Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2250432CD8711EFB0778D96762E951A.roa
File: C2250432CD8711EFB0778D96762E951A.roa (raw, json)
Hash identifier: mnuqA8BhpU1nr4cQJZjEdz/O/TgihTIJKGYRZI6VGE8=
Subject key identifier: A8:FB:C4:AB:75:4D:01:E8:54:48:50:AE:6E:75:46:A8:77:74:69:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010037
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2250432CD8711EFB0778D96762E951A.roa
Signing time: Wed 08 Jan 2025 06:14:03 +0000
ROA not before: Wed 08 Jan 2025 06:13:59 +0000
ROA not after: Mon 13 Dec 2027 06:13:59 +0000
asID: 17561
IP address blocks: 156.252.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65591 (0x10037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 8 06:13:59 2025 GMT
Not After : Dec 13 06:13:59 2027 GMT
Subject: CN=677e17ab-7adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:79:5b:da:9e:27:cc:4b:6b:41:f2:3a:af:
37:33:08:71:d6:a0:69:35:3f:d6:90:7c:6c:a5:af:
a3:68:b3:08:a3:5c:a0:1e:7c:4e:9c:d2:4f:e3:83:
eb:a9:08:7a:96:a0:7d:03:4b:4a:73:67:2a:62:2f:
9f:bb:c8:08:f8:b5:b2:da:0f:62:1f:9b:02:d1:ec:
c3:f8:5a:4d:54:d2:39:5a:4b:f4:79:c8:00:37:af:
52:c6:bf:34:d6:52:38:6d:52:2a:76:da:95:8d:62:
15:d7:50:bb:d9:6f:f9:43:db:64:47:89:2d:aa:37:
19:d1:05:ed:58:6c:fd:20:55:61:aa:65:95:3d:b2:
84:31:33:02:dd:4d:47:07:86:3a:ac:c2:7f:74:69:
87:a7:5c:c1:c0:6e:e0:e1:06:2e:79:f3:63:78:ac:
f8:5b:22:ae:a4:42:19:b6:ea:4b:06:5f:b9:6f:f7:
46:1f:bf:da:65:2f:90:98:fe:63:41:d4:14:67:34:
e6:dc:a9:67:30:b1:a2:3f:bf:87:da:fb:f5:70:dd:
fe:9a:ec:12:5a:1a:dc:af:19:ce:d5:57:6a:70:95:
2f:d2:3a:ea:7c:43:ff:3d:38:ad:51:72:cb:90:99:
3f:75:6c:d5:a8:4a:85:1b:cb:ed:c8:5f:af:89:ae:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FB:C4:AB:75:4D:01:E8:54:48:50:AE:6E:75:46:A8:77:74:69:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2250432CD8711EFB0778D96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.40.0/24
Signature Algorithm: sha256WithRSAEncryption
06:90:2e:89:70:b4:b9:d7:da:d8:8d:8a:be:59:cb:d2:f5:e7:
ff:16:fd:25:ee:53:2a:f4:8c:f6:49:1a:09:44:e9:f0:b7:5e:
83:a2:19:0d:78:93:d7:17:36:37:4c:c2:fe:5a:35:ef:63:cc:
0d:ea:ea:54:60:d5:82:c6:6b:cf:bf:e7:77:7e:33:f2:0b:3f:
00:bb:f0:fe:7d:a2:30:f7:b9:bb:13:50:a4:d5:c3:41:1f:b7:
5e:68:e5:55:b7:3a:8c:0d:09:e0:4a:6a:f3:77:48:1c:32:65:
db:f3:db:81:d0:29:1d:b8:30:95:38:4a:79:e8:05:f6:2a:03:
42:6e:ce:b2:39:5f:02:d9:2d:ec:ee:cd:df:82:f6:1b:05:9b:
f4:cb:61:f3:e6:29:66:0a:5e:b0:6b:92:be:ec:6e:48:85:4a:
a2:35:77:28:09:18:81:bc:11:f9:c6:cf:5d:f9:6b:cd:ad:a3:
ae:d8:b5:60:18:89:dd:1a:93:11:b7:4e:8b:bb:13:34:0e:bd:
37:d1:f1:45:24:ba:4e:59:f8:f1:5c:d1:5c:08:01:cd:97:e3:
88:fb:6d:cb:86:57:59:35:11:0f:f4:6d:0a:66:4f:5f:f6:bd:
8d:e0:c9:f1:a7:e7:24:c0:a5:41:af:ac:32:f1:2a:5d:0f:99:
0a:31:7a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:55:50 2025 by rpki-client on console.sobornost.net