Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEE6F068191011F0B7CC00D86DB8BCC6.roa
File: FEE6F068191011F0B7CC00D86DB8BCC6.roa (raw, json)
Hash identifier: KQSpmLtJ8sCJh9X2I1Pj+U27u6Lrgzvz7GZGvEKaVug=
Subject key identifier: AA:83:12:34:95:CD:66:7E:89:E0:A5:67:CB:AC:F3:F3:78:30:89:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEE6F068191011F0B7CC00D86DB8BCC6.roa
Signing time: Mon 14 Apr 2025 09:15:24 +0000
ROA not before: Mon 14 Apr 2025 09:15:20 +0000
ROA not after: Thu 22 May 2025 09:15:20 +0000
asID: 8796
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85032 (0x14c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 14 09:15:20 2025 GMT
Not After : May 22 09:15:20 2025 GMT
Subject: CN=67fcd22b-3a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:02:1c:99:4e:a5:b2:31:31:88:f5:30:30:07:
2d:26:7a:eb:d2:a2:b6:d7:e0:c2:37:3c:f8:de:9f:
d9:97:66:cc:3e:49:3f:55:e2:7d:ea:fc:e6:0a:d8:
32:3c:13:a4:b6:82:76:53:c2:bb:ef:71:60:56:44:
6f:fd:f8:00:d7:d6:50:84:dc:7a:58:f3:a2:56:d8:
bc:f9:0c:10:b6:51:b3:1c:d5:2b:d9:0f:90:56:36:
a6:eb:45:5c:c6:68:35:c2:84:3d:30:a5:bd:a5:e3:
c8:05:ec:6c:65:53:5a:b4:1a:a2:4f:cd:70:18:94:
84:d9:08:42:3a:70:d1:24:42:fc:eb:23:d7:cb:90:
04:70:5f:fc:e5:f9:b9:51:fe:24:47:fd:5d:5e:36:
6b:47:7d:b9:37:c3:0f:4b:cc:fb:b3:34:6e:3e:49:
a0:e0:c8:28:16:ab:40:86:28:98:1e:32:ab:ae:a8:
97:ba:0b:67:73:bc:a6:fa:fa:31:55:6c:82:65:62:
93:64:2e:66:88:cd:61:46:08:ec:e9:7a:eb:54:83:
98:7e:c1:68:c9:09:ed:d9:98:d1:29:c3:b3:20:bb:
d8:2f:07:db:48:96:83:92:96:c3:cd:25:f0:61:89:
25:c0:48:bc:61:ce:84:41:da:1d:65:ab:9c:9d:c3:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:83:12:34:95:CD:66:7E:89:E0:A5:67:CB:AC:F3:F3:78:30:89:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEE6F068191011F0B7CC00D86DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
79:9b:ec:91:ba:42:ef:3e:93:39:9c:25:c1:74:ec:87:f3:9a:
20:04:24:4b:dc:e2:c0:9a:10:d7:bc:bb:c1:37:86:a3:25:b6:
8f:68:d5:16:03:9f:d0:f1:1b:23:83:0f:fc:f8:3d:f5:96:66:
70:ae:72:0b:50:92:18:51:32:11:6d:95:76:87:2f:a5:e6:ae:
12:e8:ea:e7:f2:35:be:ca:cd:89:92:b9:2a:2e:19:3c:4f:e3:
78:14:b0:06:16:f5:6c:ea:91:7d:bc:14:c4:31:4e:05:0d:13:
29:d5:90:e1:f6:ef:c4:38:13:4c:3e:85:17:d4:05:51:77:2f:
96:4f:42:34:14:ac:06:2c:68:64:37:2f:36:37:fd:b4:b5:3e:
c0:68:09:52:48:13:6a:78:11:7f:35:13:df:fb:5e:63:73:b1:
b9:1c:a5:df:f5:8c:1c:6d:0b:5f:7f:de:af:29:a8:bc:8f:08:
f6:df:a1:7f:af:72:3b:c7:19:24:47:06:28:75:c5:79:66:a0:
e7:a1:d2:68:08:12:17:a0:9e:ae:c6:2f:ef:dd:d9:ce:e8:27:
69:74:c2:8c:7a:41:f9:59:42:8c:fd:7d:de:58:14:ab:7e:f7:
f3:a7:43:ee:95:d5:5f:fd:90:1b:c8:02:08:83:f9:53:02:b4:
27:ae:ed:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:18:08 2025 by rpki-client on console.sobornost.net