Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10CDB2F4F2CD11EFADD11B5B762E951A.roa
File: 10CDB2F4F2CD11EFADD11B5B762E951A.roa (raw, json)
Hash identifier: AvgtjWrE1zn4KIvk8XBId5wFryBpv9YF4RL3Ti6MwJQ=
Subject key identifier: 34:3F:E0:14:1B:16:E5:38:06:4D:09:F9:3C:3B:F5:D7:4E:95:9E:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10CDB2F4F2CD11EFADD11B5B762E951A.roa
Signing time: Mon 24 Feb 2025 16:33:24 +0000
ROA not before: Mon 24 Feb 2025 16:33:20 +0000
ROA not after: Sat 05 Apr 2025 16:33:20 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 16:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76908 (0x12c6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 16:33:20 2025 GMT
Not After : Apr 5 16:33:20 2025 GMT
Subject: CN=67bc9f53-c676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:a7:14:3d:00:0c:4f:7e:79:ae:a1:9a:61:
4b:e7:85:e8:00:3d:c7:85:f2:d5:f1:98:1e:92:07:
96:f0:1b:ac:50:88:94:6f:cd:2b:87:e8:e4:03:28:
9c:91:3c:9c:5d:4f:85:ae:d4:c8:e2:61:7b:43:9b:
21:d9:fa:ff:89:63:95:dc:e2:f8:45:c4:3f:a5:06:
d2:0b:73:99:dc:c0:b3:65:49:6b:3b:34:7e:e9:e7:
b9:b3:f0:97:b9:18:58:dd:c4:03:2f:e1:93:c2:5a:
00:9f:05:91:63:02:c1:d4:84:98:54:58:4c:b5:b1:
0c:92:01:00:b1:8c:a3:a8:be:9e:51:0b:2d:a8:d2:
20:a9:1d:86:d3:7c:fc:e9:a3:bf:f0:85:83:9c:13:
ae:3a:35:ff:a7:bc:22:d0:0e:4f:74:95:2b:ca:f4:
90:d5:76:00:f6:df:92:44:07:97:f2:e2:ce:6c:bd:
8b:1e:d3:f6:6a:d5:8c:73:7e:32:86:84:53:c7:0b:
05:a3:e1:18:f4:e8:18:9b:91:0e:b9:9b:c8:1e:6d:
b1:6b:01:52:77:a3:28:1b:65:33:a8:46:44:ca:2a:
b0:2a:35:28:03:17:00:15:93:21:a0:55:4c:ad:de:
06:33:31:e0:19:21:95:e7:be:65:8d:cf:e9:fe:b7:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3F:E0:14:1B:16:E5:38:06:4D:09:F9:3C:3B:F5:D7:4E:95:9E:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10CDB2F4F2CD11EFADD11B5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:46:8c:7e:06:f0:a7:c4:9c:d4:c3:27:19:39:2d:0b:28:58:
49:a2:30:46:a2:0a:6b:4a:87:3d:3b:46:1b:43:0b:60:e6:01:
af:c5:fd:2d:a8:0a:96:93:d4:75:b7:e1:d7:34:b5:c1:16:9a:
e8:bd:6b:8e:c1:ff:6e:2e:b7:32:82:05:47:a5:75:c6:34:48:
20:b2:fc:09:a0:6d:a4:c2:26:8c:8c:7a:83:8b:11:37:68:7d:
4d:51:89:c4:37:49:e2:10:d2:71:2f:fe:c7:2e:28:3a:b5:1e:
d7:33:3a:0a:6d:d0:7d:a4:6a:69:4d:00:a7:3a:38:e8:5b:63:
d7:90:b4:d3:b9:4c:f7:5d:a4:0e:39:43:25:a7:25:83:41:f9:
c9:d2:d7:e7:27:04:a9:08:23:fa:a9:84:d2:56:40:64:5e:e3:
c0:b7:e1:05:81:42:82:33:fd:22:69:27:82:af:26:72:66:45:
c9:a2:2c:96:4c:dd:93:30:65:44:fe:78:86:36:ca:9c:ca:6e:
38:4b:eb:a7:9e:1a:c5:8f:43:12:5f:00:be:69:0b:b1:40:99:
0a:6d:e3:d3:c7:78:fc:9d:a7:96:a4:30:75:c6:59:fb:f2:b1:
93:e6:25:83:7a:90:d6:00:46:28:53:56:4d:9e:71:90:ec:8f:
d5:b6:97:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:31 2025 by rpki-client