Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/900F0F3C244A11F08EF8CDBDDAE4EC9C.roa
File: 900F0F3C244A11F08EF8CDBDDAE4EC9C.roa (raw, json)
Hash identifier: +vVDEOH0+tUfY0qaHydlPwqpKY599EyOEZXCCUCJSKE=
Subject key identifier: 2B:4B:28:83:7F:69:FC:46:F1:24:07:20:F1:81:A4:D1:57:2C:5B:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/900F0F3C244A11F08EF8CDBDDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 16:05:12 +0000
ROA not before: Mon 28 Apr 2025 16:05:07 +0000
ROA not after: Wed 04 Jun 2025 16:05:07 +0000
asID: 64126
IP address blocks: 156.248.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85941 (0x14fb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 16:05:07 2025 GMT
Not After : Jun 4 16:05:07 2025 GMT
Subject: CN=680fa737-67fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a9:25:7d:3a:a8:7f:91:40:8b:63:63:bf:d9:
de:16:92:6a:05:95:66:6f:13:15:fb:a7:c5:8a:e2:
c9:73:c7:d0:f1:b7:57:c5:6d:62:12:4b:0f:59:da:
cf:ed:12:63:ba:18:01:9e:8f:33:43:de:bf:1c:fb:
7d:a5:12:fe:5c:cd:73:15:30:c7:e7:6b:2f:11:af:
f0:7f:6c:86:36:65:91:26:3f:72:61:2a:b5:e0:c0:
bc:06:0b:59:56:89:69:b8:3a:e6:9c:d3:36:b3:78:
df:17:39:82:e3:4c:ce:1f:de:0e:69:0d:0d:7d:33:
4c:e0:6a:67:9c:04:fb:a6:71:40:65:8c:73:4a:3f:
13:47:9a:75:39:ae:1c:76:70:8e:29:37:fa:11:bc:
4a:42:a7:e1:60:0d:83:0c:80:0f:18:7d:14:18:b4:
3e:07:60:a3:39:c4:7f:1c:1e:e6:db:dc:0c:b4:32:
80:b7:d8:b8:91:d7:b8:7c:4d:cd:53:c2:d7:4e:75:
9c:df:a0:9c:c3:83:48:49:d2:81:90:b8:f3:b9:61:
f8:3c:fe:4c:41:bc:7a:77:f7:c7:c4:f1:5b:a2:b7:
b1:6d:49:f9:f9:6b:04:e5:fd:bc:8c:71:93:3a:9d:
54:40:76:1d:34:01:66:d3:79:71:f3:52:d5:00:f3:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4B:28:83:7F:69:FC:46:F1:24:07:20:F1:81:A4:D1:57:2C:5B:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/900F0F3C244A11F08EF8CDBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a9:b5:04:c1:98:50:68:6d:8d:1a:cd:26:ff:31:4d:1e:0f:43:
c5:d6:e1:21:5e:5f:83:f8:e7:3e:9f:b5:38:d1:1b:54:af:bb:
7e:96:ce:c2:98:28:ac:8a:e6:fc:c0:3b:b9:c2:81:fa:42:7c:
e2:e5:6e:6c:d1:f4:4f:b0:af:7c:8f:bd:6e:2e:f0:58:73:b8:
48:67:d0:63:59:ba:ae:62:73:dd:fb:c6:a3:13:ef:0b:06:f9:
ce:b1:a8:3f:1f:23:73:ce:8d:66:62:20:e4:34:36:c0:3f:11:
1b:53:d3:c3:71:8e:47:9f:79:d1:55:ef:68:4e:b7:2b:02:e6:
38:3f:68:ff:39:3b:0e:4d:00:fc:17:bd:1b:02:d8:79:01:21:
3e:2b:68:3e:52:7f:64:41:62:4d:c7:64:2a:05:a5:73:b8:5b:
92:3a:8d:89:2e:d4:76:52:00:ce:1c:aa:20:35:10:30:08:61:
95:da:29:5f:e9:b2:64:34:94:88:d1:e4:08:63:70:f9:03:45:
1b:f2:b5:3a:6e:cd:e4:db:26:cc:6d:80:af:5a:5e:01:35:f5:
61:e0:8f:00:63:30:21:79:2d:7f:e8:2e:e3:34:fa:93:f7:51:
3f:42:7d:8e:65:15:6e:02:af:2b:5d:58:96:70:f9:d9:d0:63:
d6:b6:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:02:17 2025 by rpki-client on console.sobornost.net