7d:15:
78:e0:ca:09:1a:fe:92:47:d5:15:6a:5a:1b:4f:46:
95:ec:42:39:e4:5f:47:17:0d:71:38:83:cd:6a:bf:
d3:bb:49:bc:04:6f:42:2a:b2:97:6f:da:c6:88:81:
d5:f9:97:6f:81:f5:31:70:4e:ce:f0:8a:bc:a6:12:
c7:37:65:14:cd:2f:5d:fa:58:82:f8:82:bc:02:65:
2d:fd:8d:69:b1:a0:75:f5:65:ab:ac:a9:03:a8:fa:
a2:4e:15:56:f4:e2:4e:a9:2e:f0:fa:d4:d7:86:51:
8f:97:0d:4d:cd:95:52:fa:3a:92:ba:9f:91:86:1f:
0e:d0:7c:4e:f4:51:75:57:5b:06:d8:20:2c:28:94:
43:85:78:2e:64:f7:d7:4a:ce:9e:8d:f9:a6:10:06:
6d:0a:e8:d0:4e:49:99:ff:a0:0f:01:cc:a4:8d:c1:
d6:78:73:23:b5:35:c7:7a:b8:c5:92:98:88:81:dc:
80:f4:d3:c8:53:3a:dd:94:96:36:57:1b:bd:ee:2e:
4a:4b:f8:ca:b8:7c:9c:4b:c0:3c:1a:43:ee:19:af:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:93:E6:3F:A7:1E:5F:45:7A:90:2F:6A:5D:BB:14:C2:2C:D3:4C:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E2D624A13BA11F0939A4973762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.232.0/24
Signature Algorithm: sha256WithRSAEncryption
40:04:77:ca:2f:41:b7:e3:0f:f8:08:fe:76:a7:21:d7:a4:62:
98:2c:da:25:03:6a:4c:07:93:a9:d9:e6:40:cb:ba:b6:36:28:
be:a3:b9:1e:8b:9a:42:fb:2c:05:dd:f9:af:e7:70:26:d2:0d:
b4:ab:e7:13:46:e2:5c:b8:f0:f5:97:1b:21:05:18:1e:15:cd:
c8:e8:6c:08:96:f5:67:25:3b:f3:f1:20:97:9b:26:c2:c4:a1:
6e:3a:70:cf:7c:58:25:85:76:98:60:a1:59:bc:cf:22:64:80:
bd:30:c9:39:88:28:55:31:a5:53:79:5a:02:8c:6c:93:ba:1f:
db:86:09:40:7a:b7:10:bc:26:fc:e1:ba:bd:f7:4c:18:89:c1:
6b:ae:20:d8:3a:44:c8:bc:4f:b3:94:96:d3:86:67:e3:e8:b1:
97:61:39:19:44:09:6a:24:6c:78:94:8f:1e:41:ba:a8:cf:a6:
47:4a:f7:e2:52:bf:36:13:ee:0b:62:e7:d4:08:ae:5b:dd:a6:
69:9f:58:fc:32:fd:4c:f0:68:cf:cc:1c:7d:59:b3:5f:95:9b:
fa:6e:ca:1d:d2:35:63:f7:54:c9:59:b0:2f:23:d6:5c:76:44:
37:40:39:a5:a8:55:93:00:40:84:54:54:5a:ba:b4:58:33:77:
84:93:91:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:41:31 2025 by rpki-client on console.sobornost.net