Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83D52D0C191211F0ACA402E16DB8BCC6.roa
File: 83D52D0C191211F0ACA402E16DB8BCC6.roa (raw, json)
Hash identifier: WQ+cfyXyD8ghx0Z+v41LjqxdnjgwAIdGkC1Ma5zfiE4=
Subject key identifier: E5:5F:E1:8D:CE:80:C1:E8:7F:7E:24:3F:F9:ED:0B:A6:E0:0B:AE:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83D52D0C191211F0ACA402E16DB8BCC6.roa
Signing time: Mon 14 Apr 2025 09:26:16 +0000
ROA not before: Mon 14 Apr 2025 09:26:11 +0000
ROA not after: Thu 22 May 2025 09:26:11 +0000
asID: 137899
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85036 (0x14c2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 14 09:26:11 2025 GMT
Not After : May 22 09:26:11 2025 GMT
Subject: CN=67fcd4b8-a6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:31:58:e1:48:b0:ee:d8:50:47:bc:5d:ce:b9:
0b:34:82:c7:eb:9e:d7:a9:bf:82:0a:16:2d:59:f8:
1f:c4:34:cb:25:22:b6:e8:41:9f:3a:eb:3a:8d:5c:
87:fd:4d:01:9b:00:09:70:4f:74:21:01:8f:d6:a7:
94:82:da:e0:3c:32:6c:ff:90:4d:6b:b5:72:69:70:
32:48:32:b7:75:c3:73:b1:74:f3:05:5a:a0:4f:97:
f2:ca:d2:3e:54:dd:d1:f9:7c:4b:b4:b2:e8:da:9a:
ba:9f:db:f2:b6:a2:dd:29:6e:8c:57:e1:99:05:66:
de:87:a9:f8:05:5e:18:3a:c7:9b:e6:48:20:10:78:
53:c2:9b:50:f0:4a:06:3c:d4:4f:54:4c:9d:11:fe:
0e:ce:55:cc:74:d7:e0:07:99:dc:43:c7:2b:4a:26:
f6:d0:02:3b:90:a4:6f:27:6d:03:cf:bd:cd:4a:56:
d9:6c:0f:22:be:ef:dd:7e:ef:ef:be:ed:69:63:77:
23:36:02:a3:36:e9:f3:b7:94:c5:b0:7c:39:f5:eb:
7c:c8:af:0d:1e:2b:19:fb:0e:3f:3f:73:a5:bb:4e:
71:c2:21:86:1c:d0:37:7a:52:34:72:bb:c8:96:56:
d6:30:fd:cd:f7:64:ea:e0:b2:c4:a2:b6:de:57:e6:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5F:E1:8D:CE:80:C1:E8:7F:7E:24:3F:F9:ED:0B:A6:E0:0B:AE:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83D52D0C191211F0ACA402E16DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
63:49:4a:f3:ee:68:fb:58:50:59:ab:63:82:70:de:49:93:e0:
6f:c9:e2:93:7d:27:81:e6:c3:58:eb:3c:a3:a6:0c:e0:73:14:
0f:8b:72:98:9e:46:02:25:3b:d5:55:76:9d:1b:54:e7:98:ae:
da:a5:c4:fd:44:df:b3:8c:5b:4b:0f:53:9d:1b:78:54:72:7e:
43:f6:5a:5e:3f:0c:1b:48:06:5d:4b:0f:a8:a8:03:d1:00:c0:
6f:ba:f2:c1:b9:0d:98:f0:12:d7:b8:d1:f2:99:75:34:31:56:
e1:c9:d3:cf:f9:91:fd:63:7f:26:ec:9d:b1:9f:2a:90:60:3c:
9c:22:56:36:78:9a:72:f5:52:41:d4:c8:3e:1e:84:02:7a:bd:
d3:76:ab:60:73:b3:17:26:83:5f:e0:c2:f2:47:ce:9f:09:cd:
9f:2c:7d:71:a7:69:cc:7f:83:c1:c2:d9:0c:24:74:dd:7a:62:
4c:21:14:ba:d5:c3:f9:ab:70:02:33:a4:9f:a4:bc:2c:ea:3c:
fc:64:eb:5b:88:ad:d4:23:6d:10:31:2e:36:17:92:16:60:1a:
bc:28:54:85:2e:c2:2d:d4:c1:3b:e3:a9:8a:6a:0d:0a:0f:4a:
b0:67:ba:14:23:73:22:69:56:1b:d7:38:c5:0a:2c:89:50:11:
40:e9:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:19:57 2025 by rpki-client on console.sobornost.net