Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C41CEF21C6211F0BF159FD9DAE4EC9C.roa
File: 8C41CEF21C6211F0BF159FD9DAE4EC9C.roa (raw, json)
Hash identifier: JHjwMbZb/NZXaoEPjUAH5T0DM5FQH5SQ1te1Bx90904=
Subject key identifier: AF:58:4B:E5:6F:0C:C6:37:17:2C:F8:0D:9F:E5:11:5B:3E:2C:A0:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C41CEF21C6211F0BF159FD9DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:36:44 +0000
ROA not before: Fri 18 Apr 2025 14:36:39 +0000
ROA not after: Thu 04 Dec 2025 14:36:39 +0000
asID: 134365
IP address blocks: 156.239.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85268 (0x14d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 14:36:39 2025 GMT
Not After : Dec 4 14:36:39 2025 GMT
Subject: CN=6802637c-8d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:50:84:57:23:91:66:8c:fa:52:b0:e9:55:
03:e7:74:b5:7d:e3:be:ef:7e:89:5e:0b:fa:cd:78:
f4:28:20:11:fe:a4:d1:b3:5c:3c:ed:09:97:60:ff:
13:59:f7:51:57:2c:a7:5d:db:52:6a:b2:18:66:b0:
36:1c:da:66:0d:af:44:8c:20:3f:b3:60:84:50:6d:
ac:5b:65:44:fb:77:f1:0a:44:6f:83:74:6e:dc:8f:
68:e9:ec:8a:6a:6f:56:53:ae:be:fe:0c:dc:a7:cc:
ca:f1:a0:2a:6c:7e:9f:32:40:fd:34:f4:f7:9a:ba:
43:58:50:ba:f2:5c:cb:f8:2e:14:ef:37:37:d7:ab:
5e:1b:68:7e:3c:2b:d5:ec:5c:83:f3:b7:5b:8c:23:
1a:e3:94:5a:1f:80:3e:51:0e:08:42:39:3b:63:81:
62:4f:76:2b:1f:25:3c:2a:d9:43:51:c7:80:0d:62:
0b:6f:58:e6:0d:ae:49:35:31:ed:f9:44:7b:88:34:
b3:98:78:3b:b6:dc:84:46:4e:9b:6e:aa:11:d5:c7:
f9:a4:6e:56:f8:ae:9f:13:e2:08:92:c4:92:6d:4c:
5f:f3:e5:f7:2c:cc:1b:09:59:c1:f7:a4:0b:f6:59:
8b:08:de:16:20:90:e7:25:41:5f:c6:b1:06:2f:a5:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:58:4B:E5:6F:0C:C6:37:17:2C:F8:0D:9F:E5:11:5B:3E:2C:A0:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C41CEF21C6211F0BF159FD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.224.0/19
Signature Algorithm: sha256WithRSAEncryption
60:46:c8:5a:a1:a3:de:cd:89:3a:d3:33:ed:81:b8:c4:87:c0:
e3:65:9f:72:2b:07:c9:81:d2:26:05:d7:95:7e:6c:d4:59:ad:
6f:68:ba:ef:63:8c:88:3b:14:78:6a:dc:c8:d9:12:2d:fc:b3:
a7:bc:6a:9d:d3:51:a9:10:01:da:41:85:42:11:e1:29:4f:e6:
51:fa:66:59:61:21:fa:c7:8e:de:a7:37:77:ed:e0:a5:7e:8c:
23:8b:7c:2b:13:51:5f:e9:9a:77:b1:b9:08:45:74:08:65:21:
da:78:fd:6e:ad:37:99:2f:1e:9e:77:eb:f5:0a:99:f5:9a:47:
03:96:e4:b9:91:f9:ea:35:a5:7a:98:a2:b5:96:ff:b3:cc:c5:
7d:9c:23:b2:65:76:b2:7f:95:a4:dc:e1:4a:a9:4e:25:64:ff:
e6:6c:14:b9:63:54:44:95:a4:5d:89:5f:9a:ef:9a:5c:58:b1:
d1:f3:c6:0b:5d:ab:f3:70:47:45:c3:72:d9:4e:c7:70:df:fa:
11:da:7e:18:86:cb:71:e6:3a:54:59:97:22:a1:df:a6:91:9a:
aa:1f:60:e4:4e:ab:2c:a2:9f:91:0b:35:6e:ad:e9:fc:46:6d:
38:3e:9b:0c:d4:1a:ef:c5:fe:18:ca:ad:e8:63:23:f7:3d:b7:
77:9c:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:36 2025 by rpki-client on console.sobornost.net