Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FA53238CCE511EF939F6181762E951A.roa
File: 6FA53238CCE511EF939F6181762E951A.roa (raw, json)
Hash identifier: eJ7j6PowSBAtRqkVpes5+FO3H2jlPawncY+loZ3eEFo=
Subject key identifier: ED:A7:FE:1A:89:9A:25:AB:98:BF:83:2C:32:76:93:75:7A:AF:48:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBC9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FA53238CCE511EF939F6181762E951A.roa
Signing time: Tue 07 Jan 2025 10:52:06 +0000
ROA not before: Tue 07 Jan 2025 10:52:03 +0000
ROA not after: Mon 13 Dec 2027 10:52:03 +0000
asID: 17561
IP address blocks: 156.233.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64457 (0xfbc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 10:52:03 2025 GMT
Not After : Dec 13 10:52:03 2027 GMT
Subject: CN=677d0756-e3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:d2:3f:98:97:0f:b6:42:99:74:7d:45:5e:
96:4c:44:24:87:fe:5f:bd:b1:ee:83:fe:7c:0f:f1:
b4:b5:ba:c0:5f:f9:03:d5:ad:ee:a2:d7:cd:1d:b4:
a2:45:f4:f5:59:26:7f:c5:2d:77:3c:b5:b6:73:44:
34:4d:b3:3b:d9:26:e6:c3:14:82:d8:de:df:ee:0e:
8c:ce:14:e2:7a:48:bc:32:d0:c9:2d:4a:1e:99:9c:
54:54:30:1c:2e:8d:ff:cb:86:26:07:40:05:7e:9c:
d3:bd:fe:ae:95:aa:18:66:02:67:da:74:08:6b:54:
a5:96:76:f2:b3:32:fd:ef:3d:bb:e9:d5:bc:fd:ef:
bd:59:1b:13:fa:3d:81:68:bb:0e:e7:f1:d3:22:6c:
6b:ff:df:e0:54:98:45:6e:a4:2f:1b:ea:8a:a7:f9:
dd:b5:7d:b2:61:59:ab:e4:73:ed:02:3c:13:a8:df:
ac:3c:41:15:17:c3:61:25:f1:3e:07:66:7f:87:da:
19:1d:d3:d5:f3:d3:6c:4c:3b:5c:ff:f5:11:2d:c0:
f1:b6:90:f3:9d:69:35:90:94:d4:e0:08:d8:d7:75:
d4:3b:3b:a3:c9:6a:a6:25:c4:a8:42:e5:05:85:33:
6e:43:32:ca:6b:c1:68:06:8c:5a:0d:0e:6f:0f:3c:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A7:FE:1A:89:9A:25:AB:98:BF:83:2C:32:76:93:75:7A:AF:48:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FA53238CCE511EF939F6181762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.249.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:38:41:89:d2:15:83:0c:71:0f:6d:4f:88:a6:21:bd:2a:e5:
5c:d8:2b:e6:3c:89:35:56:ef:56:9a:9f:08:1c:dd:1e:66:5f:
fb:3b:6b:cc:ad:c8:17:9d:bc:ec:a3:a5:57:f1:8b:c7:91:0f:
94:07:e5:a3:0b:6d:a3:0b:6e:ec:46:57:e3:21:2a:92:e8:76:
b7:f3:1d:23:1b:6d:97:2d:63:b9:96:9b:8c:c8:4b:46:f4:7a:
e5:00:1b:5a:2b:fa:c2:0d:f1:00:92:e7:66:61:19:da:7a:49:
ba:af:c7:b3:e1:c6:26:60:97:cc:70:57:49:0c:2b:37:08:bd:
69:5d:8e:7c:94:6e:ff:43:09:ff:66:2c:d6:97:73:ba:f0:eb:
1b:7c:2a:c0:26:6b:e7:e5:2e:8c:ed:59:1f:a1:d2:84:97:67:
2d:1b:4c:dd:82:7e:90:fe:69:6d:24:11:ac:3a:77:a8:b9:30:
4a:d7:93:4f:32:20:fe:88:32:d4:3c:ad:3a:bc:9d:7b:31:4d:
2f:ac:eb:e8:93:99:0f:85:ce:0f:56:08:20:d5:60:93:b5:3e:
13:da:b8:93:af:67:8a:c8:7f:0d:c3:80:9c:d7:83:73:f4:2d:
f7:34:ca:31:1d:ee:f7:4b:91:d7:a6:54:28:91:c6:e3:81:41:
5c:0f:ce:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:01:47 2025 by rpki-client on console.sobornost.net