Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/F2A4B242DD5911EF836FA259762E951A.roa
File: F2A4B242DD5911EF836FA259762E951A.roa (raw, json)
Hash identifier: fIuP82QOJoRzYwdnI+W0dZ872lW6Jo1aocyYnFQOGfg=
Subject key identifier: 13:9A:10:25:DC:68:46:85:F5:9C:E9:9C:E5:23:26:41:00:9D:30:7B
Certificate issuer: /CN=F363DCF2AR/serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Certificate serial: 07
Authority key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/F2A4B242DD5911EF836FA259762E951A.roa
Signing time: Tue 28 Jan 2025 09:26:26 +0000
ROA not before: Tue 28 Jan 2025 09:26:22 +0000
ROA not after: Wed 31 Jan 2035 09:26:22 +0000
asID: 30992
IP address blocks: 129.0.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Validity
Not Before: Jan 28 09:26:22 2025 GMT
Not After : Jan 31 09:26:22 2035 GMT
Subject: CN=6798a2c2-02c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:8c:f9:40:93:84:77:b2:2e:da:57:7e:92:
0f:91:b5:53:4e:c9:09:8e:49:8b:16:b3:c4:80:b1:
27:49:18:df:0a:82:01:2b:d4:f5:ff:59:66:63:ef:
42:e4:b3:b7:bb:27:de:be:02:df:b0:bd:a0:90:7e:
28:4b:97:0e:59:24:38:d6:8e:0f:1f:98:7b:5f:d7:
d0:a2:0d:4b:dd:7f:03:0d:a2:31:db:24:8c:4b:b8:
97:64:2f:d3:a2:b3:5a:e6:67:3b:af:30:37:75:70:
82:ee:32:e6:a9:28:75:50:3f:34:ae:6e:80:ae:bc:
e9:4f:b4:63:8e:69:29:6c:03:0c:84:b4:63:81:8a:
de:bb:e1:90:08:88:da:a8:f4:36:bf:9e:7f:8b:a5:
64:a9:31:7e:5e:26:a9:f3:97:1f:20:b3:c6:57:a5:
2e:85:65:38:8a:79:0b:58:07:2b:d0:99:31:1e:7c:
c6:34:99:b4:fd:93:0c:e6:b1:85:eb:3e:f3:a5:81:
77:d8:83:2f:73:8f:dc:74:dc:9a:a9:a9:f1:49:19:
54:76:3e:6c:50:b5:fe:1f:66:71:f3:60:78:7a:d7:
5f:cd:e3:f7:02:89:03:f1:69:9c:63:02:97:b8:f9:
c8:df:53:1f:37:e4:af:1c:7c:95:bb:e8:28:15:69:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9A:10:25:DC:68:46:85:F5:9C:E9:9C:E5:23:26:41:00:9D:30:7B
X509v3 Authority Key Identifier:
keyid:C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/F2A4B242DD5911EF836FA259762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.0.10.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:28:0f:3a:4f:0f:d0:b9:6e:f3:bb:c7:16:16:25:b7:57:fe:
b2:93:6d:a6:81:f4:61:92:4a:68:8a:e4:d5:7e:f6:15:98:24:
73:b8:73:2d:ee:66:f5:d3:ec:cf:a6:89:3d:84:d3:9b:03:dc:
4a:96:cd:31:52:8e:30:39:23:77:03:3b:78:43:a2:09:f5:eb:
08:7c:65:1e:09:fb:1f:cf:18:d0:48:12:9f:a5:b0:02:5f:c1:
ba:2c:62:ea:1b:62:bb:5d:94:29:c5:4a:92:67:60:9f:7b:76:
33:b6:d7:f9:4c:b0:3f:2f:f8:f4:02:bf:98:87:84:2c:1b:d7:
d6:28:c7:f4:2a:80:7a:4d:6d:1f:d9:93:5c:7b:d3:a8:49:34:
84:6d:cd:11:b8:f2:08:c4:93:36:1d:90:07:08:49:ff:1e:8c:
1e:4c:ad:d5:24:ee:57:95:b2:c1:de:92:bb:42:ff:0f:67:d7:
bd:d9:89:f0:a3:d2:e9:e9:a9:c6:59:96:64:98:40:72:11:a1:
d5:c0:61:c1:6d:51:7e:93:82:85:95:de:a5:69:1d:e4:fc:94:
dc:eb:ec:05:e1:59:2e:00:6e:9f:aa:cc:74:9e:b5:5e:09:5a:
88:6e:fc:48:e5:b9:bc:f0:88:f4:da:95:af:6a:19:8f:b0:0e:
00:47:e7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:53:22 2025 by rpki-client