Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58B97DCACCDD11EFA1EEA04F762E951A.roa
File: 58B97DCACCDD11EFA1EEA04F762E951A.roa (raw, json)
Hash identifier: hiwC+izc9cLVxj6kNOri9dMwW/4X3e4cMz8la/A0Quw=
Subject key identifier: 14:B2:EC:FD:9D:DF:40:DA:F9:73:99:66:D3:A4:11:D2:CA:09:7A:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58B97DCACCDD11EFA1EEA04F762E951A.roa
Signing time: Tue 07 Jan 2025 09:54:12 +0000
ROA not before: Tue 07 Jan 2025 09:54:08 +0000
ROA not after: Mon 13 Dec 2027 09:54:08 +0000
asID: 17561
IP address blocks: 156.233.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64381 (0xfb7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 09:54:08 2025 GMT
Not After : Dec 13 09:54:08 2027 GMT
Subject: CN=677cf9c4-3a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:d3:3c:37:4f:76:bd:34:c5:22:1e:5f:d5:
86:94:7c:c0:70:3a:80:db:b9:c2:1c:8a:5a:e0:62:
42:ca:ad:78:57:23:f5:bd:a9:55:55:9a:ad:bf:64:
12:d5:aa:bc:f6:9d:39:86:a4:a8:ad:d1:40:65:00:
d0:44:4b:68:5e:ee:99:0b:fe:16:e2:e6:3c:de:c9:
3d:b3:49:48:ce:50:b5:80:93:ac:bd:82:73:92:bc:
02:10:81:4d:a8:81:50:ec:f2:cd:61:f8:59:fd:84:
d9:d1:2f:92:27:1a:d2:74:cb:69:cd:62:a1:c0:54:
7e:d8:23:40:f1:fe:75:8e:53:20:5a:77:4e:f4:f1:
d8:7e:b4:35:b2:a6:1d:97:fd:09:05:d8:59:41:97:
4b:81:ad:26:1b:70:b8:39:e1:0a:01:79:25:f9:33:
c3:1f:e0:cc:93:d1:80:da:1e:5f:1d:a2:ea:26:8f:
ed:a9:04:98:a3:16:70:ca:56:57:70:7b:02:de:bc:
d0:b8:44:b2:12:3b:ff:c9:03:d6:56:00:21:10:90:
a8:b8:d2:ee:2c:78:4a:65:67:93:a7:4a:d8:da:03:
48:fa:01:18:c2:96:a5:da:ca:89:96:e8:28:07:92:
df:f8:52:3f:7a:cc:3e:d5:24:4d:95:8b:59:b5:c9:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B2:EC:FD:9D:DF:40:DA:F9:73:99:66:D3:A4:11:D2:CA:09:7A:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58B97DCACCDD11EFA1EEA04F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.212.0/24
Signature Algorithm: sha256WithRSAEncryption
44:8f:7f:c1:92:5e:31:fd:2f:c8:72:02:e7:51:06:25:ee:48:
f0:59:75:03:76:75:29:70:8f:d4:36:04:c5:0c:eb:b7:ae:d8:
a3:2c:fc:2d:fc:79:ac:61:96:79:84:d6:a1:6c:a6:1a:49:6e:
d6:ad:30:e6:35:6f:ca:44:be:b7:00:9b:43:1d:a1:04:69:e5:
18:5b:65:f6:80:e1:fa:10:fc:e8:1d:b1:ff:83:f4:12:7a:41:
82:b0:c2:d4:2a:19:e2:02:9e:af:ed:70:ec:50:86:1d:3a:34:
b3:4d:55:7a:fb:48:23:13:ad:ff:27:c3:6a:18:e3:63:88:c7:
fe:36:5c:e6:ae:4a:35:54:80:2a:d5:a3:53:0b:c9:66:12:97:
9c:e7:47:9b:50:52:7c:30:3c:00:70:06:57:1b:5e:de:6d:22:
a5:da:59:91:ba:22:33:b6:62:97:55:c4:e2:44:39:e9:60:36:
6f:c0:3f:88:f0:66:44:d0:ce:ae:c3:5e:1c:ab:47:b1:8c:65:
4f:1a:88:a6:63:d4:5a:05:11:87:97:d2:d5:c5:c9:4d:9d:94:
f8:3e:d3:4e:82:d1:9a:e9:20:85:48:5b:71:f9:2e:5d:fc:14:
52:f7:d5:be:40:a7:8e:e1:30:6a:0e:5e:47:13:0c:47:f8:61:
11:61:2e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:38:54 2025 by rpki-client on console.sobornost.net