Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2218B768F34811EF93014DA4762E951A.roa
File: 2218B768F34811EF93014DA4762E951A.roa (raw, json)
Hash identifier: IPgBCanRFuy6A++N42puC5R8L9mBtRnm8A7rMEjB6MQ=
Subject key identifier: 0E:F7:01:5F:47:44:21:3D:88:17:4D:5C:89:83:32:49:8E:D6:59:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2218B768F34811EF93014DA4762E951A.roa
Signing time: Tue 25 Feb 2025 07:14:21 +0000
ROA not before: Tue 25 Feb 2025 07:14:17 +0000
ROA not after: Sat 19 Feb 2028 07:14:17 +0000
asID: 17561
IP address blocks: 156.249.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77218 (0x12da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 07:14:17 2025 GMT
Not After : Feb 19 07:14:17 2028 GMT
Subject: CN=67bd6dcd-2b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:a9:96:82:02:11:3f:4f:b4:64:bc:04:fc:
a5:88:cc:79:71:e2:eb:c0:a5:02:63:90:6a:bc:ed:
18:e6:29:b4:50:76:a8:b8:fc:7f:e7:5d:a7:e3:f0:
1c:a4:2d:e7:cb:d4:a2:94:3f:93:4e:02:44:b9:53:
33:26:15:46:7d:94:df:3d:5f:41:74:ae:a3:06:4b:
18:75:2d:28:90:42:04:7a:bb:cc:01:eb:bd:3c:72:
10:2c:64:fe:7a:cc:e3:5d:30:a9:86:59:5a:d8:85:
50:d5:3a:b2:94:7f:d3:80:6c:d6:95:d6:93:7f:8a:
8f:f3:67:ee:9e:55:ba:19:c8:6b:83:6a:fc:8e:8a:
86:1a:23:3b:61:45:f1:f6:5d:e1:55:fd:d1:22:be:
54:64:40:4e:94:c2:63:18:b7:54:1f:9e:9a:66:a1:
da:7a:9b:c7:4f:52:fd:ad:ed:05:f6:9f:6a:8f:64:
1d:53:46:70:59:11:7f:6e:e5:ca:c3:7b:0b:76:44:
97:54:b5:7b:62:7d:c6:f6:b3:aa:d6:a7:f6:6b:18:
de:3e:1f:7b:02:66:fe:2c:0c:74:77:33:8b:ef:10:
da:d9:6a:23:d8:cc:a5:9b:3d:ba:83:d7:1b:2b:5f:
df:5c:62:90:1d:b5:95:6e:07:68:85:de:58:01:05:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F7:01:5F:47:44:21:3D:88:17:4D:5C:89:83:32:49:8E:D6:59:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2218B768F34811EF93014DA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:95:35:1e:99:22:4e:c0:1d:2d:42:ed:22:d2:ac:6e:23:34:
97:e2:a7:75:b9:ed:bd:a0:a4:bf:dc:1a:d2:a3:8d:33:28:ce:
11:c4:5e:86:0a:60:f5:35:64:e3:03:98:bc:3c:ef:ea:cb:77:
ac:74:da:57:49:c1:b3:85:af:6c:a2:14:61:0f:7f:c8:78:4a:
35:e3:0b:a2:af:92:30:63:3e:8d:9a:ed:b4:ae:83:c9:60:2a:
d6:06:2b:06:bf:39:ee:06:f7:64:b3:4d:07:cf:7e:07:8c:bb:
db:98:93:d0:cd:1e:a8:34:49:d7:5f:d0:fa:8d:c5:02:7b:02:
51:38:05:28:84:b6:7f:f7:87:b3:db:e9:a6:ac:ec:a7:9e:1b:
78:2a:be:bb:9c:0b:6f:c7:f7:dd:b9:e2:bd:bc:42:71:15:cc:
e0:e9:f5:86:4a:f5:a6:57:0a:bc:b1:65:fd:73:10:56:75:bb:
af:46:4c:ac:20:e9:a8:2d:58:f3:74:e2:a1:75:ef:ce:1c:fd:
f1:cb:b9:6a:40:a2:4e:6f:70:ea:43:fe:b0:27:86:1d:ec:5d:
37:17:ac:23:e3:20:fd:57:70:f9:52:79:3b:ec:33:e0:dc:c2:
7f:60:ed:7d:fd:5c:81:95:c4:6c:5f:d8:21:3f:dd:70:cf:b7:
e9:32:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:03 2025 by rpki-client