Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A8B12961C6311F0AB3236DEDAE4EC9C.roa
File: 5A8B12961C6311F0AB3236DEDAE4EC9C.roa (raw, json)
Hash identifier: CGW3my3ZPlohqQVuSDi8yMpewPvPZPjpX9f+ZGn0/l8=
Subject key identifier: A3:74:28:96:C1:5A:B6:7A:4F:96:F2:F7:B1:BE:BB:AE:BE:7A:9E:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A8B12961C6311F0AB3236DEDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:42:30 +0000
ROA not before: Fri 18 Apr 2025 14:42:25 +0000
ROA not after: Wed 01 Oct 2025 14:42:25 +0000
asID: 9304
IP address blocks: 156.225.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85270 (0x14d16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 14:42:25 2025 GMT
Not After : Oct 1 14:42:25 2025 GMT
Subject: CN=680264d6-0d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1f:f9:55:6e:4a:85:89:7e:b6:eb:6e:ce:de:
d7:1c:04:f6:61:4a:7f:0b:03:87:84:a1:96:e9:34:
41:87:9f:fe:87:7a:9a:fb:76:34:18:77:0c:0f:ae:
66:c1:f9:4f:81:21:a2:d7:73:e9:12:04:bb:cd:3f:
35:41:ea:9a:5f:82:92:11:5c:db:27:cc:67:d3:04:
d7:76:59:f6:db:e1:0d:e6:21:d8:32:e0:55:b3:a0:
3a:6f:a4:fc:ef:76:4b:75:c8:41:67:5b:03:ac:4d:
8c:46:93:5c:f9:40:19:52:8f:68:be:d8:a0:94:3d:
38:fa:ee:f9:57:fe:7e:13:40:02:6a:95:f3:32:f2:
d2:5b:67:10:ed:4b:a1:a3:63:b6:30:86:db:82:72:
8a:c2:fa:f0:b4:12:d5:9e:5b:1a:95:03:fe:98:22:
7b:15:02:9b:c8:56:a2:32:c6:74:0c:d1:1e:43:4d:
91:27:cf:ff:89:5f:57:aa:b1:9c:9d:49:4f:57:a6:
45:ac:70:e9:c0:ac:cd:db:16:ae:c4:60:91:cf:ce:
06:71:57:b2:85:c6:b1:b8:28:a2:5d:0b:5a:ca:36:
3e:b7:ce:49:56:e6:12:b9:b9:0b:93:a7:c5:eb:1e:
79:c7:a7:7b:36:31:e9:d5:ab:f4:a0:67:02:39:3f:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:74:28:96:C1:5A:B6:7A:4F:96:F2:F7:B1:BE:BB:AE:BE:7A:9E:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A8B12961C6311F0AB3236DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.7.0/24
Signature Algorithm: sha256WithRSAEncryption
26:02:da:10:88:8a:b3:20:7f:3f:9d:f8:22:7e:a9:83:f3:d4:
40:cf:2f:3f:b8:fb:70:65:68:de:b4:a5:4a:5a:65:db:c7:7d:
cc:85:b0:05:29:2c:bf:ba:c2:73:c8:1a:d8:8d:4c:9d:ee:4a:
88:72:0a:5f:53:85:9d:20:df:2a:ba:b7:9a:2e:fa:f5:e0:0e:
2a:bd:dd:bd:9b:ae:f1:ee:45:7b:3e:4e:68:de:de:c1:ab:33:
7d:54:e2:a4:5e:08:18:41:f0:3e:43:bf:63:44:7d:03:98:31:
6e:ad:33:71:b7:be:16:6c:54:f0:d2:e7:ae:82:dd:fd:0c:11:
bd:b3:6c:af:14:b0:51:a1:d5:9e:37:0c:08:56:2a:d1:6f:65:
40:4a:40:3a:6c:a1:66:18:f9:b2:39:8a:5b:df:11:bd:96:f2:
40:c5:fa:a0:af:b7:6d:cd:4a:5b:f9:6e:c6:0a:98:ad:2f:04:
d9:c4:25:d5:20:d6:ce:12:90:9c:4d:8b:3a:62:3d:b0:72:f0:
72:d1:89:17:cc:9c:0a:89:e7:9e:90:03:41:9b:83:e5:f3:56:
d2:c2:a7:ef:5c:86:6f:3b:56:5c:ee:6e:03:40:c3:e9:39:6c:
52:2a:14:b5:01:67:4d:7e:34:46:75:15:4b:df:43:b0:aa:fb:
52:84:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:04 2025 by rpki-client on console.sobornost.net