Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71E7B1D2211411F083C7ABC1DAE4EC9C.roa
File: 71E7B1D2211411F083C7ABC1DAE4EC9C.roa (raw, json)
Hash identifier: aLxNJJULiV2noPVMxhXXOrpeGldIMTA1U3MRYAYd1YU=
Subject key identifier: F8:79:2B:0B:95:51:54:DF:64:F0:B1:31:91:32:D8:79:C8:A8:D3:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71E7B1D2211411F083C7ABC1DAE4EC9C.roa
Signing time: Thu 24 Apr 2025 14:00:15 +0000
ROA not before: Thu 24 Apr 2025 14:00:10 +0000
ROA not after: Fri 02 May 2025 14:00:10 +0000
asID: 206283
IP address blocks: 156.238.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85640 (0x14e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 14:00:10 2025 GMT
Not After : May 2 14:00:10 2025 GMT
Subject: CN=680a43ee-ce63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:47:28:6b:8d:12:d2:69:40:60:13:fa:a6:
37:5b:e2:57:a4:5c:fc:61:81:1c:e4:e8:e1:c7:ff:
60:80:45:98:bb:ba:76:b4:60:71:80:8d:cd:8d:09:
ea:f0:7b:c0:3d:8c:77:e6:a6:48:d5:ba:2e:25:87:
c0:33:f9:a4:30:f2:26:ff:73:f1:84:ba:af:53:f5:
90:fc:ad:9f:fd:80:dc:95:c2:09:f9:f3:c8:d4:b4:
d6:ea:af:78:22:07:a7:77:a3:07:98:7b:09:56:1a:
b5:78:a1:3a:c3:f0:68:05:47:1f:fe:0f:3e:16:b0:
af:2e:db:df:dd:ea:99:08:d9:a6:a5:33:35:a1:0f:
85:3c:67:7d:60:a7:3a:b8:65:8b:c6:f0:6c:45:a8:
19:56:a8:82:ef:7d:ce:70:c6:0e:ab:b1:d1:39:08:
39:cf:5b:9f:33:53:d5:56:cf:68:c1:2d:e3:7b:e2:
de:b8:5e:6d:2f:7b:08:40:a9:af:b5:ee:90:11:3d:
bf:e0:f3:e5:fd:a7:ea:04:a7:c4:8b:18:46:3d:bc:
44:c2:c5:5b:ee:b0:87:3f:57:0b:54:ba:a2:d4:56:
d5:85:b2:b6:bb:92:fc:1d:e2:fe:9d:7e:b4:8b:3e:
9e:aa:ca:71:e8:15:f1:53:9c:00:b3:94:f4:ff:d9:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:79:2B:0B:95:51:54:DF:64:F0:B1:31:91:32:D8:79:C8:A8:D3:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71E7B1D2211411F083C7ABC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:45:90:45:8c:34:79:9a:38:87:7f:b2:c4:14:63:6d:ff:5b:
9b:ec:20:33:09:0d:f8:7f:91:0b:d8:e0:bd:d9:4f:3d:ba:8e:
31:6f:33:2e:1c:83:b6:e2:dc:04:34:8d:db:33:13:ae:42:83:
35:2f:38:10:8a:82:f1:a0:e5:da:2f:2d:62:d8:ac:f9:2a:76:
52:ee:8a:38:be:a6:db:8e:18:8d:88:8c:cb:98:a5:02:e3:28:
00:42:1f:ce:f9:e4:5a:0f:da:2a:50:91:a0:f0:5b:3c:6b:39:
6f:22:bf:cb:12:9e:8e:7f:d4:80:47:6c:2d:07:8e:21:0f:80:
ba:9e:0a:63:3c:47:63:e8:02:f0:26:b6:f6:a5:4e:92:61:d3:
88:08:28:30:72:08:1f:35:21:4d:47:00:e7:22:71:7d:01:f6:
f1:29:8f:7a:0a:23:89:bd:6f:40:0b:a0:f3:cb:2f:a3:09:23:
a8:10:59:08:92:4b:b7:d6:3a:b9:af:13:be:ed:6b:bf:22:a6:
0d:18:7d:49:e3:39:64:97:91:c0:3b:b5:73:f2:0d:06:8b:72:
ab:28:3c:51:07:e9:46:fb:69:2a:9e:87:27:5a:9f:c8:4f:46:
c5:99:e7:07:d7:f8:23:0f:c0:c7:22:03:4b:22:b5:cb:b1:a1:
43:c0:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:06:38 2025 by rpki-client on console.sobornost.net