Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D13DC06F45D11EF894B8C91762E951A.roa
File: 0D13DC06F45D11EF894B8C91762E951A.roa (raw, json)
Hash identifier: jYUCH5545t++Z89JXDEEl9SA4j2O+Lq2uUYlGywQ2GI=
Subject key identifier: 95:1C:FA:11:26:C7:2C:2E:E8:FF:75:03:9A:78:C1:DE:F5:15:87:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D13DC06F45D11EF894B8C91762E951A.roa
Signing time: Wed 26 Feb 2025 16:16:36 +0000
ROA not before: Wed 26 Feb 2025 16:16:32 +0000
ROA not after: Thu 19 Feb 2026 16:16:32 +0000
asID: 984
IP address blocks: 156.231.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79014 (0x134a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:16:32 2025 GMT
Not After : Feb 19 16:16:32 2026 GMT
Subject: CN=67bf3e64-3c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:71:64:7c:b9:b1:57:20:6d:65:2b:58:c0:
cc:11:17:2b:40:d4:e4:cf:f4:82:a3:1c:c9:97:09:
bb:d0:2f:ef:a0:fd:86:50:3e:e5:8c:a3:e0:c1:bc:
9a:a7:42:e4:bc:84:48:da:83:15:f3:c9:37:18:6c:
d1:5b:ee:9a:53:72:9b:4a:94:1a:4b:3c:a0:9e:f7:
44:0c:55:b6:94:c0:54:2f:78:ec:70:70:18:e8:7a:
ed:9d:13:15:85:a9:bf:48:2f:ad:50:91:65:35:ff:
41:6e:08:0e:46:d3:0a:21:e1:82:6f:09:82:ef:4e:
26:16:02:58:40:46:60:1a:56:12:a3:cc:e0:73:0d:
14:c0:40:55:4c:5a:cf:54:68:16:75:29:c8:c8:94:
aa:a6:92:ce:9f:6c:50:3b:48:c4:4e:79:08:28:3d:
47:f6:5e:1d:2e:55:44:c6:f1:9c:6f:4c:a7:9b:6d:
97:c6:1a:3d:11:6d:b8:95:a9:e2:c2:71:06:b4:55:
65:40:b7:38:b4:98:c8:b9:85:d1:f1:07:1f:11:d0:
08:d8:99:5a:37:b5:16:0a:e4:67:5f:7f:83:f5:93:
b9:40:6a:88:cd:4b:5d:d2:48:72:fb:da:74:43:c2:
88:38:4f:b6:54:7c:d6:5e:16:c5:63:bb:5a:52:a2:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1C:FA:11:26:C7:2C:2E:E8:FF:75:03:9A:78:C1:DE:F5:15:87:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D13DC06F45D11EF894B8C91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.230.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e6:44:ce:82:40:5e:0c:42:51:d3:58:22:11:21:79:91:c8:
55:50:03:39:58:79:11:cf:08:3e:3c:08:77:82:e0:94:77:7b:
62:e7:ba:40:1b:2b:b8:84:bb:e5:07:9e:0d:a8:e6:49:56:8f:
c6:9d:9f:05:34:1e:2e:60:db:ea:e7:af:f8:18:9d:3d:db:e1:
65:5f:54:75:a1:73:1a:aa:c0:77:57:07:37:48:70:d9:30:91:
e0:03:26:0d:5d:fe:d7:f0:76:f7:a1:1b:d8:b8:b5:1a:83:33:
d5:5a:23:d4:53:16:86:8a:d3:10:2a:a6:44:0a:d0:43:82:35:
ff:36:4c:e8:40:da:05:57:1d:81:2a:a6:68:dc:86:12:84:53:
e2:dc:21:d8:b5:36:a0:47:c1:c4:e7:d4:9d:5a:43:bc:a2:be:
cc:7a:32:67:36:0b:7c:81:f6:76:00:14:84:7b:86:54:72:dd:
28:16:6d:6c:c3:17:73:97:71:42:54:06:53:41:40:05:14:74:
b1:4b:61:2c:ce:18:c1:ee:9f:86:a7:0d:c9:03:0d:18:3b:ad:
74:7e:4d:a1:04:83:8b:43:c0:30:62:e9:59:c4:f7:7b:07:a1:
c3:28:0d:35:a8:2f:59:5b:c5:81:af:b8:3c:49:1b:7d:31:e5:
07:02:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:34 2025 by rpki-client