Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A71F3930211211F08089F8B5DAE4EC9C.roa
File: A71F3930211211F08089F8B5DAE4EC9C.roa (raw, json)
Hash identifier: VRLQRT7tQB5jsyV1UZ9LXrHyhi7dDWX/eGzeNJZbb80=
Subject key identifier: CE:29:A3:B7:6B:6B:BC:E4:CB:B6:F0:29:D1:A7:5E:AC:0F:71:BA:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A71F3930211211F08089F8B5DAE4EC9C.roa
Signing time: Thu 24 Apr 2025 13:47:25 +0000
ROA not before: Thu 24 Apr 2025 13:47:20 +0000
ROA not after: Fri 30 May 2025 13:47:20 +0000
asID: 62468
IP address blocks: 156.245.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85628 (0x14e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 13:47:20 2025 GMT
Not After : May 30 13:47:20 2025 GMT
Subject: CN=680a40ed-965b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:a3:4c:a9:3d:5e:16:36:4d:d2:78:5c:f2:
eb:b8:00:1d:01:fb:35:59:60:86:91:73:ff:b7:6c:
3e:07:4d:c7:18:1f:ae:ba:b3:f2:ff:6c:06:31:27:
bb:a6:6a:f7:82:27:b1:ee:40:6f:c6:95:c0:39:11:
0f:16:d3:a5:f8:0c:04:b4:9b:89:d4:e6:26:e4:e8:
f8:c0:d4:9b:84:ba:17:00:0d:f7:ac:dd:d9:d6:79:
cb:6f:8a:a5:ba:6a:e8:3e:b7:a0:e1:66:dc:9b:e5:
ad:88:62:31:1c:fd:11:50:20:51:df:88:ae:28:72:
9c:d7:85:32:c2:55:39:cd:b8:b4:0e:23:69:db:bf:
0a:8d:6b:96:e8:38:2c:3a:12:a2:a7:97:b8:1c:fc:
82:8e:df:58:d2:fa:1e:14:fc:86:d6:6e:40:5e:86:
f0:ae:7c:0f:e1:82:8c:e7:06:88:38:fd:0f:c9:7d:
25:7b:0d:08:33:05:42:ef:77:99:52:2a:15:8d:e8:
6c:43:d6:a1:82:b7:4b:02:fb:6c:71:bf:09:2e:96:
7d:a9:87:75:c3:aa:94:66:06:f3:79:59:13:14:54:
2b:5e:28:35:f2:92:4f:9a:49:f8:78:f6:f7:f6:7a:
1f:4a:b7:85:fe:e8:b7:83:5d:98:19:25:64:73:c0:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:A3:B7:6B:6B:BC:E4:CB:B6:F0:29:D1:A7:5E:AC:0F:71:BA:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A71F3930211211F08089F8B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
04:9f:ac:ed:68:63:49:e3:f4:8b:69:13:fc:9a:1f:68:26:32:
c5:ed:41:7e:4c:a6:1c:0a:c7:db:35:6b:3c:15:c1:44:27:04:
bf:94:1d:55:de:2f:61:d4:63:b4:32:95:ff:5a:58:32:f6:4e:
69:08:22:f9:64:a7:23:f5:83:49:f5:7f:d7:ed:7e:05:bc:e6:
29:13:83:96:7e:f2:e8:1b:90:67:9e:e6:a8:be:6b:c3:f7:14:
9e:21:0a:7b:50:97:7f:65:93:5d:1b:1f:21:02:fa:8c:45:29:
5a:08:80:d2:98:fd:a3:a0:3a:80:31:e5:9a:48:a9:b9:87:a5:
88:f1:8d:29:25:ba:4b:d3:22:5d:8a:1e:af:b4:25:ab:32:ac:
83:f8:03:b6:f1:b4:83:3a:84:bf:b1:c4:c1:2b:89:34:63:d8:
58:80:ca:2e:f0:91:3a:5b:75:79:eb:58:b0:00:3b:ba:20:1f:
e3:9e:c4:c1:29:81:b9:c4:60:fa:b5:c2:ce:42:f7:07:09:63:
32:c4:b6:49:2b:c6:6a:37:c5:09:42:12:c9:ed:35:92:e5:a7:
96:dc:c8:83:5b:e8:22:6a:07:4d:7a:6e:bc:08:3f:47:2e:72:
82:e6:e3:f7:3b:16:47:f3:ee:12:5f:cb:46:5a:c7:9c:e1:ee:
da:6d:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:12 2025 by rpki-client on console.sobornost.net