Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5DDA422190E11F08BEC29C56DB8BCC6.roa
File: B5DDA422190E11F08BEC29C56DB8BCC6.roa (raw, json)
Hash identifier: jiHhgWqD1BKNP64Rb+BIrlUzO9tYMRsq4qeWeB2E8z4=
Subject key identifier: 72:68:16:57:E4:AA:03:BD:DC:85:FE:0E:B1:0D:7A:E8:96:1E:34:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5DDA422190E11F08BEC29C56DB8BCC6.roa
Signing time: Mon 14 Apr 2025 08:59:02 +0000
ROA not before: Mon 14 Apr 2025 08:58:58 +0000
ROA not after: Wed 21 May 2025 08:58:58 +0000
asID: 14315
IP address blocks: 156.224.64.0/22 maxlen: 24
156.224.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85026 (0x14c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 14 08:58:58 2025 GMT
Not After : May 21 08:58:58 2025 GMT
Subject: CN=67fcce56-90f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:91:8e:00:f1:20:43:1d:be:1e:a7:4c:33:
3c:43:d8:a4:45:44:65:e4:c4:65:52:fe:4d:9c:f4:
b8:dd:fc:86:5e:3e:7c:de:e8:e3:10:ec:72:fd:32:
be:a8:db:d3:ee:f3:af:46:dd:49:1f:53:48:b1:fd:
39:73:fd:b7:29:1d:71:bc:65:9c:6d:8e:95:26:07:
ea:b4:b6:31:ab:54:fc:0a:6b:b1:5a:f1:c7:9b:47:
73:43:09:03:b8:bb:49:5f:de:7b:2d:a7:50:ba:45:
f4:9d:2b:7f:e2:d9:1f:63:49:26:22:79:f7:e5:64:
d2:67:5d:19:aa:18:0d:96:f1:9f:8c:dd:af:c1:dc:
17:04:24:cb:d4:a2:ae:06:61:09:90:b7:95:23:3a:
bb:d5:e5:72:c5:db:e5:0c:95:63:c8:ee:80:9f:f9:
b5:21:34:bc:95:53:c2:7a:b8:59:fd:76:5e:14:5c:
51:92:8a:59:e3:7c:75:52:4a:ac:f5:35:5c:6b:85:
9a:da:93:cd:ed:f7:b9:60:0a:3e:42:13:3f:bc:23:
8d:77:32:b8:fa:c3:06:1e:95:b9:16:ed:ba:4b:f2:
d8:12:0b:df:1a:0d:d6:63:eb:35:5c:72:0f:05:67:
95:16:0d:58:73:6b:d2:8b:57:75:70:17:da:cd:34:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:16:57:E4:AA:03:BD:DC:85:FE:0E:B1:0D:7A:E8:96:1E:34:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5DDA422190E11F08BEC29C56DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.64.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:9f:11:e7:5c:02:48:34:f9:01:5f:73:78:1e:9f:f7:af:b8:
b3:19:37:c5:35:41:ff:0e:9d:36:aa:aa:97:1f:2e:13:54:e2:
8e:45:d0:d4:43:c6:e1:39:63:46:06:38:ef:ea:c8:ed:1e:44:
39:12:18:a4:e6:e1:b3:87:de:00:2a:70:b2:30:09:be:e4:4e:
fb:02:a7:bb:62:2c:33:bc:b2:23:34:72:84:ea:e0:1c:03:ed:
a6:ef:ab:47:c2:1c:25:46:b5:c1:4f:08:51:69:f9:d1:63:99:
2f:64:9b:78:50:3b:5c:20:99:95:9a:fc:44:d3:1a:6f:ff:02:
c2:51:97:98:a0:7c:ee:a8:2d:1e:eb:5c:0e:d7:c0:1b:90:93:
14:d6:6d:05:fa:02:a5:f9:0a:e6:b7:06:a4:cf:c1:ce:e0:9f:
09:db:ad:15:8c:af:48:56:b1:46:c6:c0:d2:41:7d:f0:3c:26:
a0:5a:80:36:35:93:27:fa:d5:a2:f7:3b:25:34:a9:42:7c:3a:
9b:47:5c:4a:5e:c7:ac:5b:3b:b7:e3:8b:06:c7:df:c3:37:52:
51:71:85:18:63:d2:50:92:a4:dd:4e:84:28:15:b1:f8:47:42:
53:aa:bb:08:67:a8:6a:ef:c6:fc:60:1b:61:c2:4f:d5:f2:5a:
87:9d:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:06 2025 by rpki-client on console.sobornost.net