Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0583E820FB3B11EF8D2BE453762E951A.roa
File: 0583E820FB3B11EF8D2BE453762E951A.roa (raw, json)
Hash identifier: ohFlDEgN7KHQoUMjeJcnfnm99BSW0QB1VBIPSlrua0o=
Subject key identifier: 47:3C:59:67:43:E0:3C:F4:5C:A7:5B:51:15:74:8F:72:61:83:62:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01440C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0583E820FB3B11EF8D2BE453762E951A.roa
Signing time: Fri 07 Mar 2025 10:00:39 +0000
ROA not before: Fri 07 Mar 2025 10:00:34 +0000
ROA not after: Sun 13 Apr 2025 10:00:34 +0000
asID: 398478
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.252.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82956 (0x1440c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 10:00:34 2025 GMT
Not After : Apr 13 10:00:34 2025 GMT
Subject: CN=67cac3c7-1b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:38:35:2e:1e:1a:49:84:75:0a:77:db:d2:
2a:36:c5:2d:b7:34:08:4f:02:4a:5a:f6:87:fd:4c:
be:49:fc:c4:19:bf:b1:3b:21:c4:92:7a:9e:d6:91:
8e:c6:73:d7:de:4d:9a:7b:3e:e4:7e:f4:98:3f:8f:
f5:6a:97:14:1a:8e:47:6c:56:fb:2c:8a:3d:10:3c:
8d:26:bd:41:39:28:b8:e9:be:9b:3b:34:2f:9f:58:
33:90:bb:36:61:a9:4d:cc:c1:ca:e5:4d:62:e4:53:
e5:0f:ec:38:53:06:5f:8a:ac:03:18:37:25:1d:a7:
a7:be:f9:fa:a0:1f:6e:df:d8:4e:c3:01:32:92:dc:
0b:a2:ab:69:1a:eb:e7:92:b4:a2:6b:6f:c9:d4:e6:
c7:97:2a:aa:47:60:d6:96:d0:da:13:14:de:0d:9b:
d5:79:84:f2:a6:69:90:8c:d7:00:56:5b:d5:5e:c1:
b9:a5:6b:e1:f4:66:50:ed:88:b8:64:a2:0f:25:8a:
50:c0:17:1d:c7:5b:47:22:06:dd:09:8f:97:2f:b4:
8b:70:7c:ac:6f:07:c7:4a:f9:bc:f5:31:94:03:26:
2d:28:3c:e4:5a:8b:f0:4e:26:e4:38:19:1c:68:78:
24:2b:71:ae:3f:7c:d4:f8:6f:0e:81:f3:7e:62:3e:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3C:59:67:43:E0:3C:F4:5C:A7:5B:51:15:74:8F:72:61:83:62:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0583E820FB3B11EF8D2BE453762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.252.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:39:63:dd:93:ad:bc:4c:c4:a4:98:3b:f0:68:21:a0:85:78:
78:32:7f:f3:90:7f:36:b5:83:8c:f2:e6:ce:d2:8c:48:20:f6:
39:33:a8:7b:ef:a1:49:1a:47:96:26:72:ff:2d:2b:c3:e7:1e:
16:a4:05:82:43:b5:c4:04:d3:54:3f:15:a3:fd:37:65:9f:96:
06:4e:cc:49:04:38:c1:d7:82:ce:d8:d8:bc:a3:3a:8d:fd:ae:
10:3d:e1:45:29:aa:d6:d9:d3:28:49:67:3c:9b:27:6d:db:ba:
f9:c6:24:16:8f:c2:32:25:b1:ad:0b:d7:bc:9f:7b:1b:94:70:
ea:38:be:06:7e:20:4b:b6:c5:4e:d0:f1:7b:01:26:b0:82:f1:
7f:e1:b7:87:0b:a8:9d:02:d7:78:3e:32:24:a1:1c:10:6d:40:
57:8a:ee:58:f0:48:67:29:ed:56:b1:95:27:34:13:89:87:e5:
70:15:20:3d:30:96:6a:38:f2:3e:e4:d9:0f:33:52:9d:a3:b5:
42:01:6a:85:7a:db:4b:84:16:d1:0e:e8:7f:9f:26:ea:84:e0:
92:a2:7b:47:5f:b5:b5:61:91:e5:17:2c:96:dd:5e:56:a9:2e:
8c:f2:12:b0:d2:5a:22:fa:3d:39:81:95:46:6a:e2:47:d6:61:
65:fd:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:46 2025 by rpki-client