Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05372360F45A11EF9AB17D7C762E951A.roa
File: 05372360F45A11EF9AB17D7C762E951A.roa (raw, json)
Hash identifier: jWjc4MOmm/s3uei7s2IE+Gwf9BlxZx8fb85N+36iwRY=
Subject key identifier: 83:3C:51:39:FB:C6:11:F4:16:A0:46:3A:E5:42:4A:DE:BB:BD:D8:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01347A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05372360F45A11EF9AB17D7C762E951A.roa
Signing time: Wed 26 Feb 2025 15:54:54 +0000
ROA not before: Wed 26 Feb 2025 15:54:39 +0000
ROA not after: Thu 19 Feb 2026 15:54:39 +0000
asID: 984
IP address blocks: 156.231.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78970 (0x1347a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:54:39 2025 GMT
Not After : Feb 19 15:54:39 2026 GMT
Subject: CN=67bf394e-32bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5b:08:1c:f6:f6:78:7e:d3:bc:25:3a:17:68:
b6:96:85:87:be:2b:cc:c4:1a:c2:fb:f3:bd:f4:55:
23:ae:1f:15:2d:0d:49:33:d5:0e:8e:3c:fd:4a:65:
7b:f3:47:fc:e9:31:e2:75:60:61:e6:e2:8e:d9:aa:
c6:5c:b9:7e:bf:a7:f2:a6:73:ca:2e:cd:1b:c4:a3:
13:6d:ce:ef:a1:4c:c5:3d:2a:b6:1d:ca:84:78:50:
d6:82:1c:44:46:23:3a:9c:65:79:3a:d9:61:a5:0d:
a8:d2:c5:5e:ea:ff:ee:df:bd:6c:d6:d4:e6:05:d9:
ae:8f:10:41:ee:1c:dd:10:66:54:28:df:f8:df:9d:
76:f6:ea:90:93:5e:be:ce:65:4a:68:ea:2e:3c:b0:
23:d5:6b:c0:b0:af:96:cf:c5:80:63:fc:86:24:44:
dc:33:35:22:fc:cd:52:92:81:20:1f:0c:a0:11:35:
75:3f:97:29:8a:55:c6:12:68:29:7c:23:b6:14:cc:
2e:b4:81:89:a5:34:5f:23:00:69:f0:25:f4:43:c0:
ef:9e:7c:52:e2:10:bb:d6:be:97:e7:62:99:aa:b7:
7e:dc:b6:68:ad:cb:06:9d:27:8d:79:a2:29:3c:ce:
27:bc:9a:67:19:91:ac:16:7e:ad:1b:4a:a4:89:58:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3C:51:39:FB:C6:11:F4:16:A0:46:3A:E5:42:4A:DE:BB:BD:D8:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05372360F45A11EF9AB17D7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.222.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ed:51:eb:6c:59:72:6b:9a:04:11:ce:11:d8:cc:23:91:09:
24:e3:a4:37:0a:65:eb:78:72:c8:3b:15:62:0b:76:2c:45:71:
c6:8e:ae:ff:c1:c7:60:b3:19:e7:d2:d2:01:87:14:7b:d5:33:
a3:cb:e5:60:27:31:13:66:83:f5:77:ee:80:fe:79:bd:d4:0f:
f7:be:fd:7d:6b:3d:c8:12:06:29:91:5a:7b:08:ab:6a:99:b1:
33:05:6f:a8:fc:f3:ac:8a:30:b6:85:9b:8d:c3:1f:b4:36:5e:
af:b9:c3:bd:f6:e7:47:f1:a0:2e:a3:f0:90:fe:95:65:68:c0:
4d:d4:66:38:88:32:a4:7e:42:a1:4d:6f:b1:9a:13:dd:97:7b:
fd:92:26:c8:70:30:ec:a0:23:9e:1a:6f:01:b9:52:c5:79:30:
ed:7c:79:cf:8d:96:da:dd:a0:2a:53:fd:39:84:de:d4:14:88:
9e:c7:3c:07:34:aa:78:d3:39:27:33:0a:4e:20:40:7f:9d:bc:
43:fe:bd:59:68:0a:0c:ff:d6:94:01:74:f0:99:38:62:ba:68:
d8:5b:b3:01:f1:8e:14:6d:d8:b4:ce:ad:11:69:94:e6:99:59:
53:f9:df:4f:24:c1:38:39:3f:f7:59:75:ea:7b:4c:c6:88:3e:
b8:2f:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:01 2025 by rpki-client