Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA1BD92CE3C11EFA8A89E9E762E951A.roa
File: FDA1BD92CE3C11EFA8A89E9E762E951A.roa (raw, json)
Hash identifier: sb+7Kd+OLOf7MRqqjKUZA0Qd++h3ruYM2pdcUFIFuHI=
Subject key identifier: D1:80:F3:EA:06:A4:AF:37:A1:0E:38:72:9D:7A:41:AB:F4:20:01:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010253
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA1BD92CE3C11EFA8A89E9E762E951A.roa
Signing time: Thu 09 Jan 2025 03:51:22 +0000
ROA not before: Thu 09 Jan 2025 03:51:18 +0000
ROA not after: Fri 09 Jan 2026 03:51:18 +0000
asID: 17561
IP address blocks: 156.247.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66131 (0x10253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 9 03:51:18 2025 GMT
Not After : Jan 9 03:51:18 2026 GMT
Subject: CN=677f47ba-0bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:67:78:a7:63:10:12:2b:c3:a7:8c:71:9a:
a3:2d:97:1a:81:5f:52:f5:ac:d0:cb:8f:ed:f5:87:
7f:0c:6b:95:7f:63:49:25:e6:31:29:49:e5:c0:fa:
b4:be:12:68:37:19:09:78:0c:16:2b:91:4e:89:da:
ee:7e:c7:5d:69:82:40:c8:6f:0a:e9:ee:c3:0b:88:
23:65:8d:e7:d1:7b:71:f9:05:4b:97:1f:e0:0e:92:
ed:34:64:ab:ee:20:ff:d7:d1:72:96:29:b7:b9:f5:
17:98:c2:1f:ba:bc:28:be:5e:1e:a2:d2:05:2f:5f:
39:42:ed:59:ce:76:79:f3:99:b9:07:15:c2:6e:a6:
e4:d8:34:85:03:3b:c6:ce:46:02:fc:73:07:a5:1f:
11:92:2a:3e:51:88:ca:ba:1b:ea:a5:42:a0:90:99:
94:5e:11:4e:47:35:66:b7:28:d0:a5:ab:16:7d:f8:
fc:9b:ae:3c:f6:a1:e7:f0:e2:5f:16:f1:d2:51:70:
da:13:58:67:f5:3e:37:33:9d:6d:7b:c3:5d:2c:a5:
bc:a3:66:f1:34:64:08:bc:30:68:0a:d4:d0:bb:7b:
ca:c3:67:c9:a0:ca:44:a5:63:78:e7:e4:59:87:cf:
98:d7:ca:03:8f:b9:ed:72:f6:de:e1:8c:88:b4:ab:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:F3:EA:06:A4:AF:37:A1:0E:38:72:9D:7A:41:AB:F4:20:01:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA1BD92CE3C11EFA8A89E9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:0d:21:40:7f:3c:1a:f4:09:fd:93:09:72:6e:4a:0e:42:43:
9f:75:87:e7:aa:e9:2d:b6:21:d2:9a:b0:d1:22:4e:1a:f4:cf:
06:ec:2d:6a:36:82:72:17:2e:53:85:87:4c:06:d3:1e:71:17:
7e:0b:84:ca:c9:42:df:b3:2a:11:0e:76:83:35:d4:2d:de:78:
ce:ec:e6:2d:10:89:16:c4:60:fe:3c:26:1d:2a:82:61:f0:57:
f6:97:a3:ed:de:ac:a0:73:74:19:9d:66:6d:ff:d7:10:e9:bf:
85:93:91:f9:c4:6b:df:52:60:ee:b2:bd:d9:ac:ca:cb:37:40:
a3:0d:81:68:b2:6b:e2:45:5d:bf:58:44:66:14:14:a5:44:6d:
3b:45:3b:24:a8:7a:0f:a7:cb:20:63:db:3b:cc:7c:0e:1a:0e:
4a:ea:a2:b6:4b:c9:5f:07:e2:44:b0:e5:e3:cf:64:f3:92:52:
11:ab:38:75:58:c2:e2:86:c4:29:b5:55:fa:17:7b:6f:00:f2:
3e:d1:68:ff:19:10:bb:5a:05:c7:b7:ab:ae:9c:50:59:bf:5f:
9d:27:f8:4e:16:44:27:3b:de:15:5e:d7:5e:db:b7:40:6b:c4:
c7:ab:f8:e8:5a:d0:5a:19:a2:c4:b9:cf:bd:03:01:7a:7e:5d:
06:b7:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:40 2025 by rpki-client on console.sobornost.net