Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2B62960201D11F0A807C2D3DAE4EC9C.roa
File: C2B62960201D11F0A807C2D3DAE4EC9C.roa (raw, json)
Hash identifier: 946Gt/Rb/wZFvRvFtyLTSaQh2kFQghpHUx1RQYh1kDA=
Subject key identifier: 82:BB:74:73:25:D8:19:2B:03:CA:95:75:9A:CB:BC:58:28:3A:54:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E34
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2B62960201D11F0A807C2D3DAE4EC9C.roa
Signing time: Wed 23 Apr 2025 08:34:24 +0000
ROA not before: Wed 23 Apr 2025 08:34:20 +0000
ROA not after: Tue 03 Jun 2025 08:34:20 +0000
asID: 203020
IP address blocks: 156.252.224.0/22 maxlen: 24
156.252.228.0/22 maxlen: 24
156.252.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85556 (0x14e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 08:34:20 2025 GMT
Not After : Jun 3 08:34:20 2025 GMT
Subject: CN=6808a610-e4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:9c:ed:48:56:4d:58:48:65:17:6e:13:e0:
fd:7f:ac:14:6b:58:23:0a:5b:23:f5:b0:26:85:5c:
e4:57:fe:b6:19:26:cf:68:b2:ba:2d:d8:30:08:2a:
6d:c2:b0:ea:50:5c:d1:fa:63:d0:e4:ff:b4:58:f5:
56:4c:cd:a7:e4:4c:88:47:95:21:01:77:08:50:d8:
9a:4d:62:f6:ea:32:0f:90:d3:c2:2a:00:ef:43:4f:
e1:6c:69:63:66:c4:72:0d:e8:ba:ec:c6:ed:1a:b5:
f5:8c:c9:85:24:1a:08:27:f9:a2:ac:00:15:52:7a:
23:22:ff:4d:d7:80:0c:68:c4:a5:09:6e:24:7f:04:
0b:63:85:f8:a1:9c:f0:5b:6c:b3:36:81:8c:f9:af:
d1:d4:de:42:b1:e2:ed:1e:84:91:cd:f5:48:c8:54:
6e:d2:2d:45:9a:1a:bf:96:da:c2:84:ab:00:ce:aa:
8d:07:cb:2d:70:56:99:de:d2:1b:5e:d3:2b:17:b8:
2d:44:06:1c:3a:94:d5:92:85:37:a4:e9:1f:bb:bd:
5a:54:a9:ec:7d:e3:19:c3:77:5d:b7:3c:f3:30:4b:
42:53:23:b9:03:f0:aa:e4:4c:15:e4:30:42:0e:0a:
30:2d:16:aa:59:cc:2f:41:dc:98:46:9d:49:cb:15:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BB:74:73:25:D8:19:2B:03:CA:95:75:9A:CB:BC:58:28:3A:54:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2B62960201D11F0A807C2D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:c0:75:0c:02:a4:b6:c2:cd:e8:a8:5b:53:13:43:7f:72:da:
d1:d8:60:ea:bc:5c:6d:3a:b0:5d:36:46:e0:e7:01:e1:e6:68:
15:df:4b:5e:9a:e3:bf:d3:71:ec:b3:9d:63:11:95:ba:29:36:
31:38:47:80:a4:9e:84:29:57:d3:84:69:b7:46:2a:3f:18:52:
60:54:91:38:90:14:8a:ff:16:a6:f9:25:50:bd:8b:84:71:14:
b8:66:83:f7:e1:7a:81:d8:5e:a6:18:48:51:78:ab:e5:a3:a8:
3f:8f:f6:be:4c:01:1f:fc:58:fe:65:5d:ed:6e:60:1b:8c:c2:
1d:75:e6:82:20:a8:3d:05:d5:bf:68:43:b1:c4:4d:48:00:43:
79:0e:66:99:18:dc:c3:2b:6b:03:88:97:4a:d6:de:c4:3a:7b:
f2:82:2f:f9:99:34:9c:a0:75:bb:9b:14:40:f8:76:82:14:6d:
59:89:48:54:84:73:ec:f8:9d:86:ee:c8:a1:97:19:ac:8a:cd:
c2:9a:2b:4e:30:0d:5c:3d:17:61:e0:48:98:0a:37:e5:ca:8b:
89:4c:5e:c3:29:a6:09:55:62:b2:b6:28:f3:6c:a8:d1:c0:6f:
d4:5f:9d:57:c0:7f:0a:0f:ac:f4:5a:a5:ac:d7:d4:b8:75:ea:
4e:38:f3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:15 2025 by rpki-client on console.sobornost.net