Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B623E8E613BA11F080E44D77762E951A.roa
File: B623E8E613BA11F080E44D77762E951A.roa (raw, json)
Hash identifier: nMpnFl/MzsXIWdbNsqkV/ni005Bhjz3HolGcHsj20+A=
Subject key identifier: 18:D1:D3:65:5B:12:07:85:3C:37:40:22:C2:5B:CC:F7:C7:87:E9:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B623E8E613BA11F080E44D77762E951A.roa
Signing time: Mon 07 Apr 2025 14:15:09 +0000
ROA not before: Mon 07 Apr 2025 14:15:05 +0000
ROA not after: Sun 04 May 2025 14:15:05 +0000
asID: 213448
IP address blocks: 156.228.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84594 (0x14a72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 14:15:05 2025 GMT
Not After : May 4 14:15:05 2025 GMT
Subject: CN=67f3dded-0b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:4a:64:f1:5f:f6:86:a2:21:9c:42:21:ff:
33:c4:55:19:cf:64:77:77:47:02:97:f8:f7:3c:30:
a4:e4:e7:c2:88:87:de:ee:12:60:37:ea:0f:a8:d5:
37:0a:0b:69:44:4b:e6:45:e9:f5:20:09:bc:49:54:
02:5e:90:f9:cd:ff:92:e0:b6:12:67:a5:40:dd:87:
35:62:91:82:19:d9:d7:ab:5e:ba:b0:a7:20:f8:8a:
76:97:48:af:7e:00:97:b4:7f:7c:63:5d:55:fe:0c:
4e:c1:4f:8b:99:c5:77:a2:52:5f:ad:0f:f8:21:40:
0c:e2:6e:70:a0:03:cf:1a:5b:45:27:4d:32:76:33:
1f:71:54:4c:2e:42:42:cc:1a:6b:8e:e3:19:eb:d1:
b1:7d:0e:80:7c:0e:48:c9:35:84:40:86:16:ab:df:
e8:8d:65:ea:01:e4:1c:c5:94:d1:6a:09:30:2c:b1:
ee:26:8f:2a:ee:00:cc:f9:93:2f:24:75:1a:73:92:
ca:67:f5:6d:10:28:57:f2:f7:5b:2b:ec:fb:60:24:
52:7d:4d:95:60:02:ff:3c:ef:15:3c:6c:ff:f4:7f:
9e:d3:af:4a:05:e8:29:c1:40:2b:af:56:21:67:4d:
22:4e:1d:b8:70:b8:e4:b7:d3:20:cc:0c:6b:7d:db:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D1:D3:65:5B:12:07:85:3C:37:40:22:C2:5B:CC:F7:C7:87:E9:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B623E8E613BA11F080E44D77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.233.0/24
Signature Algorithm: sha256WithRSAEncryption
84:27:d7:71:cd:2c:31:f7:d7:d6:7f:b0:7e:28:9b:ad:78:f2:
76:06:ed:2e:8a:06:73:c7:64:ee:92:e8:3d:c1:1f:9a:ab:c8:
88:71:95:0a:79:2a:51:d6:9b:35:fe:e1:5c:3c:51:96:92:67:
b8:0e:ec:31:cc:1e:39:b0:d1:b7:eb:41:a4:92:0d:92:12:a6:
c8:95:7a:75:a1:ae:59:e8:c0:d9:12:82:df:bf:89:3a:ab:b9:
64:0b:8c:eb:db:43:f7:5c:af:75:c5:76:1d:76:8e:ae:ec:2d:
49:61:d9:8e:2a:42:18:31:42:1e:87:f6:e6:3f:af:27:1a:5f:
74:61:ec:88:e1:83:be:82:1b:3e:39:c0:fa:72:3b:64:6d:50:
5f:6a:56:5d:96:97:fa:ec:07:92:81:74:88:89:8b:01:cc:a8:
e3:eb:76:81:0c:3c:8d:10:fc:12:f4:ce:da:19:86:45:3f:1a:
6d:c8:72:eb:a9:4e:9f:b9:17:fc:1c:ae:20:f9:a3:b1:8e:bd:
f8:a5:9d:99:45:c1:d9:d0:9f:b4:2c:ca:33:78:90:a8:35:f9:
fa:09:9d:29:65:82:f8:e7:e4:3e:0f:ba:82:7f:b4:5a:c1:d9:
6a:1d:29:72:1a:c3:64:3e:fd:cb:c4:86:73:cf:5b:2d:a8:7a:
53:02:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:55:43 2025 by rpki-client on console.sobornost.net