Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/017CDFF6F2CC11EF8FB07052762E951A.roa
File: 017CDFF6F2CC11EF8FB07052762E951A.roa (raw, json)
Hash identifier: tyiQtsdHa1Qm5AsgJT0UPtLTS/+HMZTaKYiHa9HMkLs=
Subject key identifier: E6:20:84:B3:52:12:B5:BE:70:EA:A9:90:A8:FB:DB:B2:93:73:6C:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/017CDFF6F2CC11EF8FB07052762E951A.roa
Signing time: Mon 24 Feb 2025 16:25:48 +0000
ROA not before: Mon 24 Feb 2025 16:25:45 +0000
ROA not after: Sat 05 Apr 2025 16:25:45 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 16:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76888 (0x12c58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 16:25:45 2025 GMT
Not After : Apr 5 16:25:45 2025 GMT
Subject: CN=67bc9d8c-c954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:15:75:db:33:eb:84:5d:42:78:dd:7e:70:
d9:6b:80:b3:72:2c:15:8c:bd:b0:cf:b9:bd:03:e5:
c5:7f:41:02:32:8e:33:26:93:20:a9:51:83:f9:ad:
4f:c1:9f:5b:a1:0a:c7:06:72:30:f7:8a:56:7a:c2:
e1:c4:6b:de:4a:b4:b5:69:34:d8:9e:37:d4:4c:3f:
3f:86:ee:8c:2b:8b:97:99:7f:21:99:07:e7:92:de:
b3:28:9d:d1:49:b7:0d:3a:50:81:6f:fa:e6:f8:9a:
24:c6:3b:e0:01:c0:8f:9e:9a:8b:1d:58:82:32:93:
46:04:d5:e8:76:39:f0:07:26:ea:ba:90:2f:b8:0e:
1f:34:41:b9:e7:03:cd:09:b9:55:4e:cc:da:f5:0e:
ff:b7:f6:74:a8:4e:5f:01:dc:bc:5a:d9:97:23:37:
84:2a:26:76:f6:64:95:d8:f8:f9:19:69:55:84:71:
71:fe:24:6a:d2:e0:7c:56:be:ab:52:e9:e8:74:a1:
ff:ff:ae:71:94:1a:e0:80:e8:90:71:75:56:7e:a3:
30:fa:5a:71:74:54:41:f2:d9:27:71:cd:e8:9a:30:
2c:22:08:dd:fd:2c:b2:7d:a4:cf:ef:75:05:bd:d1:
fc:7f:aa:1b:10:c2:6b:47:2f:21:93:56:8d:60:e0:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:20:84:B3:52:12:B5:BE:70:EA:A9:90:A8:FB:DB:B2:93:73:6C:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/017CDFF6F2CC11EF8FB07052762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:a0:b0:2a:13:81:f4:87:88:b6:5a:66:e0:2e:40:1b:41:49:
20:8e:02:69:b9:dd:62:5a:30:c6:8b:2f:ba:89:ab:5e:ec:f9:
9d:42:37:67:9b:c3:2e:02:95:26:56:04:0c:4a:e2:72:62:6b:
c9:90:10:fa:ef:74:66:9b:f1:a4:8c:80:68:b2:a3:d4:ef:4e:
bd:a3:79:ec:4a:05:5b:52:69:c1:6d:83:95:2d:09:a1:1e:6e:
8f:4a:17:0c:1d:5f:a8:6e:8f:cf:43:68:93:0f:8f:b4:9e:98:
ac:76:e2:36:04:ff:a8:61:9e:b4:0d:de:5f:e6:e5:ac:34:cb:
e0:fd:96:8b:81:54:7a:5a:2c:09:1b:69:8e:43:6c:bc:41:bb:
3e:79:b9:e0:b5:c5:fb:f8:b8:76:1d:34:07:ae:5e:38:d2:2e:
ec:82:f2:f8:de:a0:b3:3a:c2:73:dc:dc:11:dd:2f:43:3a:88:
d8:14:f5:81:d1:e5:cd:a5:86:49:b6:da:e8:93:8d:c8:a1:47:
9f:6c:a2:f5:f8:c0:af:1c:91:ad:02:24:b8:8e:0e:ff:d3:1c:
b9:05:0a:a1:b8:da:aa:f8:f7:6b:5c:e8:2b:5e:e4:7c:c2:af:
08:a1:4e:2e:5f:82:93:76:2a:fc:2d:41:64:bd:ab:e0:4a:2e:
df:73:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:08 2025 by rpki-client