Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01F6136AF46D11EFB7EC827F762E951A.roa
File: 01F6136AF46D11EFB7EC827F762E951A.roa (raw, json)
Hash identifier: +OjaEioDT2N6vAt7hGH3Hl1x+LC+6x3wyVA0TvO3GMg=
Subject key identifier: E8:6D:4F:24:48:66:BC:64:B6:B6:8C:13:F8:55:20:63:1A:4F:85:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01362C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01F6136AF46D11EFB7EC827F762E951A.roa
Signing time: Wed 26 Feb 2025 18:10:49 +0000
ROA not before: Wed 26 Feb 2025 18:10:46 +0000
ROA not after: Thu 19 Feb 2026 18:10:46 +0000
asID: 984
IP address blocks: 156.228.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79404 (0x1362c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:10:46 2025 GMT
Not After : Feb 19 18:10:46 2026 GMT
Subject: CN=67bf5929-f25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:fc:26:3d:6a:09:53:ba:f5:24:ca:59:a6:
15:3f:61:4f:42:ed:99:51:05:5a:bc:75:04:e1:15:
8a:a4:a9:71:39:6c:97:71:c9:19:21:51:29:d7:d0:
aa:9c:69:86:c2:fc:39:af:c6:e0:fa:18:f1:dd:ff:
8d:94:90:8e:5a:8e:4c:a5:7f:fe:5b:b2:ef:e9:99:
3a:9b:0c:8b:7e:4f:8d:22:72:ee:74:81:52:b6:6c:
7b:9c:93:de:f3:aa:dc:8d:f6:1c:50:b2:3e:96:e8:
ab:44:b3:39:0b:94:c8:5c:cb:f3:b4:b2:7e:dc:6c:
8b:ab:6f:76:69:ed:c2:a7:b6:a7:16:c5:03:80:9e:
2b:3e:1f:17:87:e4:36:55:34:8a:77:b2:c6:ae:25:
8e:aa:07:9f:6f:54:27:2a:02:1a:12:1e:82:8d:c9:
92:2c:55:72:cf:6f:1c:7c:c8:88:4e:3d:e2:e7:d0:
09:4d:32:d5:27:9e:ec:a1:3b:28:d3:6c:bc:77:c9:
9f:b1:01:a5:38:8d:fe:02:a9:41:4e:96:9a:1f:a7:
48:97:f7:4f:86:57:e1:fc:ab:04:3a:39:84:e1:2e:
ca:26:5c:18:43:cc:de:df:f7:d2:7e:1e:28:9b:b2:
fd:57:3e:c7:b7:3f:b4:88:f7:48:74:78:ca:ea:35:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:4F:24:48:66:BC:64:B6:B6:8C:13:F8:55:20:63:1A:4F:85:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01F6136AF46D11EFB7EC827F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.239.0/24
Signature Algorithm: sha256WithRSAEncryption
37:76:27:e0:00:bf:03:d9:65:97:48:61:93:82:bb:5f:dd:63:
be:cf:de:a9:50:8d:19:74:76:00:ad:5b:47:17:13:07:7c:ab:
10:ea:39:a3:9a:23:3d:56:b2:53:f0:a8:71:2c:17:49:b9:e2:
89:c2:02:73:81:d5:b2:a2:28:29:a8:1e:7e:e4:7c:52:a0:85:
06:76:34:e8:1b:ab:87:97:8a:23:29:2f:03:79:5b:d0:96:a8:
72:32:93:b7:86:2f:fd:5d:3b:c3:7a:f5:20:38:e1:23:fb:3c:
81:e6:fc:cb:6f:f7:59:65:96:65:43:f8:84:4d:8e:70:97:5f:
b3:8d:98:61:0a:05:bb:2f:20:39:76:69:cf:9c:4e:1d:8c:c9:
20:dd:ef:96:1e:b4:02:b5:68:25:d4:d4:ef:68:30:33:f1:0e:
a3:46:4d:38:7f:e0:a6:5e:05:da:ee:09:f0:bc:c7:38:1c:6e:
2b:16:26:89:2c:d3:b1:91:7d:76:9e:51:61:7f:76:60:1e:84:
9d:f9:04:60:9a:83:fe:a1:f4:16:fb:94:4b:c1:cc:36:93:2d:
40:79:2d:e8:49:27:83:58:51:d7:c2:7c:e5:83:7a:5a:7e:3f:
2e:64:2c:e8:8c:77:04:9a:f3:8a:ca:f8:46:1b:05:9f:69:22:
66:45:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:33 2025 by rpki-client