Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6845D1C144E11F0BFD500096EB8BCC6.roa
File: C6845D1C144E11F0BFD500096EB8BCC6.roa (raw, json)
Hash identifier: NVX9pc9JX4laKjvtFw7KlPK0CWua+XLTnU3LK8oAGl0=
Subject key identifier: EF:EC:AF:0F:08:F2:2E:8B:8B:F2:34:9C:38:61:32:C9:DC:E6:9F:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014AE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6845D1C144E11F0BFD500096EB8BCC6.roa
Signing time: Tue 08 Apr 2025 07:55:02 +0000
ROA not before: Tue 08 Apr 2025 07:54:58 +0000
ROA not after: Sun 11 May 2025 07:54:58 +0000
asID: 57043
IP address blocks: 156.229.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84712 (0x14ae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 8 07:54:58 2025 GMT
Not After : May 11 07:54:58 2025 GMT
Subject: CN=67f4d656-1af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:19:0c:5b:3f:f5:49:b5:d3:19:f1:65:35:
e0:6a:07:0b:24:26:db:67:8b:5e:1e:12:a1:65:37:
4b:73:7f:7f:1c:74:16:87:ed:ea:9b:5c:a6:46:9e:
16:ef:86:86:d3:97:ec:71:5e:46:cf:a8:75:4f:39:
72:1a:34:12:25:46:a1:16:0c:5d:c7:75:6e:ff:04:
ce:58:69:0b:db:7b:7a:f2:01:1c:d0:93:b7:e3:43:
dd:fc:d6:0f:2c:06:72:fc:9f:07:11:71:f7:2a:a0:
5d:24:ca:c8:a0:70:e0:e3:36:71:30:bc:48:54:67:
60:e1:46:36:34:1c:46:21:30:3a:72:34:f3:0b:fa:
3a:60:47:f4:13:41:9e:ef:83:e0:20:96:16:3a:67:
33:63:69:0e:99:b4:9c:95:81:56:08:7c:6d:c6:eb:
72:88:32:31:0b:e5:4d:46:86:94:90:dd:bb:00:7a:
9b:8d:cb:cb:3c:06:7e:f2:97:7a:38:9d:80:79:33:
4f:74:7f:e2:0b:fb:2b:28:bf:6b:1a:c4:af:77:17:
ae:2d:8a:0e:86:50:3b:87:29:0d:18:fb:50:f4:56:
a2:e9:d6:4d:c1:e6:c9:23:f7:b7:7c:22:db:63:44:
49:aa:63:d3:d9:16:61:43:83:a3:04:77:f7:3c:17:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:AF:0F:08:F2:2E:8B:8B:F2:34:9C:38:61:32:C9:DC:E6:9F:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6845D1C144E11F0BFD500096EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.121.0/24
Signature Algorithm: sha256WithRSAEncryption
25:27:7b:d9:fc:ed:77:ca:ed:a4:05:38:38:6b:00:88:66:34:
d6:9d:73:23:82:0f:ba:23:40:33:b8:f4:b6:a9:22:81:e9:d0:
e2:d2:aa:f1:67:aa:6e:57:5c:88:78:ee:4c:28:c7:12:f7:8e:
e0:c1:70:2f:dc:d5:87:a0:e3:02:ea:95:4b:38:8f:de:53:f2:
47:c5:6e:96:52:f1:52:af:0f:86:89:94:dc:2d:fc:6f:2d:29:
09:2f:4d:e9:53:be:d9:f1:17:97:15:d9:94:95:6a:53:bd:95:
3f:ab:58:48:be:66:4e:f5:95:cd:be:88:66:33:1f:58:3b:39:
3a:06:d7:87:6a:12:f7:b9:f6:13:5a:e1:8e:e3:ca:2c:16:57:
3e:15:15:a4:8c:cd:b9:53:52:ec:32:a9:99:fb:40:b4:16:e3:
a6:32:2a:ef:88:10:75:f7:cb:8a:91:30:f9:dd:33:fe:7e:3a:
ca:9d:93:f5:e4:98:db:6c:bc:25:3f:3a:c2:74:89:65:5a:e6:
e9:bb:1b:d0:dd:1b:8d:bf:05:98:06:44:82:55:84:c9:60:0a:
42:9d:ea:41:09:6f:65:18:02:90:c9:9a:3f:ad:c0:7a:12:dc:
d3:67:70:8c:84:2b:a5:27:62:1e:d7:9e:da:ed:16:a0:7e:e8:
8f:4e:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:18 2025 by rpki-client on console.sobornost.net