Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AC0BB361CF911F0823421D2DAE4EC9C.roa
File: 9AC0BB361CF911F0823421D2DAE4EC9C.roa (raw, json)
Hash identifier: TlTOKGRCCFV1c9pjtIsU9rtS/jrRCd6T6iClLwxTtM8=
Subject key identifier: 84:7A:C9:D6:FF:49:32:33:A2:66:E4:56:71:AC:1C:83:97:09:F6:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AC0BB361CF911F0823421D2DAE4EC9C.roa
Signing time: Sat 19 Apr 2025 08:38:02 +0000
ROA not before: Sat 19 Apr 2025 08:37:57 +0000
ROA not after: Sat 24 May 2025 08:37:57 +0000
asID: 55020
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85364 (0x14d74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 08:37:57 2025 GMT
Not After : May 24 08:37:57 2025 GMT
Subject: CN=680360ea-e4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:a3:6b:5f:fc:cf:43:7e:a2:4d:5e:39:3f:
19:4d:02:cb:2d:4f:a4:59:c1:58:38:de:fb:3b:46:
94:62:40:55:32:70:4f:b5:bd:9d:2c:bc:4c:b5:32:
d0:32:76:43:a2:6d:58:48:d8:16:43:b6:37:bf:11:
30:b6:f6:d5:7f:f4:d6:d8:19:89:79:6a:a3:35:f2:
01:18:84:c2:44:93:3b:de:ac:7e:41:71:dc:1f:d7:
f4:86:9d:1f:4d:ce:46:29:cf:4b:cb:25:3e:54:70:
d0:c1:4f:73:49:d6:1d:6c:a5:c1:18:be:4f:48:4f:
e3:70:0b:7a:76:88:d2:63:41:cf:a8:e8:8f:70:f6:
5f:91:00:ab:fc:74:16:81:0b:29:5b:39:f4:2a:7a:
68:a4:bf:b7:f4:bf:29:58:43:8b:89:0e:92:e9:51:
d5:17:d4:4c:56:df:9e:47:ad:b9:e8:a9:9b:da:37:
b9:9d:26:34:e4:b5:2b:e8:db:28:3f:4a:69:3f:d4:
51:2f:7f:43:a0:6d:bc:b2:fc:cf:e5:98:a1:82:b2:
d2:bd:84:2e:c8:d3:12:f5:de:12:ef:58:ca:0d:1b:
b9:09:2f:cf:e7:fb:e6:00:aa:fe:99:31:f6:15:b1:
9f:de:bd:1a:7b:c8:8b:2d:bf:38:43:71:01:ca:05:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7A:C9:D6:FF:49:32:33:A2:66:E4:56:71:AC:1C:83:97:09:F6:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AC0BB361CF911F0823421D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
6d:60:44:f0:83:8f:d3:46:ce:6e:7d:59:0a:85:53:f2:2a:37:
60:07:9e:91:d7:c4:27:86:30:c6:38:f6:af:71:d7:0b:ab:35:
7c:41:d3:d8:6c:3b:1c:8e:f2:89:f1:aa:92:4a:6c:92:f4:77:
36:48:8a:7b:f7:ad:ea:c2:a1:f8:fb:b7:2b:e7:a0:95:56:70:
51:aa:46:6a:0c:83:6e:ed:71:e7:d3:8a:c2:b9:1c:08:fb:04:
55:b4:60:10:bd:43:63:5d:9d:39:20:83:af:e7:b3:12:f7:ab:
f4:2f:c0:5c:29:8d:4b:d8:1a:6b:0f:b2:79:41:37:6c:ed:d6:
ee:a2:9e:67:a0:18:cf:9e:ed:ce:55:1b:68:e6:de:29:76:07:
b7:65:65:c0:cc:cb:d2:c0:18:e5:bf:17:89:3b:42:28:b3:b4:
dc:95:b8:f6:6c:fd:2d:06:09:19:e5:3b:84:82:0b:c9:c2:21:
6f:ea:4a:9e:b8:fa:3f:57:54:32:14:ad:77:92:2a:de:13:66:
22:ff:82:4d:71:7a:76:d1:94:0a:2b:b8:32:65:1d:96:3a:53:
d5:82:78:0b:df:eb:52:76:03:ea:47:78:3a:37:5d:9b:46:23:
ea:82:e5:96:ae:10:08:1c:99:45:16:e3:9d:57:c4:71:9f:fd:
6f:99:9c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:30:36 2025 by rpki-client on console.sobornost.net