Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E1C99A16BF11F0B49DFFD56DB8BCC6.roa
File: 60E1C99A16BF11F0B49DFFD56DB8BCC6.roa (raw, json)
Hash identifier: 5LPWAvrnettwlaN9LJn1Y4Md3s8dmTlMKFyXwUl6byg=
Subject key identifier: 26:D6:8F:D8:E3:FE:9B:4D:E1:C9:72:6E:D1:89:86:C1:EC:29:F7:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E1C99A16BF11F0B49DFFD56DB8BCC6.roa
Signing time: Fri 11 Apr 2025 10:26:07 +0000
ROA not before: Fri 11 Apr 2025 10:26:03 +0000
ROA not after: Wed 21 May 2025 10:26:03 +0000
asID: 30781
IP address blocks: 156.233.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84925 (0x14bbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 10:26:03 2025 GMT
Not After : May 21 10:26:03 2025 GMT
Subject: CN=67f8ee3f-3b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:35:41:ac:92:d4:d3:45:a7:38:ee:a5:8e:
c6:80:9a:e6:fc:1a:44:00:79:0b:89:10:68:73:f7:
54:64:3b:8d:1e:3c:f0:68:36:99:8a:a5:3d:81:ab:
31:47:83:cb:59:4e:af:00:9e:29:6e:a4:e3:64:4e:
26:cf:04:56:60:81:2e:72:67:21:97:c9:c5:f5:00:
6e:74:ac:5f:9e:c3:9e:21:bd:42:32:5c:17:2e:a8:
b9:ad:6d:3d:d1:fc:36:58:a1:5f:e9:01:bf:77:ed:
9b:1d:94:d2:31:ea:4e:7b:3f:7f:b6:7a:14:ad:37:
b0:0e:17:a9:04:b2:cb:08:1b:85:c6:f6:99:a1:85:
02:b8:49:92:d4:c0:b4:d5:da:a4:ef:f4:aa:30:52:
f5:3e:88:7c:6f:d9:00:d9:f9:c3:85:46:79:58:b9:
af:c1:0c:df:92:1b:17:24:7c:c7:f1:c9:16:10:e3:
93:c0:9c:c2:4a:20:9c:3d:60:92:c4:aa:2e:1f:dd:
4f:3f:57:b0:cf:06:a3:bf:a5:47:61:39:f3:84:ef:
4b:c2:58:f7:44:1c:e5:71:49:73:8a:9b:93:ae:88:
61:55:6f:b3:68:55:04:f7:36:1e:8b:38:3c:d5:a0:
7e:73:d1:d9:26:3b:17:d9:aa:e5:06:00:98:ad:56:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:8F:D8:E3:FE:9B:4D:E1:C9:72:6E:D1:89:86:C1:EC:29:F7:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E1C99A16BF11F0B49DFFD56DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:46:58:b6:3d:80:b4:84:fb:ed:44:ed:77:9d:f8:0f:e2:60:
b2:61:f5:c2:74:32:79:03:52:bd:4c:08:b0:be:b7:53:a3:a5:
f1:af:67:b9:aa:70:62:57:a0:bb:11:ca:52:48:fd:a7:f3:ec:
0f:c1:f3:6b:8a:1a:2d:bf:eb:9e:cb:aa:17:e7:33:4d:d7:aa:
5b:21:2c:de:3e:19:ac:65:2d:b7:8d:05:3e:59:6e:cd:4a:59:
cd:f6:59:99:77:e5:89:b1:65:ec:ec:f2:09:71:c2:c4:5f:c4:
dd:8c:c6:31:52:b7:2e:7e:46:e6:37:1f:fd:af:ff:03:b9:af:
c4:b1:e4:8a:32:05:75:95:a9:41:0b:62:16:af:72:71:33:17:
da:9e:13:02:67:5b:c5:e8:5a:8b:16:77:d1:3e:17:9b:b6:98:
54:e0:ce:1d:db:f4:97:dd:25:5c:56:6d:b5:5a:23:2c:95:63:
97:21:36:81:29:5c:89:23:a0:68:6c:c9:e3:6c:78:26:11:44:
4e:44:03:19:7c:19:b5:a8:a7:04:51:28:f1:ef:d9:73:99:a4:
65:8f:14:7c:37:e7:ed:71:c7:68:45:38:2e:a8:48:3e:ae:d5:
20:b5:f4:a8:ea:58:1c:95:b2:42:06:56:5f:e1:0c:0e:be:42:
9d:27:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:39:00 2025 by rpki-client on console.sobornost.net