Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D999D00106F11F0B888A690762E951A.roa
File: 9D999D00106F11F0B888A690762E951A.roa (raw, json)
Hash identifier: HBs5lAZWMNNlKe9NwMekdo7I3F7A7zMXCzWFaY8RgMc=
Subject key identifier: E7:03:CA:DA:60:0C:95:53:2E:EE:D0:A3:8B:38:84:56:BC:23:00:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D999D00106F11F0B888A690762E951A.roa
Signing time: Thu 03 Apr 2025 09:40:02 +0000
ROA not before: Thu 03 Apr 2025 09:39:58 +0000
ROA not after: Fri 09 May 2025 09:39:58 +0000
asID: 269070
IP address blocks: 156.249.64.0/24 maxlen: 24
156.249.65.0/24 maxlen: 24
156.249.66.0/24 maxlen: 24
156.249.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84388 (0x149a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 09:39:58 2025 GMT
Not After : May 9 09:39:58 2025 GMT
Subject: CN=67ee5772-4bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:fb:c2:3c:8e:ec:43:38:d8:e0:15:8f:db:
96:df:41:b5:6b:c8:4f:7c:05:1d:09:cc:48:f2:c4:
30:5e:bf:74:1c:80:91:c5:96:01:ea:bb:79:ba:aa:
51:a3:a3:3c:09:a5:c3:9f:a4:4d:0f:34:b2:8e:d3:
90:60:2c:72:a3:0c:d8:8f:87:5a:17:04:22:4e:f9:
6b:53:b9:e3:c3:ab:7d:db:21:dd:40:7b:4e:e9:87:
7d:c9:f0:72:94:cf:81:f2:44:6b:1c:fd:69:19:4a:
fe:bd:6c:05:b8:4d:3d:ac:7a:81:c5:99:64:5a:f3:
a2:49:05:fc:b5:e7:91:3d:3c:be:e3:19:2b:03:89:
44:35:66:02:bf:b0:a9:93:83:0f:36:b5:29:fd:22:
35:b2:3a:50:a1:ec:86:1b:6b:6c:12:2f:26:38:43:
59:a7:a8:a7:b2:a6:94:c3:30:b3:2d:84:e8:4e:3c:
2b:7f:4a:64:62:f6:11:78:73:9e:16:b0:52:32:37:
df:96:dd:da:9b:99:f9:73:26:12:cf:36:10:8a:24:
9a:c9:02:d2:b6:c7:f6:c1:c7:36:19:b2:f5:5e:86:
ae:89:81:18:71:b2:62:af:e3:3a:0f:dd:aa:1a:aa:
85:ed:e7:e9:db:36:6f:70:a0:92:a5:e4:b0:26:48:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:CA:DA:60:0C:95:53:2E:EE:D0:A3:8B:38:84:56:BC:23:00:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D999D00106F11F0B888A690762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:21:d6:90:3e:e0:33:2d:bb:74:07:1d:d1:ab:8e:75:6b:4c:
49:98:c2:16:59:62:ba:5a:8c:e9:2a:7d:c6:ba:91:3e:22:2e:
9c:8c:20:4f:ff:c7:d9:51:bc:b5:3c:4e:e2:38:ca:26:8e:d5:
82:30:b9:51:49:e7:d6:ee:32:1d:9c:a9:4f:47:a9:6d:b6:a7:
77:14:0f:71:cf:06:8b:1c:bd:95:78:6c:ab:d3:76:b0:dd:50:
23:4c:03:bb:b0:53:78:13:1f:8c:b1:cb:10:a6:09:69:e5:d8:
79:20:97:0e:3e:90:af:b4:bc:a3:8d:af:a5:3f:04:d4:01:29:
6e:cd:24:83:66:5b:de:cb:1e:95:04:9c:71:e7:99:7b:b2:8e:
b6:5b:03:91:4a:44:55:e4:39:57:30:5a:d2:71:7f:25:c5:17:
23:37:ea:58:27:95:de:93:fc:02:68:b4:27:69:7c:3b:3a:69:
12:23:8d:e5:76:7f:1c:c3:7c:9a:a2:9f:cb:99:82:09:d6:70:
22:06:de:8d:56:97:ce:52:00:8a:66:06:54:e9:14:d6:77:be:
86:96:02:6f:d1:7f:40:05:c5:29:7a:b3:d1:68:d2:25:a2:9c:
22:a5:cd:30:82:53:b5:fa:b2:c9:64:3a:5e:21:e2:d7:1b:3d:
79:ee:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:02:25 2025 by rpki-client on console.sobornost.net