Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2406B514F42B11EF8EC7D7AF762E951A.roa
File: 2406B514F42B11EF8EC7D7AF762E951A.roa (raw, json)
Hash identifier: BL78YDKsP3xnpSVkF5Yy3YOhLpYzfwwh25AhQPVyd4c=
Subject key identifier: BB:35:49:CA:A8:1E:69:55:CC:D9:E0:75:FC:DF:C5:07:E4:FF:32:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2406B514F42B11EF8EC7D7AF762E951A.roa
Signing time: Wed 26 Feb 2025 10:19:20 +0000
ROA not before: Wed 26 Feb 2025 10:19:16 +0000
ROA not after: Thu 19 Feb 2026 10:19:16 +0000
asID: 984
IP address blocks: 156.230.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78061 (0x130ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:19:16 2025 GMT
Not After : Feb 19 10:19:16 2026 GMT
Subject: CN=67beeaa8-c04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:ab:b8:6a:6b:17:dd:cc:5c:a1:f5:9c:d4:
0a:a8:45:79:b6:4a:19:d8:ad:8d:13:65:87:ce:4d:
d6:a5:8a:7e:b9:f3:a6:f7:0f:30:3c:eb:52:1d:38:
21:16:1b:91:2c:5d:58:c3:04:9d:0d:ff:4f:57:e9:
45:41:12:c3:a9:58:e1:14:b3:16:5a:e6:da:e6:db:
d8:52:95:06:ae:19:34:78:76:82:ae:71:9f:52:cf:
67:84:41:df:cf:5b:60:f5:e9:4e:db:30:35:7e:4c:
7b:37:3c:cb:53:94:64:53:31:9e:82:59:c1:84:8b:
9f:06:e3:59:21:8d:03:2b:54:5a:fb:2d:54:9a:91:
b1:3c:e4:d5:b3:e5:35:ce:90:03:00:e5:47:18:2a:
5a:dd:d0:4e:02:b7:1b:a5:81:f8:9a:95:6e:f0:54:
7b:1a:ae:89:ae:b5:56:0d:79:d7:8f:bc:11:9e:02:
13:50:10:82:ac:59:9e:e3:36:3a:a3:d8:bd:71:84:
64:29:e4:40:b2:82:3e:64:1f:f1:c0:55:8a:04:3c:
ef:bb:25:ad:c6:39:ef:bf:09:c6:b7:d0:e2:ba:4b:
94:2e:f7:82:f6:3e:3c:91:25:e0:36:0c:41:01:a9:
29:06:a8:b9:51:16:d2:df:89:20:78:5f:e4:e3:e1:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:35:49:CA:A8:1E:69:55:CC:D9:E0:75:FC:DF:C5:07:E4:FF:32:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2406B514F42B11EF8EC7D7AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.147.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:04:56:d0:3a:1e:f7:86:b1:22:fb:8e:56:2c:3e:b0:11:9b:
f9:3c:b9:f1:df:d0:c1:ee:28:cb:68:57:6e:63:71:05:2c:37:
01:09:95:88:d1:2c:e3:70:27:29:18:77:f8:8c:ff:30:60:61:
48:76:e8:e7:b2:57:63:10:da:c6:f7:ae:2a:15:ab:79:d2:50:
aa:4f:c0:8c:ef:59:4c:74:41:02:6c:4c:8c:51:48:ea:19:d9:
c4:67:90:8d:43:52:0f:4e:50:77:45:cd:9a:60:20:55:fa:27:
1d:c2:b4:c7:c6:75:d2:58:7e:ed:aa:cf:57:34:8a:a7:26:85:
99:05:61:3f:5b:ee:ac:29:03:bb:0b:6f:66:cb:f2:5a:aa:30:
2d:4c:b1:9e:46:0a:48:19:22:69:78:e9:ad:a7:6f:94:1d:b3:
f4:3a:7a:43:67:16:cd:f3:a0:31:95:89:f5:03:cf:4a:30:35:
a7:0e:79:8f:4f:da:dd:2d:62:c0:1d:98:aa:37:51:3d:27:82:
60:8a:d3:1a:0f:27:2f:3b:5e:69:a9:24:b2:5e:27:ed:22:2f:
bd:8d:96:86:fc:f3:ae:26:3b:a5:f0:b0:7d:35:4c:14:d9:7d:
6a:61:02:67:c6:6c:f1:d3:12:f2:fb:7c:07:9f:55:ca:51:f6:
86:6b:60:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:12 2025 by rpki-client