Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07530E94E54A11EF85FE8C65762E951A.roa
File: 07530E94E54A11EF85FE8C65762E951A.roa (raw, json)
Hash identifier: WSVhj8M78ag5pLt7Pr9VA7vts51iu3TAvkDsLnaCjjs=
Subject key identifier: 9E:AE:8B:AD:E0:E2:87:12:56:02:61:3C:60:33:F3:6A:28:D8:AB:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07530E94E54A11EF85FE8C65762E951A.roa
Signing time: Fri 07 Feb 2025 11:52:39 +0000
ROA not before: Fri 07 Feb 2025 11:52:35 +0000
ROA not after: Mon 13 Dec 2027 11:52:35 +0000
asID: 17561
IP address blocks: 156.230.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73037 (0x11d4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 11:52:35 2025 GMT
Not After : Dec 13 11:52:35 2027 GMT
Subject: CN=67a5f406-2cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:e9:df:88:ef:1c:d7:3b:a4:07:b0:a7:fe:
88:e8:4c:ea:ba:a1:a3:71:26:79:fd:07:f5:83:0b:
7f:10:f8:96:a0:31:d2:c6:3e:9a:06:0d:87:93:6d:
89:50:4f:ac:2c:f4:2d:a2:e1:54:8f:ea:59:79:32:
18:18:fc:49:b7:24:99:61:84:11:d0:f5:cc:e1:8e:
b2:e0:8b:c9:e4:9e:19:52:0a:05:55:b8:f6:d4:35:
4b:c7:9d:03:78:a7:85:00:94:39:c3:87:d2:1a:58:
4b:5e:4e:5a:c6:a8:11:91:d6:77:ec:2f:0b:53:62:
73:09:ac:73:95:fd:da:84:14:0b:f1:25:b9:19:fe:
84:2a:05:9e:ad:f8:af:f0:dc:af:de:64:a6:49:81:
63:5b:eb:55:96:ee:62:8a:f5:5d:af:6c:d8:6a:12:
96:e4:3b:a1:50:3e:c4:ca:f8:e0:ec:24:4c:65:16:
0b:ff:c4:96:b2:89:12:66:d3:d2:7e:2c:31:3d:12:
33:a0:ea:9a:1b:7f:4e:0d:df:bd:b9:35:8d:d4:f2:
00:70:0f:ea:e8:44:86:e6:ea:16:d3:cd:24:09:a8:
dd:a9:c6:47:02:de:2b:e1:37:96:77:16:1e:58:9c:
68:85:2b:ce:44:e8:f2:ca:0e:08:7f:62:ae:a8:02:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AE:8B:AD:E0:E2:87:12:56:02:61:3C:60:33:F3:6A:28:D8:AB:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07530E94E54A11EF85FE8C65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1a:45:53:bc:51:34:f0:6c:32:53:77:ef:5a:c5:6d:73:a4:
67:27:be:b4:d6:43:d7:fa:77:7b:2b:b8:b3:92:03:0e:38:ab:
7e:21:32:47:56:d1:bb:7c:fa:30:79:f7:d1:ba:76:e2:07:c4:
c3:98:54:07:60:32:a9:7c:32:7c:e5:49:da:05:83:ec:08:86:
1c:b1:d8:4a:ce:9d:5b:22:da:3b:71:8c:87:86:e7:cd:99:7a:
cc:de:68:57:4e:50:59:e1:e4:17:74:27:71:ad:62:4c:9b:53:
46:4c:fa:73:3a:ba:2f:b0:c2:1f:d0:9b:6b:8e:83:c3:67:37:
b4:44:f8:3f:1c:66:97:cc:95:f4:3b:a6:ff:19:a1:7e:d2:e0:
0e:2e:45:15:4a:68:6f:8e:dd:c2:7c:cf:40:21:d3:94:67:90:
57:dd:a6:92:b7:42:cb:f3:64:50:32:37:ef:e2:f5:f4:47:fa:
7e:be:50:51:0b:b6:ba:0b:fe:d1:66:1d:3d:93:44:c9:25:ba:
ac:4a:fe:a9:63:eb:8a:09:bf:e1:b7:b6:21:9e:d1:c6:52:1b:
76:e3:12:c8:ab:7e:ab:31:3e:ed:e2:e9:32:23:e5:5b:45:be:
a4:1a:b8:ee:88:99:5f:7b:1a:21:28:88:8a:3b:84:4a:2a:94:
25:67:b4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:04 2025 by rpki-client