Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC83F0CA1C8311F082F370B1DAE4EC9C.roa
File: AC83F0CA1C8311F082F370B1DAE4EC9C.roa (raw, json)
Hash identifier: dBpkOeoN8zm/bqLUxUybMWgL6I9vw+9+yzXkoIarUqs=
Subject key identifier: A1:C2:DD:44:92:A2:DE:FA:82:B9:5A:9E:CD:0C:F4:24:9F:5C:3A:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC83F0CA1C8311F082F370B1DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 18:33:51 +0000
ROA not before: Fri 18 Apr 2025 18:33:47 +0000
ROA not after: Tue 27 May 2025 18:33:47 +0000
asID: 48031
IP address blocks: 156.246.140.0/24 maxlen: 24
156.246.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85325 (0x14d4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 18:33:47 2025 GMT
Not After : May 27 18:33:47 2025 GMT
Subject: CN=68029b0f-93bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:78:45:ee:ca:44:a8:2e:e3:51:33:4e:6e:
82:e1:78:d4:29:44:61:ce:a5:81:51:48:f2:7a:a0:
1e:1a:27:14:99:75:04:8b:7e:e4:79:bc:44:9d:25:
93:d3:9a:41:36:0f:11:ac:c9:03:3d:ea:72:30:df:
81:54:4d:bf:35:ad:09:b3:aa:06:86:b1:c3:fc:63:
86:71:da:61:cb:8d:e2:b8:94:0f:8e:39:57:72:b0:
e6:77:d1:3c:98:b3:12:d1:3a:3e:65:80:ea:4b:78:
35:18:e4:d4:be:21:8a:e1:d7:15:ba:22:34:35:d8:
18:20:dc:76:66:be:2c:37:f0:37:99:7b:bd:fc:91:
cd:5e:b3:5a:71:2c:bb:f5:c3:d2:24:f0:13:cc:b1:
a5:51:1c:d5:7e:f6:20:6f:32:cc:d3:12:db:53:9c:
40:0f:71:67:f2:05:8f:a3:1b:fc:ad:5a:66:37:16:
fa:c6:fb:61:f9:6a:5e:51:24:05:e1:c5:f1:db:1d:
2f:a3:4f:19:f8:76:88:9d:b5:f9:74:80:28:10:4c:
08:4a:72:2a:c8:6a:bc:51:39:21:d1:67:e5:71:3f:
05:1e:e7:69:7a:4a:a9:5e:76:69:e5:eb:31:9e:0b:
ee:0c:cb:ac:cf:83:d8:a1:83:e1:69:d5:b4:79:cb:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:DD:44:92:A2:DE:FA:82:B9:5A:9E:CD:0C:F4:24:9F:5C:3A:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC83F0CA1C8311F082F370B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.140.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:aa:14:fd:e7:fc:43:09:26:24:20:d5:4c:ed:55:e9:dd:70:
ed:ca:71:c9:f5:66:ef:c5:aa:e1:dc:fc:e6:96:7e:5d:60:a1:
13:9d:71:cb:e6:f9:50:c4:82:77:35:a9:02:66:fb:59:ac:b7:
28:63:8a:ef:e4:34:14:64:ab:c9:c3:62:c3:b7:ed:80:d8:07:
ba:64:d3:77:1e:bc:c3:eb:c1:11:26:d0:2b:be:7e:36:88:36:
67:0c:34:c7:12:f1:c0:4e:f4:aa:da:da:cb:f4:e7:6c:da:c2:
ff:5f:b6:70:02:87:52:57:3d:20:ea:10:68:28:2c:c9:8c:e7:
85:fe:b4:c4:a7:60:fd:e1:92:29:96:44:0c:a3:d9:1b:de:20:
2c:a4:cf:55:f8:bb:49:03:59:12:f9:b0:41:37:fd:b8:0b:4e:
ec:14:2c:a7:3a:4b:04:ba:67:a7:a7:ea:0b:5b:a4:8b:67:4e:
e7:dd:cf:3c:c2:7c:9c:82:44:6f:cb:d4:bc:7d:0c:ec:27:eb:
60:4c:88:7a:72:11:0b:d1:cb:ae:c3:f0:39:62:57:eb:ac:f3:
1b:78:94:01:ad:4c:51:1d:5c:d5:11:52:06:68:a0:34:36:d2:
fb:23:29:d1:20:d8:b4:c9:60:1f:db:bc:f6:70:20:f1:80:4b:
9d:74:3e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:15 2025 by rpki-client on console.sobornost.net