Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7B5D252CD0911EF87BFEB65762E951A.roa
File: B7B5D252CD0911EF87BFEB65762E951A.roa (raw, json)
Hash identifier: 73izGjlnUOBeX53dF8pBB9cqOyj6F+XXBCqEkspBS34=
Subject key identifier: 10:92:53:1D:AE:CD:88:AC:A3:43:8B:0D:84:65:92:BC:A2:4A:CF:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7B5D252CD0911EF87BFEB65762E951A.roa
Signing time: Tue 07 Jan 2025 15:11:49 +0000
ROA not before: Tue 07 Jan 2025 15:11:45 +0000
ROA not after: Mon 13 Dec 2027 15:11:45 +0000
asID: 17561
IP address blocks: 156.239.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64695 (0xfcb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 15:11:45 2025 GMT
Not After : Dec 13 15:11:45 2027 GMT
Subject: CN=677d4435-dfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:00:0c:1c:03:ad:9d:fe:ac:68:30:df:22:
42:f6:52:60:66:2f:8a:99:db:c5:5b:37:8b:b0:85:
8b:2a:7e:69:76:8d:e0:27:7e:84:33:ce:1d:f3:20:
e3:01:68:65:27:f2:5e:74:99:c5:4d:4a:d1:55:bf:
da:a2:69:2c:43:28:09:a3:8f:98:12:f0:36:c2:79:
23:48:72:f6:78:14:58:7d:07:40:77:6c:fb:05:76:
0f:3d:7c:db:d3:22:8f:96:5b:5c:27:c3:a2:b9:3c:
68:42:90:30:57:ef:c7:32:5f:1f:7c:61:e2:ef:a2:
16:3c:a4:f4:f6:7c:4d:98:77:5e:e4:0b:7a:a4:2d:
c8:62:d7:ef:fe:62:95:82:ec:a1:07:ba:21:cb:89:
92:74:55:3e:45:cf:56:ae:4b:42:5b:26:cb:2f:81:
e5:c2:c7:90:8c:fc:81:ba:2f:47:84:42:58:09:f5:
6e:fc:e6:19:75:d4:35:33:c0:1e:f0:6f:69:8c:ff:
96:ce:dd:06:cd:89:c0:89:3b:1d:98:2b:4e:66:3c:
22:87:b1:7d:60:78:56:8b:0d:e4:9d:e6:71:aa:c4:
27:b9:cc:95:d0:72:93:b0:59:f9:e2:70:31:78:6f:
90:6d:55:13:a9:b9:11:9c:ee:36:0e:8f:d6:12:43:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:92:53:1D:AE:CD:88:AC:A3:43:8B:0D:84:65:92:BC:A2:4A:CF:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7B5D252CD0911EF87BFEB65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.45.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1f:8e:15:0d:18:eb:69:b1:09:0f:82:be:21:45:d4:8d:d1:
1c:bb:16:a2:51:ee:5f:96:55:ac:be:f6:ef:01:55:d9:58:7d:
04:e0:0a:d5:f0:27:85:89:88:4f:2b:49:f8:79:b7:6b:2c:fb:
80:f5:7d:7b:ad:d2:17:6a:61:a3:2f:ab:2e:d8:dc:49:d5:f4:
d6:67:0e:a0:2f:ca:fb:3f:a6:ab:0b:16:cb:25:3e:3e:2e:3d:
bb:9e:4d:a4:c1:80:a2:8b:6a:4a:68:29:a7:e4:ea:f4:16:06:
80:a8:06:3f:e6:29:e6:75:90:7b:bc:46:ab:9e:37:d3:bf:00:
a3:2d:18:36:04:4f:9f:f7:52:0e:7c:d5:32:3d:4f:85:ef:bf:
22:68:f8:fe:6b:1b:6f:3e:78:5a:2d:34:e4:95:69:62:49:2a:
18:60:0d:45:e5:69:a3:7d:d6:ca:6e:f0:ca:92:4b:29:bb:37:
da:79:f6:43:5b:bf:3d:01:0a:64:0e:67:22:2c:d6:27:a1:17:
b1:f9:6b:56:ff:4c:28:84:71:76:09:5a:de:04:1d:cf:c6:c3:
69:bd:ff:89:8d:92:30:e6:11:81:0c:e7:42:36:2e:f2:b3:c8:
25:a8:f7:87:0d:38:aa:84:75:af:ff:26:41:9c:eb:1c:2e:7a:
e2:b6:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:30:57 2025 by rpki-client on console.sobornost.net