Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B9F67E0018811F091EF414C762E951A.roa
File: 0B9F67E0018811F091EF414C762E951A.roa (raw, json)
Hash identifier: IbLXf+KiSGBTrLtpW0WVPNr2gJH3nUHHDBUD6cw01h4=
Subject key identifier: 39:3A:66:5D:FC:A6:6E:CF:A3:B7:58:40:68:D4:C7:77:8E:5C:51:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014646
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B9F67E0018811F091EF414C762E951A.roa
Signing time: Sat 15 Mar 2025 10:27:07 +0000
ROA not before: Sat 15 Mar 2025 10:27:03 +0000
ROA not after: Mon 21 Apr 2025 10:27:03 +0000
asID: 39600
IP address blocks: 156.237.111.0/24 maxlen: 24
156.237.117.0/24 maxlen: 24
156.237.118.0/24 maxlen: 24
156.237.119.0/24 maxlen: 24
156.237.120.0/24 maxlen: 24
156.237.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83526 (0x14646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 15 10:27:03 2025 GMT
Not After : Apr 21 10:27:03 2025 GMT
Subject: CN=67d555fb-4298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:ea:1e:66:2a:55:43:2a:07:79:a8:11:47:
d4:c1:7f:18:3f:98:27:4e:6b:1c:d1:25:7b:28:3a:
27:44:7a:e3:4c:6d:bc:6f:a0:17:c9:d0:80:28:ad:
1a:06:d7:c2:d1:33:7f:4f:6d:a1:cc:30:65:d8:41:
c5:f3:77:69:c1:12:a2:d9:26:fa:a9:57:ba:64:7a:
24:e8:d1:5d:78:cc:cc:18:9b:8c:90:3b:38:e4:f6:
53:56:13:82:e0:49:45:ad:cd:bf:89:20:55:46:3a:
8c:15:b9:d8:a8:c0:c6:bc:67:f4:bf:00:ab:c6:ee:
1a:2a:d3:b6:b9:40:83:de:b6:e6:bb:9e:b2:ac:7e:
31:2b:ba:74:72:73:08:d7:36:20:eb:fc:26:fc:85:
b3:61:56:c9:70:90:fe:87:ba:22:aa:30:b7:b7:03:
7e:1a:97:78:3b:cd:a0:ee:34:87:79:fb:c7:28:ed:
62:7a:05:1c:08:3f:00:70:5f:33:9c:0f:7e:b5:1c:
8d:5b:b4:a3:e9:79:80:f7:a6:39:56:27:4d:e9:3f:
4c:c7:a1:5a:cf:4d:56:f5:3f:26:08:56:ac:be:e9:
d0:0c:d6:3f:66:e5:9b:e7:42:4a:01:24:68:25:3c:
4e:d3:0d:fd:04:94:a9:22:f3:aa:ef:53:78:6d:e0:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:66:5D:FC:A6:6E:CF:A3:B7:58:40:68:D4:C7:77:8E:5C:51:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B9F67E0018811F091EF414C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.111.0/24
156.237.117.0-156.237.121.255
Signature Algorithm: sha256WithRSAEncryption
56:4b:09:68:6d:7a:16:97:e0:88:69:a3:91:fc:39:35:25:1f:
2d:c1:46:6e:19:b6:b0:b6:bb:e9:54:81:3e:a1:91:40:4f:71:
a7:ef:cb:45:b1:da:89:3c:b5:b5:c3:fc:36:ae:93:53:64:d2:
a8:34:bd:01:e2:fe:92:95:b0:95:63:8c:3a:b0:f4:ad:09:c9:
a6:da:e1:7d:40:84:a1:b1:38:c5:32:90:45:cb:8c:32:68:34:
54:3b:b2:a0:18:47:bc:ac:e1:67:a2:13:9c:35:2e:d3:ad:63:
b9:7c:de:20:81:b4:57:f1:15:cf:bb:20:a7:be:9d:57:17:be:
42:4e:68:62:5a:fd:bb:da:d1:19:7e:bc:76:57:9e:c4:aa:14:
3f:44:39:7d:17:a9:1f:56:ea:36:08:70:dc:43:de:68:6d:e7:
e3:c1:88:76:4e:c3:be:bc:d1:da:0e:7a:3f:7f:0e:41:cf:84:
ec:4f:61:fd:b8:4c:b2:92:06:cd:fe:e3:68:f2:22:b9:c1:96:
fa:a1:18:fd:9e:54:1b:8c:30:89:36:d8:72:6d:ee:0a:d5:fa:
be:fe:b7:a3:41:fc:50:28:64:89:4e:a5:ff:81:87:63:55:f7:
6c:47:d5:23:96:ad:96:4a:26:68:ff:7b:02:90:b7:80:be:7f:
13:50:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:55 2025 by rpki-client