Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C94DF413B511F0BC860757762E951A.roa
File: 89C94DF413B511F0BC860757762E951A.roa (raw, json)
Hash identifier: P+MTYStkpObo7eRjqo4lzmRIuVRVBwcDVcpmf5sylik=
Subject key identifier: A8:D7:47:E6:31:74:3E:02:D7:1B:76:6B:43:E6:29:4B:4A:26:1F:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C94DF413B511F0BC860757762E951A.roa
Signing time: Mon 07 Apr 2025 13:38:07 +0000
ROA not before: Mon 07 Apr 2025 13:38:03 +0000
ROA not after: Sun 04 May 2025 13:38:03 +0000
asID: 50053
IP address blocks: 156.253.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84586 (0x14a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 13:38:03 2025 GMT
Not After : May 4 13:38:03 2025 GMT
Subject: CN=67f3d53f-7a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:b9:5a:0e:3c:f4:9b:67:94:b8:fe:bc:5d:
47:dd:6c:d1:7b:7a:70:8e:87:1b:ec:00:d8:f8:ee:
2d:92:93:51:ec:8c:b9:ba:ec:c8:c2:0d:09:68:85:
d1:e2:12:80:13:59:31:c7:83:55:f7:9d:bf:4e:9b:
11:2b:e6:ef:e1:27:08:f2:17:5b:63:a6:15:ff:92:
3c:25:bb:1a:18:6f:3b:ba:2d:46:1c:c0:23:db:10:
42:72:04:50:87:c5:88:81:08:67:d4:3c:63:0e:8a:
9f:b4:35:5c:8e:2b:96:fb:1c:64:40:80:6b:27:14:
b5:62:90:af:83:e9:8a:0f:d2:ce:e9:1d:85:96:17:
36:65:f0:ac:f8:02:bc:e5:a7:e1:8a:a9:8b:c7:f9:
e2:e2:90:6c:2a:99:8b:52:6c:2c:53:90:23:47:91:
b3:6f:f0:a0:0b:ce:3e:b5:ec:cb:84:ea:46:84:95:
a6:aa:42:0f:ec:83:45:7d:5f:ba:d4:46:c5:14:d3:
b3:96:32:a3:90:dd:a7:c7:d8:7a:2c:69:d3:54:b1:
f3:15:93:ae:1b:b9:c1:20:00:2f:3f:8e:2b:91:97:
08:a0:e2:08:f0:f0:f6:57:c6:a7:2a:1d:13:78:f6:
97:e1:1c:d2:f0:ef:54:b7:8d:21:6e:c4:5d:74:fa:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D7:47:E6:31:74:3E:02:D7:1B:76:6B:43:E6:29:4B:4A:26:1F:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C94DF413B511F0BC860757762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.251.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9a:9f:82:ff:92:0c:64:c7:f3:61:5f:09:28:d4:74:14:56:
90:ce:b4:75:2f:b3:08:9a:cf:58:24:e0:8f:6f:3d:87:ad:7d:
09:52:57:68:d6:3a:db:d5:cc:87:35:82:18:5a:6c:e1:fa:4e:
b0:39:be:ee:a3:84:40:eb:21:fd:1f:8e:e9:ac:d8:6d:90:1c:
9d:d6:a1:d2:8a:25:3d:f6:32:5a:cf:c4:f9:67:2a:8d:ed:2d:
96:9d:43:18:b9:bb:96:22:b6:56:6d:9e:52:71:64:8c:c3:67:
ca:7f:f4:2c:70:ec:09:24:6c:fb:7d:d1:41:89:39:ea:bd:8a:
b5:7b:40:95:b0:0e:10:7d:ba:47:9a:c0:44:8e:ae:84:62:03:
71:7f:6c:01:cc:7d:b5:28:3c:be:b0:97:73:62:db:18:63:a1:
2c:f1:85:c4:48:77:a7:2b:ac:fc:f0:7d:83:ea:6c:4d:05:97:
5d:6e:15:3c:50:a0:84:f4:85:95:6d:70:e8:57:59:26:cb:16:
d2:bc:34:3e:fa:e8:fd:7f:3c:97:6f:d3:87:e3:e6:a3:70:9a:
9e:3f:0c:a5:b2:59:8a:4f:a0:08:30:ae:2a:20:29:12:46:bf:
6a:69:30:6d:01:56:ce:9a:59:b2:04:12:7e:54:23:b1:24:89:
50:57:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:39:29 2025 by rpki-client on console.sobornost.net