Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1351F7C4062811F0B250785C762E951A.roa
File: 1351F7C4062811F0B250785C762E951A.roa (raw, json)
Hash identifier: vbZdO6tnKfg0ckuMxBB7BfypPe++9jKE7U3Yxfz7C4M=
Subject key identifier: 3C:21:80:AB:BB:9A:3E:42:A3:9D:39:DE:27:58:AC:A4:17:E3:57:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014762
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1351F7C4062811F0B250785C762E951A.roa
Signing time: Fri 21 Mar 2025 07:42:44 +0000
ROA not before: Fri 21 Mar 2025 07:42:39 +0000
ROA not after: Mon 28 Apr 2025 07:42:39 +0000
asID: 59187
IP address blocks: 156.238.97.0/24 maxlen: 24
156.238.98.0/24 maxlen: 24
156.238.99.0/24 maxlen: 24
156.238.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83810 (0x14762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 21 07:42:39 2025 GMT
Not After : Apr 28 07:42:39 2025 GMT
Subject: CN=67dd1874-bbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:31:26:05:0a:48:ee:ad:58:96:49:d9:0b:
56:38:c8:42:27:ca:5e:60:9f:f3:1b:b7:78:05:5c:
5c:2f:03:53:76:18:fc:60:b5:8b:22:45:2b:69:0f:
f6:f2:e7:d1:1c:96:b2:5d:3d:44:c7:5e:d8:c8:42:
30:a7:6b:2a:07:db:7d:2b:39:3a:34:22:0d:0f:47:
d4:96:8d:fb:ab:20:d1:af:09:de:dd:f6:59:9d:76:
29:d7:36:6d:d0:d1:39:9b:b7:b6:3b:e7:eb:74:0f:
87:41:10:83:d4:56:b0:d7:57:c9:30:2d:af:03:c5:
7d:c0:07:ec:21:82:c4:79:4e:7a:62:e0:0c:88:b2:
2b:7a:53:ce:b7:eb:ba:48:61:15:5c:ba:84:bd:7b:
83:cd:9f:a3:ca:12:31:a7:dc:41:7e:b2:b1:d1:9e:
4d:eb:b6:d8:2a:1a:2d:0b:6e:53:88:d5:9a:4d:83:
c9:0b:d5:50:d0:0e:9c:ae:80:f0:b2:2f:f3:72:3e:
f8:50:34:b9:85:6a:3b:90:0d:e8:5c:a5:07:a2:a2:
40:3d:23:c6:62:20:eb:91:3e:a9:b1:58:6f:e5:81:
2b:4e:c1:28:e2:a7:ad:b9:eb:4d:08:3b:27:5c:32:
5f:98:96:d8:11:fa:ec:a8:8a:d8:f5:15:07:08:89:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:21:80:AB:BB:9A:3E:42:A3:9D:39:DE:27:58:AC:A4:17:E3:57:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1351F7C4062811F0B250785C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.97.0-156.238.100.255
Signature Algorithm: sha256WithRSAEncryption
5f:78:2d:aa:c7:e1:8a:99:67:b5:0d:4a:be:b0:4c:64:20:d4:
98:f0:31:77:0c:8a:6a:63:37:40:24:f1:58:f9:a6:6b:ba:2c:
0a:01:bd:99:35:bc:4d:da:df:9e:02:12:61:bd:b0:86:33:d2:
ac:86:5b:a3:bd:94:19:03:0f:af:da:62:b3:c1:91:4c:65:fa:
bf:ba:ab:03:84:04:fa:12:cd:7f:46:6d:04:5e:19:4a:90:3a:
f1:54:44:05:6e:a5:90:0f:9f:7d:67:0e:7c:be:a7:6d:0a:d0:
93:b7:3a:63:f4:74:b5:6d:98:88:f5:ae:12:ef:92:82:ce:87:
c7:af:cb:06:fa:5d:08:36:aa:4f:68:7f:47:28:07:d9:f4:8c:
65:c8:77:d5:6e:ad:b5:6b:87:56:39:f3:76:c0:02:fc:ad:96:
01:bf:94:ff:c3:83:fa:69:01:6d:e3:25:51:1a:14:91:7a:5a:
4b:a9:a6:8e:6b:68:4f:33:a7:95:c6:27:ea:6c:c8:b0:55:33:
5b:ab:19:4d:ac:9e:ab:7b:21:20:4a:75:bf:15:c0:cf:d9:03:
08:b2:bc:85:fb:a5:fb:69:0c:79:79:d3:9d:00:88:e0:f3:e8:
c3:00:74:04:45:f6:3c:b5:38:87:69:d5:d0:13:33:7a:9a:09:
67:e6:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:48 2025 by rpki-client