Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A30C46B4202511F0B28D8B8ADAE4EC9C.roa
File: A30C46B4202511F0B28D8B8ADAE4EC9C.roa (raw, json)
Hash identifier: xZaW9Woi8RKeecLTz32+ZzDIMgUxJT/wh5P7AEHdjHo=
Subject key identifier: 4B:A1:DF:68:C4:81:AC:66:AF:42:20:33:A1:5A:F2:35:1A:AC:FA:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A30C46B4202511F0B28D8B8ADAE4EC9C.roa
Signing time: Wed 23 Apr 2025 09:30:47 +0000
ROA not before: Wed 23 Apr 2025 09:30:43 +0000
ROA not after: Fri 02 May 2025 09:30:43 +0000
asID: 22773
IP address blocks: 156.229.0.0/24 maxlen: 24
156.229.4.0/22 maxlen: 24
156.235.16.0/22 maxlen: 24
156.235.54.0/24 maxlen: 24
156.235.56.0/21 maxlen: 24
156.236.0.0/23 maxlen: 24
156.237.0.0/24 maxlen: 24
156.237.6.0/24 maxlen: 24
156.237.8.0/21 maxlen: 24
156.238.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85568 (0x14e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 09:30:43 2025 GMT
Not After : May 2 09:30:43 2025 GMT
Subject: CN=6808b347-3b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:78:36:6a:e4:20:9f:43:d0:66:50:24:8b:
8f:86:1b:68:9c:33:16:83:2f:48:7c:9b:0b:dc:b6:
5e:c8:b8:ff:29:d4:8f:d4:9a:80:fe:26:d6:58:a9:
79:24:e0:a9:7b:b9:64:01:b0:ec:cb:79:e1:73:71:
09:e8:53:e1:31:22:e7:9c:04:5e:32:b2:7e:a5:69:
64:19:f8:c0:38:98:87:3d:ba:d2:a9:b2:39:d9:bb:
eb:82:bb:26:1e:f4:12:c6:52:9c:91:4e:71:77:c3:
02:dc:86:d1:9b:3a:b9:3c:c7:53:a8:38:ab:df:b8:
61:76:be:f9:5c:9a:5b:00:f4:7a:2f:35:e4:aa:ef:
6a:bd:dd:31:88:0b:1c:cb:72:90:6c:e8:a1:e8:7d:
71:c1:8a:7e:04:72:6e:b7:cf:86:49:b1:89:95:f0:
74:6e:b7:7e:80:d6:20:fe:42:06:02:7c:55:22:9a:
25:b8:df:26:98:ba:79:d2:f2:ac:3a:f0:0d:5b:c0:
52:35:c5:57:3c:f0:96:0e:6a:31:6c:c6:26:6a:06:
f9:47:8b:06:40:3a:bc:52:d7:8e:44:bc:32:25:d7:
26:6c:0a:80:1e:c3:3a:f5:16:2e:ee:da:59:1e:ae:
7a:ff:96:f3:0b:69:68:aa:3b:e9:16:63:72:13:d7:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A1:DF:68:C4:81:AC:66:AF:42:20:33:A1:5A:F2:35:1A:AC:FA:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A30C46B4202511F0B28D8B8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.0.0/24
156.229.4.0/22
156.235.16.0/22
156.235.54.0/24
156.235.56.0/21
156.236.0.0/23
156.237.0.0/24
156.237.6.0/24
156.237.8.0/21
156.238.13.0/24
Signature Algorithm: sha256WithRSAEncryption
18:66:12:0d:00:68:1e:ae:6b:45:fc:01:5c:b1:25:fb:ef:69:
7e:09:81:4c:9e:9c:db:9b:1b:bb:f2:11:66:1b:4b:91:a4:5a:
b2:ae:22:af:20:4a:dd:09:01:3a:50:44:ec:ff:d4:b7:af:67:
7c:90:6e:fd:ac:76:45:b8:85:f1:be:c1:22:0e:ff:ab:75:af:
e3:96:c0:28:dc:f7:20:56:97:a7:08:84:3a:66:5e:c7:0f:91:
1e:32:f2:b5:3d:2d:33:94:19:de:40:e6:ce:c6:f1:12:16:ec:
db:ba:90:3b:29:7b:a2:ce:3d:fa:c9:4c:c6:fe:17:f1:7a:e9:
15:3b:ed:27:70:79:9f:15:0a:21:6c:c8:6a:25:8c:50:40:29:
37:95:ba:9a:0d:1d:6a:b1:4f:ed:1d:4f:8c:e4:5e:43:ec:54:
e0:51:60:6a:e6:61:e6:df:0a:3f:25:ca:72:92:52:fe:5f:00:
9f:fe:58:73:67:44:a9:1b:d0:4b:f6:8f:d9:8e:e9:dc:2c:08:
d6:89:b8:0f:5f:19:d7:45:74:65:56:53:87:c2:a6:92:d3:39:
6b:cf:14:26:60:1b:fc:51:04:78:d0:56:66:bb:3d:70:bd:4a:
ce:64:84:2c:46:3e:b8:01:19:fd:3a:98:13:b0:db:85:63:b3:
72:26:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:09 2025 by rpki-client on console.sobornost.net