Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/766BF1761F5411F09A096C93DAE4EC9C.roa
File: 766BF1761F5411F09A096C93DAE4EC9C.roa (raw, json)
Hash identifier: W1PQ1mMbjjZ9lqTKUqpI8BLaTvfZ2W1ZBS7x+7/v8XU=
Subject key identifier: A3:7A:56:92:E2:44:84:8E:55:E2:B1:64:64:89:40:27:E2:33:E8:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/766BF1761F5411F09A096C93DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 08:33:28 +0000
ROA not before: Tue 22 Apr 2025 08:33:23 +0000
ROA not after: Wed 28 May 2025 08:33:23 +0000
asID: 59187
IP address blocks: 156.238.97.0/24 maxlen: 24
156.238.98.0/24 maxlen: 24
156.238.99.0/24 maxlen: 24
156.238.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85488 (0x14df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:33:23 2025 GMT
Not After : May 28 08:33:23 2025 GMT
Subject: CN=68075458-f1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:51:8b:85:47:a6:19:49:07:1a:59:dc:b2:
43:54:d3:63:29:9c:fe:85:3d:fd:a5:67:13:f2:49:
8f:12:f1:7a:52:b8:b6:d2:b7:9d:15:2d:19:9c:f6:
b6:cc:65:bb:6f:da:f5:84:85:aa:0c:e3:71:6f:12:
0f:48:c8:2a:81:bd:9d:cf:9a:62:8a:df:73:23:c6:
d2:07:65:e3:07:3e:bc:29:74:21:ec:6d:f6:76:b5:
b1:7d:3f:c8:a3:a2:e2:3f:53:00:75:9e:13:93:93:
ba:e7:42:b1:22:18:bf:03:55:2e:5c:72:04:51:00:
c4:dd:31:58:56:70:a8:b8:d9:c9:38:44:a6:85:92:
73:5a:58:12:9e:36:b4:19:25:d7:bf:17:87:ba:a2:
af:f2:d1:31:9d:dd:c6:ce:d0:c0:1b:0e:9d:93:d9:
e4:0e:58:7b:c8:01:3b:80:1c:45:d7:cd:bf:6c:be:
09:00:b3:2f:5d:3a:5d:5f:cd:80:cb:dd:2f:ef:fd:
84:95:2f:e4:bd:19:75:1d:c3:9e:5d:65:c1:4d:5e:
18:c6:5d:a1:80:60:18:02:9e:0b:5d:e0:20:49:09:
d2:44:38:5d:63:38:e6:ab:62:48:6b:30:a1:21:71:
63:9e:7e:c8:66:d0:99:1a:f6:30:2d:11:fb:a7:4c:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7A:56:92:E2:44:84:8E:55:E2:B1:64:64:89:40:27:E2:33:E8:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/766BF1761F5411F09A096C93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.97.0-156.238.100.255
Signature Algorithm: sha256WithRSAEncryption
9c:33:50:d1:56:96:bd:50:f4:bd:ab:6f:e7:cf:10:e7:26:20:
25:e7:bd:4c:b2:e4:32:37:f2:82:3d:35:71:42:0e:08:d5:05:
31:c7:75:a9:a7:01:62:f7:df:66:10:23:e8:fb:69:0c:f1:e1:
e4:63:32:0e:c6:a2:23:3f:a9:54:b0:e6:df:1d:0d:dc:43:63:
82:60:f7:ed:03:6a:ce:80:35:5e:c9:d0:ad:cc:ac:d5:04:6f:
e3:7a:58:38:a5:ae:12:53:44:50:ef:0f:de:a5:99:26:0d:fc:
a9:6a:c4:8d:da:eb:62:41:87:62:0e:a2:09:61:30:24:f2:e0:
5b:a4:95:16:4d:96:ca:dd:95:16:64:e8:cb:42:62:9b:5e:3f:
db:57:8f:af:c0:3a:15:7a:4f:8d:9f:41:e3:8d:2f:64:22:5c:
3e:34:5e:ca:1c:d6:27:7d:26:42:3a:2e:c3:25:83:7b:c4:96:
c5:51:f3:05:de:e1:e2:83:5c:d0:fa:d2:b8:b7:21:0b:d5:4c:
ef:b1:17:fc:8f:10:59:b2:20:68:4e:37:13:18:46:2c:50:63:
ec:e5:fa:b7:ef:d6:df:25:69:22:c5:b7:63:c9:4c:38:cf:99:
a8:a8:05:b7:8b:cd:fd:6c:36:18:1f:bd:73:4b:76:5b:13:a5:
c3:59:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:50:09 2025 by rpki-client on console.sobornost.net