Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/148A539A0CD911F097B3DA43762E951A.roa
File: 148A539A0CD911F097B3DA43762E951A.roa (raw, json)
Hash identifier: Y1DLyz6MkdAxItNfcMMr0aMNTqrikWiEuMO0l4cS8mE=
Subject key identifier: 38:F3:5A:A8:1B:EB:DF:50:D5:17:1B:91:4E:2A:C9:C1:F4:0A:A8:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014914
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/148A539A0CD911F097B3DA43762E951A.roa
Signing time: Sat 29 Mar 2025 20:04:54 +0000
ROA not before: Sat 29 Mar 2025 20:04:49 +0000
ROA not after: Fri 01 Aug 2025 20:04:49 +0000
asID: 21859
IP address blocks: 156.241.129.0/24 maxlen: 24
156.241.133.0/24 maxlen: 24
156.241.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84244 (0x14914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 20:04:49 2025 GMT
Not After : Aug 1 20:04:49 2025 GMT
Subject: CN=67e85266-92d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:22:51:7b:ce:7f:50:7f:84:07:63:2b:36:
b9:c6:8c:5a:0b:fb:96:7c:e1:88:69:d5:57:da:84:
99:3c:4b:8c:88:ff:df:8e:24:02:4d:74:a6:67:fa:
7b:d7:1f:4e:b1:82:c9:d0:e5:4a:62:71:90:59:7f:
37:1b:70:a4:08:9a:4a:2b:dd:33:0b:59:ab:6c:81:
a8:60:55:34:9a:ca:b0:27:55:21:1c:8b:54:b5:b8:
9a:e6:7b:f7:7c:f7:b5:41:43:50:b6:b7:01:0f:24:
da:19:16:64:49:b8:56:22:60:f1:f5:f1:43:c5:72:
94:9f:55:d1:38:16:b6:28:13:c4:d5:4d:74:76:88:
a4:62:f3:a7:3d:fb:b6:e0:00:40:da:86:6c:c3:c8:
f6:8d:d9:09:62:fb:fc:03:28:86:b3:76:11:6c:27:
ca:51:51:b3:c1:21:11:96:25:74:e6:18:ff:19:c1:
18:13:5b:66:e2:82:04:6c:b7:97:ee:50:30:ec:1e:
cc:d5:da:3a:ff:4c:05:30:6c:2f:f5:fb:b6:47:e4:
39:de:c8:7b:8c:a2:02:f5:82:46:a7:28:ef:d0:de:
5f:fa:68:44:06:da:68:f6:b1:87:e0:d2:1b:2c:90:
62:07:1f:6b:0f:43:b8:8f:6f:d5:1f:d6:a4:5f:60:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:5A:A8:1B:EB:DF:50:D5:17:1B:91:4E:2A:C9:C1:F4:0A:A8:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/148A539A0CD911F097B3DA43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.129.0/24
156.241.133.0/24
156.241.135.0/24
Signature Algorithm: sha256WithRSAEncryption
69:52:c0:11:0c:a2:e1:7c:33:ae:6a:d0:b0:04:ec:c9:4e:e5:
1b:74:39:f9:b9:fe:fd:4c:a6:3e:08:33:13:83:59:3b:8e:6b:
cc:a3:4d:54:25:5f:3b:9f:c0:b4:8b:0b:e9:34:12:87:3a:7a:
de:3c:e7:a7:8b:0a:64:be:1b:dc:8d:b2:72:d3:4a:14:ff:97:
57:42:ec:bc:ad:8f:e5:8f:46:19:14:00:af:69:f1:3c:62:a1:
da:43:1e:91:3f:47:2a:e4:c8:5f:48:c3:2a:61:b4:0d:fd:1f:
ce:d1:cb:8f:fc:44:6f:c5:55:20:1f:78:c3:94:42:d9:48:4b:
4a:76:13:09:91:00:f9:bf:46:25:68:66:34:37:89:1b:f3:e1:
3b:5d:2d:4c:3a:1d:08:d5:e5:6e:a9:b5:6d:39:03:19:c8:45:
15:21:ad:c1:13:a8:0c:16:8a:21:dd:4b:e1:1e:04:a5:26:ef:
45:2c:52:4e:11:77:41:dd:05:29:cc:28:83:58:36:5c:6f:ee:
69:1a:fa:20:b9:4f:a2:86:ab:53:95:7c:20:a9:31:36:5d:59:
44:68:56:07:ac:c8:85:22:66:dd:ae:60:aa:13:34:81:d9:fd:
3d:90:d9:e0:9b:28:8b:5f:92:b3:2e:88:15:1b:20:7e:94:be:
5e:a0:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:50 2025 by rpki-client