Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/536A5B80CD7011EFA597DC82762E951A.roa
File: 536A5B80CD7011EFA597DC82762E951A.roa (raw, json)
Hash identifier: ZczY3LOFX2DFeR2ttZKdnvJlu3HzAX7Dt12AsO8AuVs=
Subject key identifier: 01:94:4D:45:75:68:E2:B4:3E:D5:1F:73:52:DB:2F:6C:24:A2:7D:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF85
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/536A5B80CD7011EFA597DC82762E951A.roa
Signing time: Wed 08 Jan 2025 03:26:19 +0000
ROA not before: Wed 08 Jan 2025 03:26:15 +0000
ROA not after: Mon 13 Dec 2027 03:26:15 +0000
asID: 17561
IP address blocks: 156.248.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65413 (0xff85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 8 03:26:15 2025 GMT
Not After : Dec 13 03:26:15 2027 GMT
Subject: CN=677df05b-26fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:4f:ec:c3:2f:c1:58:34:f9:82:a8:5a:9a:
9b:27:ef:82:0f:26:34:5f:fb:a4:6d:b4:43:09:7a:
a6:b8:3e:7c:36:aa:89:ed:98:ae:c6:1c:b6:a6:ef:
36:8a:6f:17:3a:e7:f6:e4:ff:1f:ee:4d:01:57:e4:
93:31:1d:43:e5:3e:e7:f7:f4:c4:20:37:64:43:cc:
40:dc:d5:7f:80:4c:66:88:c8:43:e9:b2:f4:5e:8c:
e9:3f:f9:36:cc:a7:4e:a0:35:aa:44:61:9a:78:4f:
f0:16:0d:f2:fc:e6:45:77:49:41:65:13:dd:d3:a6:
0c:80:35:4c:94:88:3d:71:1c:52:b9:54:b3:9e:92:
08:0f:ae:fb:cc:7a:37:16:73:8b:07:46:8f:de:57:
a9:84:0d:64:65:82:d4:af:f5:7a:d0:7f:21:e4:cd:
e7:2d:60:db:9f:90:de:eb:45:d2:c5:be:91:bf:04:
57:69:70:f4:81:52:f6:05:d6:85:0f:d9:7b:8a:27:
92:59:d9:09:b4:6e:f6:aa:6f:43:64:58:48:bf:74:
22:5e:fe:b0:13:ce:eb:2e:c3:65:95:57:4a:09:cf:
41:0a:c7:ec:49:e7:ef:c6:4e:07:45:c1:cb:1a:73:
26:4f:a0:62:99:99:9d:54:93:d7:b3:73:d5:bb:ad:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:4D:45:75:68:E2:B4:3E:D5:1F:73:52:DB:2F:6C:24:A2:7D:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/536A5B80CD7011EFA597DC82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.28.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e0:99:b0:f0:53:5e:ce:38:69:fd:04:29:b6:a9:4d:bd:1d:
8b:9a:52:74:10:c8:ba:5d:19:1c:40:87:85:43:46:83:6a:cb:
7e:00:b8:5a:24:c4:4b:e3:1e:e7:98:84:40:c9:b9:d7:14:4f:
af:a4:af:2a:1a:bf:68:60:f1:44:35:ce:95:99:41:3a:c6:e6:
84:3e:5a:20:fa:1f:5a:9f:0b:ec:4b:94:34:a9:ec:e1:c9:aa:
8e:7d:19:ca:e0:0d:69:8e:53:02:8e:a4:c1:63:29:19:99:cc:
84:46:5b:f0:99:80:a4:54:33:f6:94:50:8f:d1:b4:0a:64:c6:
e4:95:8d:3e:ae:62:b5:99:82:ca:d8:79:a2:e8:7f:0e:7f:cd:
a6:07:4a:39:78:81:94:07:7b:57:60:c2:e9:16:bb:0f:6c:cd:
c1:5f:2c:3a:54:8b:f1:6a:b4:05:0b:05:a8:2d:2b:42:0b:bf:
ba:51:81:c0:5c:90:26:ed:cf:80:a1:ae:dc:c9:e1:a5:d2:02:
f6:48:95:ae:92:cd:73:8c:4f:48:a5:67:ae:36:9e:9b:74:25:
7a:bc:8b:21:2e:cf:64:a4:72:ad:11:02:e8:4f:07:2c:33:fe:
21:4b:4b:2b:b5:29:5f:89:28:67:78:98:ce:54:22:a8:29:87:
9a:a9:3d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:01:14 2025 by rpki-client on console.sobornost.net