Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F67F0C0211D11F08A70AA7EDAE4EC9C.roa
File: 7F67F0C0211D11F08A70AA7EDAE4EC9C.roa (raw, json)
Hash identifier: VH4ScHAfxBQ/t6JsMT3djfSUACiOveHt+cSbcATh5fM=
Subject key identifier: D1:40:78:83:C9:F2:04:E1:E2:3D:BE:6C:69:E5:72:D5:EF:DD:E8:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F67F0C0211D11F08A70AA7EDAE4EC9C.roa
Signing time: Thu 24 Apr 2025 15:05:03 +0000
ROA not before: Thu 24 Apr 2025 15:04:58 +0000
ROA not after: Fri 25 Apr 2025 15:04:58 +0000
asID: 5650
IP address blocks: 156.225.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Apr 2025 15:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85658 (0x14e9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 15:04:58 2025 GMT
Not After : Apr 25 15:04:58 2025 GMT
Subject: CN=680a531f-92b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:6b:d8:20:f5:e0:e9:02:69:29:f8:5e:cc:
17:be:a4:dd:3d:44:39:8a:51:a0:dc:c9:31:f6:7d:
45:10:f8:db:c1:8a:19:2c:f5:3d:57:c1:2e:f2:ec:
d6:2d:36:da:70:a9:08:3c:86:a4:1c:e7:9a:40:bb:
59:f3:ec:70:28:7b:f6:1a:fd:77:e6:c4:46:9c:2e:
dd:2e:ab:4f:8e:bf:fc:6e:ce:96:49:63:4d:c9:03:
a9:53:8a:92:18:a8:4a:ca:30:33:60:96:dc:6c:1c:
03:e1:5c:4d:d8:ab:07:98:0d:ac:7d:82:81:76:8d:
27:ed:e7:dd:e8:41:a0:15:fa:d2:e8:59:3a:3e:46:
5c:46:52:72:c8:84:28:a6:7a:16:ea:57:21:8b:31:
e0:a1:80:84:f3:8e:69:49:06:50:54:f4:3f:4f:4d:
24:53:9f:68:a6:49:cd:4c:3a:4b:67:96:33:6b:5e:
18:1a:71:d2:1e:06:16:07:f9:46:a2:fd:51:3d:82:
25:fb:51:91:18:bf:cc:7b:58:83:57:19:ca:a2:2a:
1a:e0:a3:23:31:9c:ab:e5:0a:39:30:f2:9b:ee:00:
20:b6:d0:27:d9:4c:c8:5b:5c:25:cb:bd:c6:4a:c1:
72:a3:63:c1:8d:52:a2:4e:0d:c8:e8:87:5e:4a:f1:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:40:78:83:C9:F2:04:E1:E2:3D:BE:6C:69:E5:72:D5:EF:DD:E8:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F67F0C0211D11F08A70AA7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.56.0/21
Signature Algorithm: sha256WithRSAEncryption
22:1c:b5:5e:63:49:d0:18:60:a7:7f:d1:7f:d1:7f:dd:e9:ee:
0a:54:a5:2e:1e:5f:b1:dc:48:4e:cf:5c:cb:9c:fc:60:5c:56:
08:b4:6c:a2:05:62:2a:78:c6:e7:ae:80:32:dc:23:d5:08:87:
39:b1:a8:47:24:4b:99:58:0d:a9:6d:84:1a:eb:5e:12:1e:50:
88:e4:5d:f4:44:4a:3e:32:38:8d:b8:bb:64:78:85:10:19:62:
fa:53:d1:17:ce:b3:da:72:5c:64:58:90:32:1c:2c:42:43:2c:
34:ac:c7:e4:f4:ef:32:4b:77:e4:3c:a3:4a:2f:20:f4:9b:a8:
03:90:70:45:54:80:31:f4:97:3a:53:a4:76:c8:2d:b0:cb:c0:
90:21:b6:cd:49:f4:a7:22:af:6e:3a:c8:51:5b:b6:9b:81:20:
02:fc:23:39:ea:26:75:6d:8e:30:65:6c:0b:2e:aa:44:35:01:
e6:3d:8f:72:e5:55:06:a6:07:15:28:bb:ff:35:1c:d5:66:92:
5e:66:62:4a:9c:95:0e:5b:c0:b9:17:cf:fe:cd:bb:d2:c3:77:
88:63:f8:99:1b:cd:d7:8f:d5:b1:91:08:7d:c5:56:d4:ea:c9:
31:d3:b2:0b:00:94:b1:e2:c5:ab:e1:4d:0b:01:2f:73:5d:fe:
1b:f5:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:29 2025 by rpki-client on console.sobornost.net