Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1485039CF45E11EFB82FA498762E951A.roa
File: 1485039CF45E11EFB82FA498762E951A.roa (raw, json)
Hash identifier: Jiq67A05OwnMq089hLzJ49RyP6rOVxkxNR/uMVKpx3s=
Subject key identifier: 89:03:1D:18:E4:E3:DA:C4:76:B9:D1:D2:EB:29:84:1D:A0:1C:74:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1485039CF45E11EFB82FA498762E951A.roa
Signing time: Wed 26 Feb 2025 16:23:58 +0000
ROA not before: Wed 26 Feb 2025 16:23:54 +0000
ROA not after: Thu 19 Feb 2026 16:23:54 +0000
asID: 984
IP address blocks: 156.252.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79032 (0x134b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:23:54 2025 GMT
Not After : Feb 19 16:23:54 2026 GMT
Subject: CN=67bf401e-c2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:3c:1d:fe:4c:93:79:f5:00:14:57:c1:1e:
cd:d9:f1:d2:a9:ce:49:ac:ee:f6:84:b8:4a:1d:a8:
f9:fb:cf:15:84:2e:dc:4b:ba:5c:3a:99:0f:43:23:
86:94:0f:91:a3:a5:32:22:be:60:79:02:de:70:f4:
0b:f1:0b:6c:39:5a:14:38:40:8d:97:f5:fa:fc:6f:
f0:f6:cf:f1:49:0e:57:1d:90:63:72:99:d2:25:7f:
ab:f5:5c:5a:4b:c3:79:c7:fa:ad:3a:96:24:00:d8:
8c:1f:d1:a6:96:82:d1:6b:3b:16:86:ce:0d:c3:90:
03:23:15:25:e9:0f:e3:56:5b:0e:f3:08:4f:cb:09:
c0:4b:40:c7:27:d6:22:cf:fc:e5:b1:d0:35:70:e3:
df:30:a9:94:ae:5d:bb:a6:64:cc:70:77:1a:01:30:
2f:15:f0:1f:c6:b4:4f:d0:8b:6e:04:bb:da:cc:e7:
32:a2:66:c6:1b:c8:3c:00:da:44:05:62:0b:e3:ff:
cd:f3:1a:86:f8:e7:0b:66:e7:b0:98:2b:26:0e:5c:
84:0f:17:78:7b:21:fc:8c:ad:12:8b:68:7f:62:83:
2f:b5:09:7e:c4:90:e1:25:b3:99:8b:2e:15:c9:7e:
0f:47:85:8a:b5:a1:53:ac:08:44:e7:9c:97:db:76:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:03:1D:18:E4:E3:DA:C4:76:B9:D1:D2:EB:29:84:1D:A0:1C:74:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1485039CF45E11EFB82FA498762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.237.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3d:98:84:17:d2:9d:23:10:2d:c2:6d:8c:8b:48:f6:7f:b8:
d7:29:80:7f:a5:db:ff:b2:0d:0c:8b:53:d5:d7:9d:2f:c9:d3:
3e:3f:d8:9b:6b:eb:0c:ca:d9:99:e7:a7:7a:29:ef:a8:69:23:
93:7e:2d:fa:6f:3f:87:68:e8:7b:f3:91:b4:9b:55:5a:e9:ce:
54:81:00:6b:54:f2:be:d9:58:e1:a6:46:ec:e5:03:e8:05:e3:
53:75:bd:b6:67:bb:bc:ed:f5:16:ac:fc:62:1c:d7:eb:2d:59:
c8:b5:de:e6:b7:8b:99:37:f5:95:22:d2:b5:05:90:f9:ef:89:
1a:38:43:e5:f3:66:47:fe:3c:23:46:dd:c5:65:5e:4a:a4:0e:
02:cb:e8:07:03:ed:1c:63:12:6a:27:8a:51:30:de:d6:10:e2:
78:2e:64:94:c2:ce:d5:b6:c0:ac:16:22:b6:98:6d:8d:eb:a3:
64:de:b1:36:51:fa:5a:dd:2c:17:92:92:23:5e:07:6a:80:90:
7a:8b:09:d7:83:e0:cc:9c:13:fd:ef:95:04:c6:2e:60:f9:79:
d7:dd:9c:d1:5b:19:38:6a:73:20:eb:79:01:77:38:03:e2:17:
00:51:d0:08:46:b8:df:da:6e:77:2d:34:62:18:53:07:69:37:
94:98:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:32 2025 by rpki-client