Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8CBC8FA0FA411F0B4702C47762E951A.roa
File: E8CBC8FA0FA411F0B4702C47762E951A.roa (raw, json)
Hash identifier: RRZxSXQ94viUoZr8y6e5Xc8TM/u1Ps8yGzhK9uSWXSY=
Subject key identifier: 9B:80:05:08:98:F0:E6:D9:DB:84:8B:52:9D:41:1B:A6:3B:53:B7:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014985
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8CBC8FA0FA411F0B4702C47762E951A.roa
Signing time: Wed 02 Apr 2025 09:29:00 +0000
ROA not before: Wed 02 Apr 2025 09:28:56 +0000
ROA not after: Fri 01 May 2026 09:28:56 +0000
asID: 20473
IP address blocks: 156.246.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84357 (0x14985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 09:28:56 2025 GMT
Not After : May 1 09:28:56 2026 GMT
Subject: CN=67ed035c-f9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:28:e6:f1:9a:be:b3:f4:ce:52:5c:2c:df:
d7:5c:a7:f9:a7:8e:76:81:36:a0:d4:4b:10:03:6c:
5e:a1:63:0b:25:59:0b:a1:29:b5:4e:6b:2f:3c:b9:
47:e1:7c:f6:b9:18:1b:25:ea:aa:33:a8:79:86:e6:
8f:ac:6b:9e:04:c9:d5:45:bf:ed:40:34:ef:b6:a8:
9e:7d:47:d4:2c:71:1d:16:15:66:22:d2:54:54:01:
74:5b:9c:84:0b:b8:1c:42:97:d4:e5:89:90:8c:d3:
4b:11:fb:a8:fb:d5:18:6f:a4:74:58:e2:ec:82:78:
b7:22:8c:e3:7a:f6:d2:9e:5d:a7:19:2b:e3:13:18:
06:c1:7f:6e:8c:47:d6:ec:22:b3:56:c6:d2:5e:4d:
c7:03:c5:f2:6d:2e:f7:32:db:56:a1:10:d3:ec:1d:
2e:53:f4:93:3d:65:be:7a:bf:48:dd:38:48:02:4c:
34:77:11:3d:ca:c1:e6:45:25:1d:23:ff:7a:04:51:
bc:86:6e:3c:e3:03:cd:26:84:11:0a:0b:fa:ce:67:
b3:f8:af:47:26:44:21:64:b1:ff:71:00:b5:35:35:
47:40:14:2d:32:8f:e8:c9:f7:28:79:95:47:14:86:
fc:23:f0:7b:84:11:49:9a:60:ca:d9:e5:15:55:ef:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:05:08:98:F0:E6:D9:DB:84:8B:52:9D:41:1B:A6:3B:53:B7:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8CBC8FA0FA411F0B4702C47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.29.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c7:06:af:56:0d:86:11:8e:34:60:35:21:82:5b:46:58:d0:
52:c1:fa:0f:d2:b1:16:f7:c2:fa:52:cb:b3:ab:06:cc:12:01:
e5:3b:4c:d8:3e:b9:06:54:ef:cb:8e:fc:df:fa:88:f5:13:75:
92:1a:f3:6b:57:dd:c4:cc:51:64:63:b4:e7:2a:12:6f:ad:11:
5e:80:30:5b:e0:69:9a:53:23:8a:f9:3e:84:ca:0f:18:0e:15:
f0:d0:b9:9f:13:4d:c0:70:91:5b:e0:2d:e4:eb:33:9c:67:3a:
30:e7:dd:ac:05:19:15:f4:44:59:01:bb:2c:63:75:25:92:25:
1c:8e:a1:96:f3:29:a2:66:d1:bf:a1:7c:3f:c1:f3:4f:92:9c:
7c:68:34:a0:cd:4b:97:64:7e:9c:2f:66:45:81:48:14:e2:3f:
d6:82:72:be:1f:78:fe:9e:79:4c:c7:14:8b:f0:40:88:3c:39:
dc:2f:39:e0:de:8f:dd:40:08:d9:5c:d4:19:be:19:59:21:3f:
f1:ba:07:65:2b:6b:62:a5:a2:ca:ba:72:75:8e:af:24:02:c9:
df:b5:de:22:50:8e:13:c8:3c:5f:e0:a6:66:dc:9d:e1:81:7f:
f8:d1:d7:3b:6e:98:f1:7c:ea:fd:6d:e6:16:74:ec:b0:47:7c:
c4:bd:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:39 2025 by rpki-client on console.sobornost.net