Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08A76BE6F46311EFB75FE5B9762E951A.roa
File: 08A76BE6F46311EFB75FE5B9762E951A.roa (raw, json)
Hash identifier: qVgSqtslPuBolrUwhVjazNzUSbaLSCjHnkYUh0La7tM=
Subject key identifier: 24:30:17:7E:44:F8:D6:83:BA:94:FB:4E:C1:5A:42:23:15:1A:72:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013548
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08A76BE6F46311EFB75FE5B9762E951A.roa
Signing time: Wed 26 Feb 2025 16:59:26 +0000
ROA not before: Wed 26 Feb 2025 16:59:22 +0000
ROA not after: Sat 19 Feb 2028 16:59:22 +0000
asID: 17561
IP address blocks: 156.250.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79176 (0x13548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:59:22 2025 GMT
Not After : Feb 19 16:59:22 2028 GMT
Subject: CN=67bf486d-fb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:c2:a0:71:24:db:7e:ef:11:4a:71:29:c6:
4e:c0:65:af:e1:0b:40:0d:32:ad:79:3c:c6:b6:46:
0d:f2:6e:3f:82:34:e7:dd:33:3f:f4:e7:6b:3c:f2:
f7:c8:7d:8a:2c:7d:82:19:fe:08:df:9f:ff:95:33:
2a:f1:63:12:91:80:cd:f8:95:0b:28:03:9b:a7:80:
0c:a3:9b:16:4d:76:f1:2f:cc:b5:97:dc:e4:fe:0c:
1e:db:00:b7:0f:e6:4a:9c:e1:5e:19:90:93:69:b9:
59:56:ec:bf:3c:0d:b7:0f:44:bd:04:0f:74:3c:55:
cf:e2:11:e5:ff:18:14:d7:cd:0f:d9:50:7a:79:a9:
b9:e8:c9:e5:f3:fc:f4:37:14:16:fd:65:5d:fb:e9:
80:39:4f:cc:1b:dd:84:63:56:8b:9d:c2:95:f1:e0:
12:50:c0:95:da:d6:c3:68:77:5d:83:0d:ca:9b:45:
0c:13:a7:13:37:e2:67:23:e9:0d:d6:32:1b:6f:8c:
c1:d6:1e:a1:0c:97:5c:64:79:1f:ba:80:af:aa:f6:
48:f5:49:13:f8:9f:45:a4:b0:0e:59:1a:54:86:08:
59:39:95:cf:8e:75:fd:c0:ce:3f:40:bf:e8:47:8f:
c1:0d:d0:f9:fd:31:18:6d:2a:b0:e8:64:07:36:65:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:30:17:7E:44:F8:D6:83:BA:94:FB:4E:C1:5A:42:23:15:1A:72:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08A76BE6F46311EFB75FE5B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:df:89:d6:c4:47:81:65:27:8e:c3:d3:e6:eb:f9:71:b1:fd:
6c:3f:50:df:68:31:2b:89:e6:d3:a4:b8:4b:f4:b9:62:bb:1f:
a8:a1:e8:1b:ed:77:53:1b:66:54:2d:17:a2:a7:7d:0b:49:7a:
9c:92:43:50:e3:23:3c:c5:b7:ae:e6:57:9c:30:8c:19:90:4c:
7f:29:d2:01:31:0a:59:5b:84:a8:2d:38:b6:f1:d4:4f:45:0a:
d7:f6:07:dd:34:34:26:2b:a8:63:17:ba:72:c0:a1:a8:4f:45:
54:5b:4c:50:07:43:20:fd:bd:f9:01:b8:ac:43:59:09:ee:80:
16:21:dd:54:04:e7:04:0c:df:25:39:40:5a:7d:1a:2f:8d:a2:
27:cf:4e:ad:e6:07:de:48:f9:22:c7:da:ba:7b:1d:b4:fe:3e:
58:02:92:a1:d5:cb:08:cd:45:3f:27:95:21:b5:3c:9a:65:ed:
c3:5d:8f:f3:4d:cc:3c:54:6d:0c:98:f4:c8:18:15:8b:22:d8:
b8:1f:07:bb:c1:5e:ad:63:32:42:43:19:78:ad:da:b2:67:d0:
6c:19:c4:29:77:8b:37:6a:1b:9f:6e:7a:7b:f4:28:b2:82:4d:
1a:2f:23:75:59:31:b3:1c:f8:42:0e:39:5b:02:4f:b5:d8:c5:
8c:5c:ec:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:24 2025 by rpki-client