Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F8E3F601DCE11F0998818E0DAE4EC9C.roa
File: 8F8E3F601DCE11F0998818E0DAE4EC9C.roa (raw, json)
Hash identifier: 5TV7P5EkKfEV4HdaPfeJoIJyj1uj6qOaIPFfGk8lJLw=
Subject key identifier: D8:11:C5:38:FD:70:29:6E:DB:E2:D3:74:CD:5F:2F:40:51:A9:E7:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F8E3F601DCE11F0998818E0DAE4EC9C.roa
Signing time: Sun 20 Apr 2025 10:02:26 +0000
ROA not before: Sun 20 Apr 2025 10:02:21 +0000
ROA not after: Mon 26 May 2025 10:02:21 +0000
asID: 23470
IP address blocks: 156.252.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85403 (0x14d9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 20 10:02:21 2025 GMT
Not After : May 26 10:02:21 2025 GMT
Subject: CN=6804c632-5be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:24:7f:5a:29:5b:ae:33:12:a0:f5:40:74:
7b:e5:07:3f:17:a6:c6:d5:fe:9a:b1:b1:e9:2c:26:
f5:e5:76:e7:95:cc:16:bb:94:7a:dc:0c:6d:11:2f:
b5:a9:ac:9d:de:4c:14:cb:39:7c:c9:10:08:e3:b8:
b0:c1:41:59:56:e5:7d:74:d3:08:35:21:60:9c:b5:
64:44:64:da:80:ff:11:6c:9a:bd:d0:d5:8f:d5:4a:
4e:84:fe:27:70:d5:d4:c0:18:7f:d1:32:aa:65:4a:
07:8a:0a:42:c9:f6:31:71:97:3f:e6:0d:4c:e7:97:
48:8b:9f:1c:07:81:86:b0:30:36:a3:dc:fe:1c:90:
db:64:5a:75:eb:15:44:a5:3f:f4:56:a0:0b:57:2f:
3b:8f:19:c6:c6:79:40:26:17:01:da:28:7c:f4:e6:
54:60:76:b6:46:ec:72:15:a9:b1:03:6f:1d:b0:9c:
1e:1f:fd:89:65:6e:b9:45:b1:d1:42:3d:13:5d:4b:
46:a9:8c:29:5f:b2:37:ae:fc:70:f2:6d:31:e6:13:
be:f1:fb:a3:28:a9:36:05:66:c5:c3:02:93:52:51:
6e:f4:fe:f6:a4:ca:cd:4b:1e:15:d0:f1:fd:2c:d4:
22:5b:c2:f7:87:64:8f:a2:a9:f1:db:c7:56:37:45:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:11:C5:38:FD:70:29:6E:DB:E2:D3:74:CD:5F:2F:40:51:A9:E7:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F8E3F601DCE11F0998818E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cd:a6:b4:68:b1:89:b5:f3:39:cc:5a:80:94:7a:f3:07:3c:
be:0f:68:1e:e1:3b:be:b1:bf:94:af:b8:5e:d8:da:40:62:be:
ac:1d:80:d9:e1:aa:fe:84:fe:97:51:69:99:b4:94:a2:a7:14:
3b:24:f2:f3:f4:3d:83:14:9d:93:f4:52:6f:f5:86:ac:75:49:
be:04:55:6e:2f:3f:5e:23:52:2f:90:69:b2:5e:5e:b8:a4:c1:
b6:a9:3e:c0:89:6b:76:90:39:c6:2c:af:4f:12:f8:2a:01:0e:
84:07:e9:d7:c9:80:11:b9:db:f6:ff:b1:bb:42:47:4f:c3:9b:
15:1f:25:83:ef:67:f6:1a:51:cf:11:df:99:74:47:3e:0e:9f:
a4:50:92:e5:86:fc:04:7a:e2:6f:04:b5:78:a0:94:7f:03:4d:
a1:1c:86:4e:3a:3d:45:ac:07:66:f5:f4:62:de:47:52:c0:2d:
7d:fe:49:67:03:54:a0:b5:62:31:47:c0:58:2b:11:4a:9d:b9:
7a:03:6f:85:ae:6a:50:97:6a:66:ab:7a:e5:bc:8e:68:41:51:
6e:72:ce:cc:4d:12:e2:e5:df:59:48:9f:9f:50:c9:94:5d:8c:
16:f8:fa:33:4b:a2:c0:d1:f8:cc:f8:2b:8a:70:7f:0c:3d:35:
4c:5c:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:55:11 2025 by rpki-client on console.sobornost.net