Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CCD1440F80B11EF95DDD8BC762E951A.roa
File: 0CCD1440F80B11EF95DDD8BC762E951A.roa (raw, json)
Hash identifier: utU1Y5Y0975+tFxcep5IhTOg2U5sHhbbxbBMEXHydhc=
Subject key identifier: 67:8C:48:2C:03:76:1C:CA:81:B1:96:E9:23:8A:7A:A7:16:BC:27:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0140CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CCD1440F80B11EF95DDD8BC762E951A.roa
Signing time: Mon 03 Mar 2025 08:39:41 +0000
ROA not before: Mon 03 Mar 2025 08:39:38 +0000
ROA not after: Mon 21 Apr 2025 08:39:38 +0000
asID: 63139
IP address blocks: 156.229.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82127 (0x140cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 08:39:38 2025 GMT
Not After : Apr 21 08:39:38 2025 GMT
Subject: CN=67c56acd-f0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:52:83:01:9a:30:4b:00:9a:9b:22:a3:62:
75:a4:bf:0a:36:8b:f2:f1:92:6f:fe:81:a6:ae:60:
15:79:8a:77:f0:91:39:1c:f8:85:34:cd:d2:8d:48:
7b:d9:ae:24:79:02:0d:60:cf:df:a0:fe:89:98:f3:
dd:92:4c:0c:e7:c4:0e:67:a8:84:d4:4a:61:24:b5:
5a:57:60:13:55:05:4f:5b:1d:ac:d9:1e:8a:7e:88:
a4:ab:91:61:c0:69:29:13:81:de:69:96:07:9f:ff:
5f:da:97:91:fc:c6:43:de:f2:c1:b8:da:33:8c:ea:
ad:dc:c3:cd:df:ac:d1:b2:72:79:00:1f:10:f4:34:
04:68:6e:42:6c:77:13:ab:86:83:2c:96:67:19:1b:
ea:c5:4e:ab:39:4f:3b:c6:8e:aa:b7:43:d4:24:e9:
c4:44:c4:4d:ab:1c:03:72:ba:e3:99:49:cf:78:01:
b1:8e:9c:0b:7d:0b:7f:80:fc:a3:fa:44:20:cc:d7:
12:cf:c5:58:d5:89:70:a6:2e:b2:68:ce:63:f5:e1:
24:2a:b9:b5:06:99:e1:b4:e9:6e:77:8b:50:5c:fc:
14:ff:17:84:9c:38:da:54:f4:e9:b2:fd:9c:34:f2:
4d:7e:2b:20:e5:9d:b2:5d:37:2c:16:c0:47:7c:c6:
02:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8C:48:2C:03:76:1C:CA:81:B1:96:E9:23:8A:7A:A7:16:BC:27:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CCD1440F80B11EF95DDD8BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.49.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f2:00:b4:85:5e:16:8e:ff:b2:7f:dd:9f:c3:2a:99:83:d1:
7a:9a:9c:d7:14:ea:13:54:f9:a1:20:86:d9:28:a1:a6:ef:9c:
f6:cc:1a:fa:af:d0:d5:7b:4b:38:fd:09:50:60:62:bc:b6:51:
e5:c0:31:d0:7f:77:27:fe:2b:03:d1:43:9a:87:1c:46:26:6f:
69:2d:28:65:de:61:36:d1:1f:88:7e:a1:93:45:26:26:aa:7c:
8d:f3:68:10:5e:80:48:e9:7a:67:d1:32:12:5b:40:a3:53:8a:
a1:2f:ed:12:ea:18:84:98:33:a0:8f:37:9b:7c:60:8a:ee:87:
ab:e6:a3:c2:3a:c6:ca:ba:64:6a:c0:fc:f7:c6:8a:15:43:e2:
01:dd:eb:d7:dc:8e:39:64:cf:69:da:0b:6d:a9:a9:a3:12:30:
ff:80:46:a6:af:aa:a5:8f:ef:de:23:d0:a5:17:5a:e4:94:6d:
47:be:3b:8e:05:c8:43:c7:77:b9:7e:a6:fc:a8:fc:a5:be:2c:
d1:ec:10:9f:17:7a:bd:d7:02:8d:aa:c2:2a:cb:44:d8:44:c0:
9f:30:ac:bb:ef:0e:bb:fd:04:52:1a:1f:6b:5b:b7:62:17:8f:
4d:13:16:cf:48:d5:46:18:d5:a5:0f:48:50:1b:82:a5:5e:8c:
ff:b5:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:52 2025 by rpki-client