Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BD1CE5A190911F08B9581236EB8BCC6.roa
File: 4BD1CE5A190911F08B9581236EB8BCC6.roa (raw, json)
Hash identifier: P4kBgMbjfgU/4FvajGRMoqCzLQhaP8WFqAwnwMaSBd4=
Subject key identifier: 56:44:85:B9:D0:47:CE:3C:37:16:83:79:7A:F9:E9:4D:15:4A:EC:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BD1CE5A190911F08B9581236EB8BCC6.roa
Signing time: Mon 14 Apr 2025 08:20:17 +0000
ROA not before: Mon 14 Apr 2025 08:20:13 +0000
ROA not after: Mon 19 May 2025 08:20:13 +0000
asID: 20473
IP address blocks: 156.253.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85014 (0x14c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 14 08:20:13 2025 GMT
Not After : May 19 08:20:13 2025 GMT
Subject: CN=67fcc540-29fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:3e:b1:7d:6f:9e:2b:81:74:4f:e9:ea:69:
bb:ae:10:37:b4:37:3b:e0:08:f7:27:d5:e8:d5:1c:
34:f9:99:ab:0c:93:ec:52:2c:f1:c5:2c:ef:2f:40:
1a:55:1d:87:95:fe:94:14:b2:3d:88:fc:fe:cd:e0:
ef:ea:77:a9:08:2c:0f:dd:9a:72:4f:ab:56:a9:52:
3a:54:80:0d:8d:b1:a7:44:be:60:32:8a:83:92:53:
27:ff:d9:25:f0:e0:a2:b8:48:d1:f5:32:ad:10:f9:
29:a2:6c:2f:4c:70:64:5b:1e:ad:d8:eb:57:66:92:
c3:db:c4:92:a2:6c:61:b9:19:cb:b7:4f:77:c9:cb:
c8:c6:5d:e1:29:ba:ed:1a:c6:39:4e:b6:ca:a6:ab:
7f:f5:a8:7c:ea:f2:9e:eb:6a:7b:27:61:e8:b3:4b:
58:1e:54:34:21:06:e5:0e:49:69:03:6c:af:0c:6d:
5f:a7:28:10:30:3a:73:fe:66:03:24:6e:33:f4:23:
20:82:fd:51:95:45:2a:3c:c8:7e:de:5f:22:3c:e5:
4b:28:ed:ce:16:cd:8a:31:85:66:70:0c:41:2d:bd:
c3:27:1f:9b:18:4c:4c:37:60:3a:6c:95:ec:a2:b2:
eb:74:ff:10:53:f7:0e:b0:39:ee:ab:f1:64:f7:ea:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:44:85:B9:D0:47:CE:3C:37:16:83:79:7A:F9:E9:4D:15:4A:EC:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BD1CE5A190911F08B9581236EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:44:7b:a0:b0:60:6e:90:66:0d:82:86:0b:97:62:1f:86:5e:
61:d2:6b:1e:91:71:28:e8:41:33:5e:d5:79:31:44:e4:38:bb:
53:2b:dc:5d:a0:fc:7d:a7:a6:da:c3:4b:05:6c:4f:3e:88:47:
8a:f6:f4:8b:71:9e:36:b1:cb:8a:89:86:7f:80:45:ee:79:0e:
94:be:80:22:c0:45:ae:ed:aa:c2:d2:d8:e8:78:2e:77:2a:e9:
57:e8:f8:b1:f5:39:e3:32:26:1b:9f:52:d9:72:1b:79:68:b8:
e9:a3:bc:f2:cd:14:ad:ce:80:c5:05:2a:06:29:2e:d0:5d:58:
53:a7:5d:84:1c:ce:63:01:9b:fe:d6:87:82:45:0b:1f:4e:97:
69:71:88:97:c5:7e:c6:c1:39:b7:fd:a4:73:bf:d7:77:4a:2d:
a8:14:78:5a:cd:de:2a:ae:36:63:6e:b1:d7:60:81:f3:58:8c:
fd:56:68:e6:77:56:58:65:7f:66:ee:ec:60:97:44:27:72:61:
33:a6:7d:04:9a:9d:2e:af:4b:0c:db:c0:20:e1:ae:87:8d:f3:
29:c4:08:73:32:91:4e:aa:17:c6:0c:a8:64:ab:80:06:a1:75:
b2:88:eb:05:98:c3:47:3c:80:b7:bb:ee:ab:96:3a:2e:23:f0:
2d:59:0a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:54 2025 by rpki-client on console.sobornost.net