Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3CAC040211B11F0B126A9F0DAE4EC9C.roa
File: D3CAC040211B11F0B126A9F0DAE4EC9C.roa (raw, json)
Hash identifier: PM2/OSbKosPqGznbfNcI8ZOvtcDTaXco2+vgXZSjV2A=
Subject key identifier: 7A:1A:04:6C:CC:04:5E:8F:6D:F1:CC:0F:B9:A7:D5:B0:71:CC:EB:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3CAC040211B11F0B126A9F0DAE4EC9C.roa
Signing time: Thu 24 Apr 2025 14:53:05 +0000
ROA not before: Thu 24 Apr 2025 14:53:00 +0000
ROA not after: Sun 04 May 2025 14:53:00 +0000
asID: 61112
IP address blocks: 156.226.168.0/23 maxlen: 24
156.226.170.0/23 maxlen: 24
156.226.172.0/23 maxlen: 24
156.226.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85656 (0x14e98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 14:53:00 2025 GMT
Not After : May 4 14:53:00 2025 GMT
Subject: CN=680a5051-14c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:85:44:c6:29:7e:4e:5b:1f:a8:68:75:42:
de:78:0e:d0:a3:1c:b0:d0:3b:86:4e:98:b0:5b:92:
57:db:a6:05:4a:fb:cf:85:7f:19:bd:07:04:1a:d1:
f7:35:79:51:11:a7:b9:86:cc:bb:5b:c8:39:49:4e:
aa:a6:bc:dd:53:d7:1f:fc:97:b8:40:29:d0:40:88:
d2:59:91:bb:eb:ed:4d:80:f7:25:89:40:df:1d:81:
b8:11:60:0d:9c:e7:13:77:2b:60:eb:15:74:59:67:
f8:c0:db:df:42:35:a9:d9:9d:61:fd:9f:e7:95:fc:
ab:ba:36:19:78:4e:07:20:d8:61:3f:c3:22:33:d9:
6a:cc:5c:ed:bf:ef:93:f8:23:22:4d:f2:7a:98:5a:
8a:6e:4d:d4:c4:e6:d6:bd:8d:75:cb:27:fb:11:9c:
62:ac:b2:41:2e:48:f2:14:45:51:59:20:67:ef:55:
18:f4:90:66:4d:6e:db:07:f5:83:7a:e5:bc:09:6e:
9b:ad:4d:d0:e7:33:fb:10:d4:ad:f3:c6:1c:e2:b3:
6d:d2:aa:cf:1d:c0:04:72:02:60:bb:f1:6f:be:56:
13:7f:82:52:50:70:81:6c:fd:e7:4c:f9:5e:88:98:
26:14:ae:79:25:7d:96:54:c1:6c:a0:b4:d6:23:0e:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1A:04:6C:CC:04:5E:8F:6D:F1:CC:0F:B9:A7:D5:B0:71:CC:EB:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3CAC040211B11F0B126A9F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.168.0/21
Signature Algorithm: sha256WithRSAEncryption
23:09:8f:7d:06:d7:e2:20:10:80:f9:b3:ac:15:91:1f:74:c2:
6c:9c:5c:68:ae:c2:53:07:7b:ca:a4:b9:48:38:f9:de:6d:e0:
49:c4:1f:b6:b0:ac:e4:81:1c:f4:ab:16:7b:bc:ba:23:2f:97:
08:32:02:f5:e2:6c:a1:d3:08:69:64:a1:73:3b:53:19:80:2b:
d7:3a:90:be:c4:d7:4e:3d:d1:34:28:20:43:8c:43:e1:21:77:
57:87:3d:52:e3:49:12:df:ff:81:16:c2:96:7a:0f:5d:00:8a:
27:81:f1:1c:72:6a:40:b9:cd:e3:f2:2d:78:79:4c:f4:cc:8f:
36:c4:d4:cc:d7:7c:c0:13:5b:de:1d:92:bf:85:73:bc:3b:24:
f1:04:c1:f1:52:05:bb:02:83:e5:ab:b7:75:bb:07:ee:7f:7f:
3a:62:7c:43:a4:26:a1:e7:0f:a8:0e:7e:89:9d:19:36:a0:7d:
cd:b0:64:27:46:f9:5c:5e:62:da:55:7e:f2:5e:ee:59:d0:18:
e2:a0:d5:7b:b9:ea:19:b7:6a:64:19:26:30:a6:45:be:fe:dd:
78:a9:16:bb:ca:93:04:f0:fe:17:cb:f5:ba:96:6f:54:30:12:
24:d1:c2:8b:19:f3:33:70:e8:e2:bc:4d:fb:ab:1c:4d:9d:3a:
38:9e:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:26 2025 by rpki-client on console.sobornost.net