Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD73EFA41DEF11F0AD90D4BCDAE4EC9C.roa
File: FD73EFA41DEF11F0AD90D4BCDAE4EC9C.roa (raw, json)
Hash identifier: 3G7elg3SOlf98YaTYtvsYohc1KgCnbOb9K/SVIBcR2s=
Subject key identifier: B5:C5:B7:95:FB:0A:01:35:D7:41:3E:DD:C6:74:9C:07:33:42:BB:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD73EFA41DEF11F0AD90D4BCDAE4EC9C.roa
Signing time: Sun 20 Apr 2025 14:01:44 +0000
ROA not before: Sun 20 Apr 2025 14:01:39 +0000
ROA not after: Sun 27 Apr 2025 14:01:39 +0000
asID: 5065
IP address blocks: 156.229.52.0/24 maxlen: 24
156.229.53.0/24 maxlen: 24
156.229.55.0/24 maxlen: 24
156.229.56.0/24 maxlen: 24
156.229.57.0/24 maxlen: 24
156.229.58.0/24 maxlen: 24
156.229.59.0/24 maxlen: 24
156.229.60.0/24 maxlen: 24
156.229.61.0/24 maxlen: 24
156.229.62.0/24 maxlen: 24
156.229.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85417 (0x14da9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 20 14:01:39 2025 GMT
Not After : Apr 27 14:01:39 2025 GMT
Subject: CN=6804fe48-0af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:66:33:d1:d2:e4:b6:33:14:23:34:fe:06:
24:76:85:e6:e5:73:bf:10:8b:f3:7c:99:50:8d:06:
95:9e:71:f2:cf:b8:f7:04:f8:ba:a1:bc:d0:6e:88:
cc:43:8f:1e:fa:16:cf:82:4e:20:4b:25:19:68:81:
71:f9:ff:5c:e4:32:4d:c2:2a:4b:2d:d5:58:77:6e:
30:21:5a:b1:fa:f6:fc:61:e0:db:aa:03:cb:5d:9f:
90:43:47:86:d3:30:52:54:09:c6:af:bb:b8:44:35:
39:c3:49:56:7d:51:ac:d5:6a:2f:50:8a:43:48:9a:
c5:ab:2a:5d:08:d6:84:29:f6:a2:e8:50:8f:c6:b8:
d9:61:1d:86:ac:2d:2e:9b:44:a0:96:24:a3:6e:bd:
e7:ab:51:35:8b:93:6f:82:1d:16:08:0c:14:76:d4:
25:f7:b3:0e:37:6b:61:ea:b2:44:ec:aa:87:57:14:
9d:85:2f:06:1a:6a:49:25:c8:7e:ca:7a:46:be:d4:
12:95:b7:7c:0f:e0:c0:b9:b7:a1:bc:e5:8a:20:81:
3d:7c:93:b1:2a:15:63:af:aa:c1:50:96:91:dd:80:
f7:08:e3:32:00:cd:09:88:ce:57:0a:2b:78:1b:d0:
d7:1e:b0:a5:d1:2f:9c:63:c0:31:10:5b:44:d4:46:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C5:B7:95:FB:0A:01:35:D7:41:3E:DD:C6:74:9C:07:33:42:BB:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD73EFA41DEF11F0AD90D4BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.52.0/23
156.229.55.0-156.229.63.255
Signature Algorithm: sha256WithRSAEncryption
7d:1d:2f:ca:65:85:7a:f4:be:80:6f:0c:51:77:b7:90:4f:ea:
d0:8f:7e:e8:97:7e:58:a6:86:4f:3d:4c:1a:e1:c4:5a:07:47:
b5:2d:b0:2b:29:25:bc:b0:51:6e:71:92:3f:73:22:7e:17:27:
f8:49:a0:26:5f:b2:6b:15:09:43:69:c6:5c:93:7d:74:f9:b1:
c8:dd:ee:2a:9e:dd:22:f2:57:13:27:ab:82:44:49:45:91:f9:
db:a4:b6:09:0f:9d:7c:09:1a:d0:50:a9:73:0d:07:88:9a:c2:
cb:01:5e:e6:9e:f2:c4:d0:de:08:cf:c8:15:75:27:63:b7:45:
f2:4c:00:32:01:b9:88:2d:56:a5:13:d4:3e:f1:c8:da:55:2b:
05:23:c4:59:e3:79:fc:24:97:18:4b:fb:e9:be:02:70:dd:29:
a0:ae:c1:85:01:fc:ff:19:b4:76:42:bb:76:13:87:44:03:a4:
06:b8:1e:81:17:5a:01:3c:a8:c7:ee:de:9b:1d:1c:62:66:ed:
ef:0d:0a:9a:e0:e1:83:1e:40:67:30:57:b9:01:15:fb:59:fb:
1c:5c:8b:e6:3c:f7:94:98:00:b1:83:63:06:f8:9c:86:4d:39:
75:e6:de:a9:ff:8d:d2:4c:24:67:f8:bc:2e:39:51:aa:61:69:
26:2b:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:53 2025 by rpki-client on console.sobornost.net