Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/888600B2138911F0BD51CA52762E951A.roa
File: 888600B2138911F0BD51CA52762E951A.roa (raw, json)
Hash identifier: siOMAmxbZsX/pN48Q+lhQFUHLXK41hDWpVaKJGVjIG4=
Subject key identifier: 82:8D:1C:0A:AB:88:C1:18:9B:77:36:B2:11:7C:57:E3:AF:7D:94:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/888600B2138911F0BD51CA52762E951A.roa
Signing time: Mon 07 Apr 2025 08:23:07 +0000
ROA not before: Mon 07 Apr 2025 08:23:03 +0000
ROA not after: Sat 10 May 2025 08:23:03 +0000
asID: 7018
IP address blocks: 156.230.1.0/24 maxlen: 24
156.238.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84576 (0x14a60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 08:23:03 2025 GMT
Not After : May 10 08:23:03 2025 GMT
Subject: CN=67f38b6b-f1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ec:88:8c:61:58:41:ba:0a:01:2f:6e:bd:6c:
b9:91:cf:44:6f:37:71:47:c9:08:ef:58:90:a4:09:
80:61:ec:f6:e0:7f:b3:59:21:00:86:ef:43:e4:7a:
bb:42:01:83:d9:fd:5a:2a:4f:2d:ff:bb:63:f2:3f:
17:3c:ee:a0:53:d3:f5:1f:18:cc:18:6d:77:f7:63:
45:ad:c1:c4:b2:0c:7f:f1:1e:88:cf:ed:33:c6:3d:
2f:fb:4e:b9:92:a9:fa:4a:f2:bf:a9:af:69:4c:6f:
d6:f6:89:0a:03:66:57:50:4f:83:33:68:bd:32:bc:
57:20:21:40:11:3c:0f:95:f0:8c:f5:4c:98:56:16:
96:3b:90:10:70:3a:43:31:64:b2:15:0a:12:f5:8c:
19:35:c5:4e:cc:5e:88:11:22:f7:e4:c4:99:11:4c:
c6:a6:1a:c4:44:63:3f:03:de:92:b5:f1:14:a2:2a:
64:b1:72:11:95:73:68:1b:11:94:e3:5f:9a:84:bc:
b4:11:7f:74:dc:d4:2b:0c:0f:7f:01:a9:85:a3:6f:
94:2d:81:c7:8b:46:1b:80:d4:fe:f4:d7:05:fc:12:
7e:4c:c5:28:94:d4:cd:4d:5d:17:7c:21:d8:cb:1a:
7f:7b:21:25:d2:07:f6:4a:53:db:d2:bc:4c:65:b2:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8D:1C:0A:AB:88:C1:18:9B:77:36:B2:11:7C:57:E3:AF:7D:94:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/888600B2138911F0BD51CA52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.1.0/24
156.238.12.0/24
Signature Algorithm: sha256WithRSAEncryption
13:3f:27:9b:7f:1d:04:3e:a7:f3:d9:14:ad:5d:fd:0f:db:29:
25:6d:8d:29:a2:5b:23:ba:4c:66:f5:64:27:a2:67:d0:0f:87:
d6:2f:75:a7:8c:b2:37:18:85:2d:aa:8d:b1:80:cf:23:d8:c3:
c6:58:5a:2b:46:ca:4d:cc:68:07:4f:e9:8a:ba:22:cc:9b:f0:
00:3f:6a:1a:5e:7e:dd:7b:01:1a:d9:bd:de:11:33:26:7d:43:
5c:78:03:78:bf:c1:c6:cf:99:43:ea:c6:e8:93:f8:82:18:85:
8c:1d:d0:66:72:54:19:4a:a3:88:4c:dd:87:5c:17:28:6a:03:
01:cf:46:f0:b1:a3:45:ec:fe:da:8b:53:b5:32:62:45:01:37:
8e:ab:51:32:b2:54:11:82:04:c4:2a:b4:b4:04:23:77:e2:88:
52:0e:e8:69:a6:b7:05:9c:91:60:e5:aa:60:6c:92:3e:e9:c2:
b5:5a:14:aa:4b:91:04:bf:23:c6:80:19:dd:cc:6c:9c:30:43:
44:89:53:89:e7:78:78:60:f5:82:7a:10:a9:5c:07:31:f5:9e:
94:6a:84:69:a7:97:37:eb:5b:3f:23:76:7e:ea:df:7d:86:7d:
dc:b4:f3:5f:f4:08:0a:a7:50:8d:32:e0:35:a2:9a:a0:92:86:
fb:14:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:34 2025 by rpki-client on console.sobornost.net