Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2DEC5A81C7E11F0A00F0C92DAE4EC9C.roa
File: B2DEC5A81C7E11F0A00F0C92DAE4EC9C.roa (raw, json)
Hash identifier: kT6nmkK+ijMWv4h2qNDOku5ub6PWOJaj7pUSwj+edgo=
Subject key identifier: ED:4E:DF:7F:68:42:50:F7:A9:87:5D:2D:9F:F8:F4:04:FA:25:D6:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2DEC5A81C7E11F0A00F0C92DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 17:58:14 +0000
ROA not before: Fri 18 Apr 2025 17:58:10 +0000
ROA not after: Tue 27 May 2025 17:58:10 +0000
asID: 44559
IP address blocks: 156.246.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85315 (0x14d43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 17:58:10 2025 GMT
Not After : May 27 17:58:10 2025 GMT
Subject: CN=680292b6-9325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d9:c7:01:4f:0c:22:1d:bd:cd:73:a1:07:53:
70:d0:c3:7d:ed:71:46:32:94:97:06:a3:54:ad:ea:
63:7f:dd:2e:f2:29:c0:64:69:71:1f:e0:f1:49:f4:
d8:34:b5:9d:7f:00:cf:d8:8b:32:8f:48:f1:95:e1:
00:5d:2b:1b:af:9d:28:2d:e2:5c:a4:a9:90:81:01:
3f:b5:ce:cb:e9:8d:2e:60:35:3a:f7:18:a4:72:60:
85:4c:a5:6e:16:91:7d:9d:b3:d4:11:02:65:4b:2e:
0d:04:ba:6f:5c:91:a0:0e:f8:d2:d3:d5:70:97:c9:
16:46:ee:3d:59:67:9b:32:7d:71:53:d5:a9:15:61:
70:06:2e:d8:d6:7c:82:31:ed:09:78:0e:6d:8d:a9:
2b:d2:47:ef:36:8c:d6:1b:13:62:c6:cf:14:ee:2a:
e7:78:83:2d:21:3c:3f:fd:91:ab:16:c0:3c:f6:df:
00:6e:f2:9e:7c:a0:70:ad:7f:1b:4f:57:09:93:ec:
84:ab:51:d1:51:f4:8d:76:b4:57:2d:41:86:0e:72:
6b:05:42:b1:92:a3:40:34:56:75:fe:49:9d:50:4c:
97:e2:68:3c:1c:ac:04:fb:27:cc:20:56:0b:0c:4c:
71:d4:c7:d2:59:a9:cd:10:44:5e:2c:3d:8c:7b:5d:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:DF:7F:68:42:50:F7:A9:87:5D:2D:9F:F8:F4:04:FA:25:D6:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2DEC5A81C7E11F0A00F0C92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.252.0/24
Signature Algorithm: sha256WithRSAEncryption
92:74:4b:35:7a:d5:cb:8c:95:6f:f4:54:38:12:ae:3e:18:ca:
e2:d8:a0:99:50:cb:a3:d2:ca:ce:b3:0b:af:61:a9:ee:91:7c:
f1:d0:a7:18:e2:9f:d3:5f:4e:cb:62:b3:c2:83:32:73:a5:76:
6d:57:4a:09:8e:14:42:9b:82:e2:8f:44:89:2e:7d:ca:7d:63:
fa:a2:70:58:ad:ab:fd:de:da:9f:9d:9b:7f:d8:35:8d:a3:eb:
17:0c:e1:cd:18:20:06:1d:fd:90:ec:fb:78:1c:44:be:d9:d3:
11:4e:ac:4c:63:62:d0:da:a1:8a:9b:7a:01:e6:8f:3e:fb:6e:
bd:02:a0:ce:e8:77:ee:40:84:1f:a1:08:ca:16:7b:20:65:35:
3b:ca:ae:89:c8:4b:6b:6e:e7:c7:cd:60:38:12:f8:23:f6:46:
07:c5:37:b6:02:4b:41:26:4c:83:2e:a9:6a:08:5f:a3:c5:a6:
b2:86:40:eb:30:d0:ba:fd:db:d8:c2:69:aa:4b:6a:e2:b4:31:
b1:a7:c7:4d:f3:4a:e8:da:6f:83:3e:c4:9b:60:9d:65:9c:d3:
39:65:4d:33:f4:22:94:c8:18:13:59:8a:98:17:89:16:be:fe:
5c:c7:2b:77:e9:d6:05:a5:90:65:ca:3a:a5:a3:0e:83:62:a0:
9e:cc:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:48 2025 by rpki-client on console.sobornost.net