Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DA901A0190511F0AB937E086EB8BCC6.roa
File: 1DA901A0190511F0AB937E086EB8BCC6.roa (raw, json)
Hash identifier: ousKDx3/Vx+y74QBqBr5bnOWvhhNnmgGwcSnw1nPgjc=
Subject key identifier: 4B:CA:F2:C9:77:44:27:36:BF:9F:24:05:DA:DE:BF:53:C8:23:6B:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DA901A0190511F0AB937E086EB8BCC6.roa
Signing time: Mon 14 Apr 2025 07:50:21 +0000
ROA not before: Mon 14 Apr 2025 07:50:17 +0000
ROA not after: Tue 22 Apr 2025 07:50:17 +0000
asID: 395881
IP address blocks: 156.253.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Apr 2025 07:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85002 (0x14c0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 14 07:50:17 2025 GMT
Not After : Apr 22 07:50:17 2025 GMT
Subject: CN=67fcbe3d-ff6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:e0:69:72:41:c7:fc:10:79:39:ea:8e:f5:
93:bc:7f:67:c0:1b:58:9e:d8:c8:96:cd:2a:32:83:
f9:b1:0c:3f:d7:d0:1f:0c:b2:51:ca:d3:69:21:e1:
9a:a3:d5:25:99:2c:54:62:dd:39:a8:93:db:15:a1:
3d:88:0d:8c:9c:86:f9:ab:e2:05:e6:71:79:21:70:
d9:a2:b1:4b:ea:3a:ee:0d:d1:7b:d3:20:1b:1d:71:
c7:0a:e7:73:7d:ed:5b:9f:07:ff:61:fa:d5:00:04:
06:c0:62:8c:a0:af:b2:8a:58:f6:5c:e4:9c:dc:a9:
19:88:3a:67:84:3a:73:07:bd:06:b2:1a:dd:2e:48:
db:fa:32:d1:61:7a:84:8c:b3:29:95:7b:95:6c:78:
c9:42:b2:ab:ac:d4:e7:6c:f0:e7:d5:b7:79:06:1e:
04:58:86:fc:10:56:6a:8f:f9:53:a0:d4:55:a0:28:
96:bd:14:ef:19:43:a0:57:78:9f:aa:5e:ce:26:fe:
ea:c3:a1:c3:10:98:37:5c:94:66:fa:d6:01:96:d6:
95:bc:76:d5:50:e4:1b:81:65:d4:42:5e:d5:32:9f:
56:b6:aa:40:13:76:aa:8c:58:47:66:c9:69:6f:95:
de:6d:4c:4b:b0:23:5f:17:9e:79:17:9c:97:7a:93:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CA:F2:C9:77:44:27:36:BF:9F:24:05:DA:DE:BF:53:C8:23:6B:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DA901A0190511F0AB937E086EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.235.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:36:5c:c7:b6:a9:0c:0a:a1:24:b3:5b:9f:b3:5a:1c:95:91:
88:69:48:bc:69:a1:15:5b:9e:2c:be:0e:4f:ed:ed:c5:1c:e4:
b8:f1:b8:d5:9c:12:f6:7b:62:62:80:2a:8d:a1:f6:00:e5:6b:
96:5b:11:4b:68:64:c9:88:f5:c6:59:e7:08:16:2b:63:b9:48:
2a:83:47:f1:cb:48:c7:96:9f:7a:64:eb:1e:f6:0f:38:e4:d2:
62:f9:45:52:75:51:9b:d7:d5:a6:a3:de:94:af:1f:da:93:b3:
d7:e6:ff:d3:9f:46:fd:43:fc:0b:97:7b:8d:d0:83:e6:f8:c3:
ef:6c:04:9d:25:af:bf:2a:22:4e:c1:28:f3:da:eb:16:b3:24:
73:e5:3e:88:42:09:57:b6:94:af:d9:f7:64:f8:e0:8a:35:c0:
e1:6a:07:d5:79:c4:8b:04:52:79:4c:e0:dc:ee:66:34:e5:bc:
3d:36:fb:9f:7c:0c:e4:ca:9b:dc:cc:70:fd:87:54:d5:32:ce:
6c:26:4a:97:cc:13:dd:d6:4c:8b:ca:93:f0:d6:df:d1:06:c1:
31:c2:9e:90:7a:09:5d:c8:fd:0d:05:07:9b:c8:e6:d9:db:3b:
e8:e8:6c:69:26:f0:9b:45:fd:77:1a:68:3d:c2:08:2c:71:38:
33:9f:be:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:46:57 2025 by rpki-client