Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25AFB96AD24311EFB6A87096762E951A.roa
File: 25AFB96AD24311EFB6A87096762E951A.roa (raw, json)
Hash identifier: CwjMTaOyzUKSEO3BuRWSw8UxQeiO+vEocRq4ArQ77xo=
Subject key identifier: F5:75:9D:E2:8D:01:A8:40:74:92:E0:F4:B4:58:4A:B7:A6:8B:98:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25AFB96AD24311EFB6A87096762E951A.roa
Signing time: Tue 14 Jan 2025 06:45:31 +0000
ROA not before: Tue 14 Jan 2025 06:45:27 +0000
ROA not after: Thu 15 May 2025 06:45:27 +0000
asID: 400619
IP address blocks: 156.224.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67260 (0x106bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 06:45:27 2025 GMT
Not After : May 15 06:45:27 2025 GMT
Subject: CN=6786080b-72ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:70:d0:c6:7f:c1:7a:82:cd:4b:f2:33:98:
04:bb:7c:8a:60:17:fe:42:5e:f3:af:20:88:55:ab:
4a:8a:e3:21:10:4e:d7:44:fd:ea:c4:ce:6c:46:20:
f8:82:b4:5f:eb:fd:a9:d8:df:a9:ba:8f:1f:2c:70:
e4:cf:c4:a3:71:2e:07:1b:82:fe:c5:58:c2:f7:6d:
22:2b:32:4e:85:80:ba:f5:2c:3a:61:67:d3:f3:33:
34:c4:31:d6:e2:64:55:39:65:de:7c:29:1d:70:19:
a8:51:73:0b:c2:0f:af:01:a6:22:0a:6b:19:99:68:
b6:bf:09:fe:06:b1:a6:5c:5d:58:7a:0d:e4:fe:95:
13:72:70:80:ac:ca:65:2d:83:db:8f:cb:cf:25:74:
9f:bc:f0:e6:77:30:5e:b7:5e:83:14:70:70:bc:8b:
70:06:12:58:0e:3c:5c:2e:ca:d2:53:2a:38:0f:a7:
4c:47:fa:16:b2:3f:80:ce:5b:ac:56:01:94:b2:6c:
bc:c5:df:45:de:3d:97:f4:ec:9c:14:c0:c4:4a:ce:
02:6a:08:1d:b5:1b:51:52:51:2c:4f:42:18:4e:94:
25:23:33:07:bf:a9:c9:a9:42:6c:25:8b:46:40:93:
ca:2f:fe:c8:78:15:4e:62:af:e9:d8:0d:ff:57:e0:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:75:9D:E2:8D:01:A8:40:74:92:E0:F4:B4:58:4A:B7:A6:8B:98:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25AFB96AD24311EFB6A87096762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:55:16:0d:a7:1b:dc:23:cf:ee:90:7b:04:1d:15:3d:1c:ea:
78:38:4f:f6:d9:0f:40:5a:fd:a0:dc:63:72:ec:ac:4b:dc:8d:
c4:ca:82:3d:64:2e:1b:dd:6d:f3:eb:8a:bd:36:e6:dd:ee:a1:
cd:c7:3a:ea:45:d0:e1:b2:6e:61:67:b0:80:c3:80:f6:c7:2e:
ba:45:9e:5c:20:50:38:ae:31:00:8d:d9:4d:cb:43:cb:2d:51:
71:65:e4:29:6b:45:39:fe:7e:42:1c:a7:ff:9f:17:64:e3:8c:
4e:d7:31:8a:24:29:c2:7f:30:0c:2f:b1:32:79:00:61:48:71:
8a:08:1a:d5:e8:d3:da:fb:07:02:ce:d3:52:61:00:f7:97:67:
a8:76:79:70:07:73:9c:bd:e5:75:42:11:a8:b6:d4:69:59:a6:
dd:64:83:01:4f:51:21:7a:5c:51:97:f8:0f:65:c7:85:fb:74:
da:d6:84:41:fb:03:84:1b:3d:26:8f:64:2b:84:df:ca:af:8a:
c8:70:59:69:93:1f:51:07:6a:e9:99:8a:77:c2:66:da:8b:ac:
36:fe:80:0b:20:20:61:02:e5:2d:50:d7:fa:62:a5:b9:88:44:
41:cc:ab:42:47:37:db:1f:c1:6d:88:b7:a3:ef:19:cc:d3:9d:
bc:c6:27:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:40 2025 by rpki-client