Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/087164E40A2D11F08A021164762E951A.roa
File: 087164E40A2D11F08A021164762E951A.roa (raw, json)
Hash identifier: YfZ4RznAnQHFthX8cRK3McGAyyWXBAYXdjOUonaX5X8=
Subject key identifier: 9C:68:CA:60:5D:92:75:25:6D:2E:39:83:A3:C2:A2:DB:BF:F6:38:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01485E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/087164E40A2D11F08A021164762E951A.roa
Signing time: Wed 26 Mar 2025 10:28:18 +0000
ROA not before: Wed 26 Mar 2025 10:28:14 +0000
ROA not after: Mon 14 Apr 2025 10:28:14 +0000
asID: 58931
IP address blocks: 156.254.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84062 (0x1485e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 10:28:14 2025 GMT
Not After : Apr 14 10:28:14 2025 GMT
Subject: CN=67e3d6c2-d8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:a7:b3:22:a2:53:c2:b9:57:cc:3b:b1:34:
9f:46:86:80:e9:43:21:ae:bf:40:2c:92:07:4e:28:
bb:f0:42:29:97:0f:27:89:f8:da:f2:fe:7b:f1:d6:
87:5d:af:7a:87:de:d8:b5:7e:b2:37:0a:ce:5e:95:
50:a6:90:ee:c1:50:51:e2:7c:6d:de:52:4c:2d:fa:
a7:9f:78:81:5a:40:d6:9f:5b:98:08:6f:a8:47:d8:
8a:13:90:3f:e7:9e:28:1a:d6:e6:37:47:9c:34:26:
60:5d:49:60:09:52:da:a4:38:10:b7:88:0a:a1:f9:
a5:94:e9:00:b9:3a:e0:0f:95:5e:68:4e:66:78:e3:
34:8d:58:4c:e6:73:3a:fa:a2:a7:bf:d9:03:93:51:
ac:df:92:56:38:37:40:fe:62:7b:30:40:35:da:f0:
b2:06:82:1b:14:36:7c:8f:30:3a:f9:d0:d1:49:62:
3e:15:29:e2:cb:0b:f7:df:d5:9b:3c:bf:6c:c7:b1:
c3:78:ea:a6:47:f7:e0:9f:e7:10:ba:06:1b:74:31:
d9:e6:c6:c8:87:09:d7:d6:ed:2b:8d:ea:9c:1b:16:
d5:1e:58:2a:3f:56:40:0f:03:38:2a:ce:85:70:9a:
4f:09:2b:56:b0:bd:f4:4d:f0:0b:12:90:27:b6:0a:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:68:CA:60:5D:92:75:25:6D:2E:39:83:A3:C2:A2:DB:BF:F6:38:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/087164E40A2D11F08A021164762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.20.0/23
Signature Algorithm: sha256WithRSAEncryption
36:e0:6c:1a:7d:52:21:a6:f7:b4:fc:02:4e:d2:12:60:33:38:
dd:a1:7b:3f:4b:76:d6:1b:ec:77:a3:95:ec:6c:23:11:ce:9d:
9e:5c:23:ea:cf:d2:26:2f:ab:af:0f:c4:e5:83:62:55:b1:62:
5e:a3:6d:c2:5e:85:b6:c8:b0:1d:c0:8c:c6:a0:7c:b5:94:ed:
c6:f8:39:a4:c6:32:39:e9:bd:cc:ac:be:b6:83:f8:c3:19:bb:
15:a2:cb:41:a1:2f:10:6b:44:19:88:a7:c7:25:0e:63:cd:dc:
93:a7:a2:2d:c8:2c:fe:ce:29:dc:5b:05:67:ec:f9:a7:d7:e5:
77:96:83:2c:23:58:8d:17:3a:d7:4d:18:5d:e7:b3:1d:b9:7b:
8f:0d:65:bb:2f:18:0e:39:d1:6b:3c:66:d4:2c:b3:05:2b:88:
b7:ef:15:a6:0e:4c:62:9d:95:46:cf:6c:34:a8:62:a2:81:8d:
5b:5a:1e:71:ba:ee:24:da:ba:bf:11:6b:16:11:cd:90:d5:9c:
a5:72:80:fe:a8:96:2e:e0:10:1b:bc:59:aa:00:5f:86:80:35:
b5:bb:e9:3b:01:6b:9d:c0:99:1c:60:f7:4b:d0:bd:97:17:14:
1e:a2:17:f5:31:65:ad:16:73:a4:b1:19:48:3e:a1:cb:d1:b1:
f8:bd:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:08 2025 by rpki-client