Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4E2D88817A411F09A835FCD6DB8BCC6.roa
File: A4E2D88817A411F09A835FCD6DB8BCC6.roa (raw, json)
Hash identifier: EBcFG/cTxx6smIcSlcdGE22+WzhfTNv7vT6uNkRb/Zw=
Subject key identifier: FF:C2:FC:12:9B:A9:27:B1:61:BC:9D:9F:C0:5A:05:CC:49:DB:53:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4E2D88817A411F09A835FCD6DB8BCC6.roa
Signing time: Sat 12 Apr 2025 13:47:16 +0000
ROA not before: Sat 12 Apr 2025 13:47:11 +0000
ROA not after: Tue 20 May 2025 13:47:11 +0000
asID: 42689
IP address blocks: 156.251.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84952 (0x14bd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 13:47:11 2025 GMT
Not After : May 20 13:47:11 2025 GMT
Subject: CN=67fa6ee4-82ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:5e:7c:f9:84:a8:08:0c:d3:53:9c:80:6f:
27:fa:ba:e1:6e:c2:0a:b7:4c:c6:7a:e2:fa:80:15:
a9:9d:ce:69:a3:55:0c:7f:e6:66:27:63:4e:8d:91:
67:1c:1f:ae:6e:09:5d:8b:f9:53:76:bf:65:44:63:
e3:4b:42:92:3d:cb:0c:2c:ae:37:50:bb:e3:95:98:
48:8e:fb:2b:e8:c4:18:a2:56:64:cd:05:b7:f6:3a:
16:f2:56:41:9d:ed:7c:49:30:3d:00:92:1d:9c:73:
77:ba:05:6d:56:6f:fc:cb:80:60:a3:a8:a1:b7:10:
61:4b:bf:bc:b6:d6:45:d8:f5:89:82:5b:14:95:28:
9d:1b:ef:cd:8b:60:34:9e:96:96:d6:31:11:e1:3d:
c8:cc:15:a6:c9:b9:ec:99:85:ae:a8:b9:ac:06:14:
83:a2:72:30:eb:54:87:cc:ec:48:60:6c:bf:0b:5e:
3f:c5:c2:44:81:43:48:bf:64:fb:2a:a3:0f:d8:fd:
ef:d0:37:b7:08:d8:0f:ac:bc:44:31:63:1a:93:ec:
f3:28:1d:77:d1:86:95:08:8e:ef:a7:13:40:36:65:
24:a6:6a:d6:9a:85:38:32:b7:2b:85:e4:35:bd:94:
de:a2:7c:16:be:41:0e:8d:68:41:db:18:79:a4:72:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C2:FC:12:9B:A9:27:B1:61:BC:9D:9F:C0:5A:05:CC:49:DB:53:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4E2D88817A411F09A835FCD6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.80.0/20
Signature Algorithm: sha256WithRSAEncryption
31:f4:57:08:b5:60:9f:9e:77:ba:e1:69:84:83:72:81:bf:77:
57:e8:8c:e9:11:41:6d:3f:aa:54:35:4b:f8:8a:b4:3e:d2:88:
e4:e0:a3:c3:cd:c7:e7:36:37:46:24:65:8b:b5:f4:80:bb:1c:
e4:76:35:e0:e3:ca:16:5a:4b:49:39:f2:43:13:4b:75:40:c7:
74:24:a7:c6:01:a5:3a:69:b4:96:57:81:d1:07:21:79:2c:ac:
24:98:f3:f2:76:16:0b:68:a8:0f:86:49:3c:52:75:57:f7:b3:
09:b7:49:c1:1f:e4:9a:86:0c:70:51:c4:0a:6e:19:41:8c:c5:
26:71:79:75:b8:79:e8:4b:b8:e5:57:d2:62:84:ef:7a:a7:67:
da:4d:5d:0b:37:46:41:9e:7a:05:bf:34:ba:e2:5a:ec:82:57:
48:e0:12:a3:00:83:ee:f3:6f:62:37:4b:44:77:b4:ca:9c:86:
fb:25:60:1c:de:81:33:bf:4f:50:a8:eb:78:57:4a:f3:46:69:
b6:a7:b8:2b:0d:58:3b:37:09:3d:d9:29:07:b0:55:02:60:f0:
88:ac:11:54:b1:1a:cf:fb:a6:50:e1:3b:45:29:49:37:67:4a:
62:5b:2a:ce:00:ec:cd:6d:72:90:e3:54:35:d9:e7:23:dc:0b:
69:6e:aa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:54 2025 by rpki-client on console.sobornost.net