Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DCFAF781E8911F08B425CC4DAE4EC9C.roa
File: 7DCFAF781E8911F08B425CC4DAE4EC9C.roa (raw, json)
Hash identifier: vzCAnJDyhFpyf/TVXTGZwfqOH3g+UAl7qwlXJozudS4=
Subject key identifier: DB:B5:BF:AC:25:6F:13:31:E5:6F:3C:42:F5:63:C3:2C:AB:24:58:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DCE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DCFAF781E8911F08B425CC4DAE4EC9C.roa
Signing time: Mon 21 Apr 2025 08:20:32 +0000
ROA not before: Mon 21 Apr 2025 08:20:26 +0000
ROA not after: Wed 28 May 2025 08:20:26 +0000
asID: 140475
IP address blocks: 156.230.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85454 (0x14dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 21 08:20:26 2025 GMT
Not After : May 28 08:20:26 2025 GMT
Subject: CN=6805ffd0-c599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:63:11:3e:09:d5:38:0d:31:bc:b6:95:65:
35:df:d7:87:1a:6a:37:48:69:fd:47:36:19:1f:70:
05:9c:5d:e5:f6:95:0c:3e:e7:0c:a6:92:ea:a4:a1:
03:d3:d6:2f:79:41:fe:9b:96:ba:7d:fc:f8:ab:de:
b5:5a:a1:00:82:00:6f:89:25:09:2a:dd:71:d6:e0:
86:d8:63:2a:3b:7e:5b:f0:f5:ee:15:fa:37:10:bb:
3b:b7:c3:5d:e2:6f:c2:13:b2:ad:45:eb:58:f7:f7:
4a:6f:8b:6f:03:8f:46:88:5d:49:74:c6:ff:d3:03:
73:99:50:91:81:cd:aa:2c:9b:0f:d0:ca:a6:a3:07:
80:9b:83:3d:9c:f3:7e:8d:dc:3f:8c:8d:d8:1e:f6:
86:00:66:92:8b:98:79:e5:1d:5f:f7:9c:a6:cb:a3:
a9:aa:0d:35:e7:01:c6:07:63:d4:3d:25:ee:a5:a5:
07:db:8f:c8:d6:3c:b3:35:9a:f1:61:9a:c5:b4:d1:
ee:00:40:c0:96:f3:03:91:b1:87:7b:9a:dd:36:33:
95:9e:5b:da:89:ad:8c:72:87:e3:54:c8:a6:bd:c1:
4c:d3:ec:fa:20:06:f5:47:8e:90:ea:f8:7c:f5:a2:
cc:b8:de:d8:43:a3:69:cb:11:01:36:83:15:fa:c0:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B5:BF:AC:25:6F:13:31:E5:6F:3C:42:F5:63:C3:2C:AB:24:58:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DCFAF781E8911F08B425CC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:7b:26:f5:9c:f4:17:59:5c:c8:6c:c9:0b:b4:79:72:32:ac:
be:04:cc:cf:6c:36:74:a5:60:87:92:e4:17:25:e3:7c:21:c3:
69:59:5c:dc:2a:b6:e3:85:38:4d:12:f4:d7:78:e8:ed:60:e3:
91:33:3d:b5:5d:80:63:bc:06:f7:cf:7d:2d:5b:8b:08:3a:7f:
a0:0d:35:0c:b8:1a:a9:3b:1a:93:ce:4b:57:4d:3e:89:65:3f:
37:8d:d9:4e:2b:75:60:6b:48:e1:94:5b:ee:06:b0:2f:a0:df:
ef:45:c1:69:b2:5f:3c:44:c1:b2:7a:f6:84:5e:31:6f:64:11:
29:3d:16:60:7b:93:33:d4:9e:95:3b:d3:34:0b:5d:a3:e5:2f:
28:e9:27:bb:a5:ba:bf:b6:12:f8:c7:d0:64:5f:9d:8a:fe:ef:
00:87:ae:bc:4b:b4:de:44:1e:66:97:f5:11:4e:3a:80:74:93:
ef:cf:3b:75:50:a0:66:e5:66:48:12:3e:cb:da:c0:db:93:1b:
33:2a:73:69:f8:3b:85:c2:fd:40:73:63:76:80:6e:aa:a1:d1:
1d:ce:2a:b8:16:26:cb:19:65:02:df:d5:79:80:b8:08:d5:33:
88:58:44:ae:8d:54:96:d6:a3:f6:7d:0f:90:dd:04:60:d5:24:
79:f6:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:06:47 2025 by rpki-client on console.sobornost.net