Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCC072B0CD4611EFBFB34966762E951A.roa
File: BCC072B0CD4611EFBFB34966762E951A.roa (raw, json)
Hash identifier: a56V0Xu6Mkqp2NZOVZXwdIl9Zb/ewpMLEzrOlWAmxu4=
Subject key identifier: 7E:76:AC:6B:B4:E0:2B:35:B2:C1:C8:9E:4B:E4:A3:B6:B4:39:62:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCC072B0CD4611EFBFB34966762E951A.roa
Signing time: Tue 07 Jan 2025 22:28:37 +0000
ROA not before: Tue 07 Jan 2025 22:28:33 +0000
ROA not after: Sat 13 Dec 2025 22:28:33 +0000
asID: 984
IP address blocks: 156.243.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65181 (0xfe9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 22:28:33 2025 GMT
Not After : Dec 13 22:28:33 2025 GMT
Subject: CN=677daa95-41ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:fd:88:3a:94:d6:58:3b:6c:61:20:c2:35:
85:14:08:97:12:8d:a9:5e:a1:86:48:ad:2c:9c:5d:
1a:52:47:a7:44:1e:c1:01:a6:c3:91:86:c2:8d:ff:
c5:fa:c8:ad:44:78:c5:ac:e9:47:ed:6e:d5:7f:0a:
ef:86:06:a8:a6:fb:cd:49:83:51:aa:c0:3b:2a:c9:
e5:3c:d4:68:f7:81:82:84:5c:81:8a:b5:fb:cb:10:
65:01:91:11:02:4a:72:3f:2b:a9:d4:e1:1e:4d:f3:
65:df:b7:58:54:a9:bc:30:15:51:a6:05:d9:2d:0c:
dd:97:bc:f0:e6:49:1a:71:32:1a:5a:44:69:a9:97:
31:1f:ef:d3:c3:aa:bd:9d:b5:04:e9:e1:16:f0:5c:
e2:69:5d:93:44:db:3b:e0:72:4d:21:8c:cc:3c:58:
c4:5b:e8:18:c4:11:36:8a:1d:1d:3e:03:4c:0f:d6:
3a:94:37:b4:d6:cb:81:0c:0b:88:64:b9:04:b8:59:
b5:9d:6c:f3:57:77:80:30:08:8e:8f:8e:c0:43:df:
ed:84:0e:0f:86:2c:a9:aa:cf:e4:f0:30:52:14:01:
26:a0:06:9d:df:92:92:b1:e1:55:fc:32:66:9e:32:
75:73:c8:be:f7:51:85:54:d8:75:8f:5e:ff:c4:a0:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:76:AC:6B:B4:E0:2B:35:B2:C1:C8:9E:4B:E4:A3:B6:B4:39:62:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCC072B0CD4611EFBFB34966762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:22:45:ad:dc:d3:3d:11:13:78:fe:26:af:df:fe:00:cb:76:
38:4a:48:63:47:2f:a0:d6:86:8a:79:b0:e4:ff:40:1b:6f:82:
67:6a:22:6c:3a:c6:a2:4f:47:4d:0a:e6:a8:f4:1f:2a:d3:0c:
dc:44:42:e3:b1:15:49:3e:fc:d1:6f:af:19:f5:1f:9d:03:cd:
9d:f4:4b:a8:c0:c6:f1:38:ab:46:ac:cf:6c:cf:25:37:c7:74:
a8:a6:f0:a0:4c:64:a3:92:d1:8b:ba:04:9e:06:5b:3d:8c:ff:
5c:ba:72:69:a1:31:fb:9e:5c:50:3e:b1:98:1c:82:92:56:a7:
a0:e2:7a:9c:95:6a:ab:ae:e5:49:c7:6d:fb:c5:f8:0d:fa:65:
b3:51:72:c7:4b:9b:8c:ff:9b:01:7b:f7:d0:18:e4:27:08:e6:
53:01:55:13:4c:57:3d:a6:54:16:b7:83:02:f2:13:9a:e2:94:
e1:0d:e2:23:63:71:9c:cf:95:17:04:21:13:49:c2:c4:33:d2:
db:70:dc:c7:1b:ce:49:1d:0a:f1:fd:f6:2f:0c:91:80:da:db:
dd:ed:e7:e8:27:cd:e7:2d:d7:ee:d4:02:d3:00:60:0d:94:fc:
df:4b:a5:f7:e5:36:a0:62:ef:0e:29:d4:c1:26:7a:b4:f8:ee:
1f:ea:9f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:59 2025 by rpki-client on console.sobornost.net