Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED774736202E11F09E209DC6DAE4EC9C.roa
File: ED774736202E11F09E209DC6DAE4EC9C.roa (raw, json)
Hash identifier: 5pwB1UokleKarp4lEZYoNnFxlM0H55hFCuHeJR04bMU=
Subject key identifier: 59:5A:5D:13:3D:5B:9B:5D:EB:02:74:41:38:87:75:F5:68:4E:5C:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED774736202E11F09E209DC6DAE4EC9C.roa
Signing time: Wed 23 Apr 2025 10:37:18 +0000
ROA not before: Wed 23 Apr 2025 10:37:13 +0000
ROA not after: Sat 10 May 2025 10:37:13 +0000
asID: 400619
IP address blocks: 156.224.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85582 (0x14e4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 10:37:13 2025 GMT
Not After : May 10 10:37:13 2025 GMT
Subject: CN=6808c2de-b10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:4a:aa:2c:72:06:78:82:03:2d:0c:d8:33:
16:1d:36:e2:aa:a3:ce:0e:69:ee:ba:ca:67:9f:97:
93:0c:33:1c:62:eb:07:42:7e:4f:cb:da:2c:45:8d:
92:b6:ce:10:c0:d6:e5:5e:cb:b9:59:1a:74:cd:a0:
1e:25:14:06:0a:cc:3e:18:02:5f:3b:2f:be:67:40:
bf:00:e7:88:a3:e3:66:e5:f7:48:97:5b:85:61:51:
89:b8:55:66:a7:f5:d7:dc:ab:a6:da:4f:1b:09:2d:
e8:0b:bf:ca:77:3b:90:7b:6b:da:4a:ef:d2:93:66:
dc:e9:c1:43:ef:0b:2c:a4:4c:e0:e0:2e:b7:dc:54:
09:40:a5:2d:26:44:dc:a8:15:62:37:21:99:61:70:
df:99:9a:8e:89:ac:51:37:ac:23:43:93:3c:15:c2:
cf:39:d1:32:61:17:47:e8:c7:a3:a4:d6:54:37:69:
0c:cd:2d:8a:2c:c7:62:55:6c:98:92:49:aa:0a:74:
ad:a4:ea:f0:f2:5b:d0:ae:fe:bf:6d:12:3f:2c:21:
07:2d:5f:46:4f:0a:56:73:45:2c:e3:d4:87:cb:19:
7f:b1:2e:a5:bc:2c:1b:dd:e0:02:06:22:7e:e8:b9:
a3:f3:8f:38:3c:1a:18:f9:7b:b0:d0:c0:77:bf:42:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:5D:13:3D:5B:9B:5D:EB:02:74:41:38:87:75:F5:68:4E:5C:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED774736202E11F09E209DC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.63.0/24
Signature Algorithm: sha256WithRSAEncryption
12:28:6c:1b:72:cd:ab:91:60:94:82:42:03:00:c0:91:68:39:
cb:c1:11:3b:93:5a:14:ca:16:ec:92:62:d1:cf:e7:75:56:00:
44:91:35:4b:1c:1c:78:11:ca:93:9d:c6:8f:b9:6b:7c:fd:fa:
6b:38:0c:20:f3:30:3c:9e:8a:88:b8:22:40:92:55:85:7b:b7:
52:98:2c:5b:5c:d4:8f:55:4a:60:a5:0c:3b:4f:52:07:df:60:
86:a1:60:f4:3a:59:72:5a:02:34:97:dc:61:a2:7f:26:3a:21:
0f:48:8c:52:02:8a:89:c8:a6:2b:0e:f2:b4:52:56:eb:f6:7a:
c3:ff:07:92:25:60:e5:a6:a1:51:d1:c9:0a:61:90:6a:15:3f:
a8:05:bf:cd:f9:79:49:39:2a:de:11:e3:7a:c1:81:30:1a:c6:
14:dc:6c:8f:37:37:4a:38:cb:c1:5f:23:2e:2e:8d:12:55:a3:
da:8c:43:33:a5:b6:e1:82:05:34:24:ae:87:8e:e0:0d:f3:97:
8a:e2:1e:89:48:ca:cb:7f:36:aa:58:5a:e4:9c:d9:5e:fc:d5:
46:2c:1f:eb:ba:c2:f7:ae:d8:47:d7:19:ed:b6:a7:30:a3:5a:
d8:34:5d:26:cd:e0:0f:c0:df:1d:b6:35:42:ec:bc:e6:4d:a9:
e9:85:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:51 2025 by rpki-client on console.sobornost.net