Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/295062AEF4AD11EF92DB2CBA762E951A.roa
File: 295062AEF4AD11EF92DB2CBA762E951A.roa (raw, json)
Hash identifier: nTLWmvfK+1YGyw7em2EYkMxknoGDZPC1r4R/yaNU0c8=
Subject key identifier: 21:8F:68:44:24:CC:5A:04:A0:A1:FE:33:6C:EF:0A:9E:F2:6C:CB:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01389E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/295062AEF4AD11EF92DB2CBA762E951A.roa
Signing time: Thu 27 Feb 2025 01:50:03 +0000
ROA not before: Thu 27 Feb 2025 01:49:59 +0000
ROA not after: Thu 19 Feb 2026 01:49:59 +0000
asID: 984
IP address blocks: 156.236.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80030 (0x1389e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 01:49:59 2025 GMT
Not After : Feb 19 01:49:59 2026 GMT
Subject: CN=67bfc4cb-65c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:e8:5d:4f:e7:bd:31:f9:32:dc:11:3f:75:
cb:58:9f:85:d5:cd:fb:2e:17:a8:c4:39:c2:0c:da:
f8:bf:41:07:0a:2a:c4:59:e6:62:7d:54:d4:e8:69:
ed:ab:0e:c8:1d:c1:fb:19:c1:11:dc:34:c6:b8:62:
d6:4a:44:36:ce:bf:9e:e3:b3:d5:e4:8e:41:90:6d:
fa:4e:fc:2f:83:63:ef:36:22:15:7b:0e:b3:c9:db:
03:cd:dc:4f:45:aa:94:09:c0:d5:b6:a4:77:50:dc:
61:57:b3:3a:c5:ba:54:5f:e0:0f:33:cb:5a:c5:08:
36:fe:e5:e1:16:de:d8:3b:9e:9e:0c:29:87:4a:fd:
e1:63:4d:82:ca:c7:e3:55:ea:ac:49:84:36:68:43:
16:36:a5:ff:a4:4b:d4:07:81:3a:48:b2:e4:0d:79:
a1:c9:05:11:22:e8:75:18:b9:b1:78:eb:83:32:7b:
2b:52:65:d6:43:cb:68:b3:aa:a8:d1:90:7b:c3:3b:
0a:34:97:c7:68:5e:15:20:2c:2a:98:5c:88:43:02:
6c:24:4d:db:4e:5d:ed:95:7a:c8:5f:23:95:b3:87:
1d:81:88:45:ea:de:37:11:5c:28:15:91:f1:b9:1d:
89:43:34:92:9d:42:99:0c:75:5c:63:6f:30:21:fe:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8F:68:44:24:CC:5A:04:A0:A1:FE:33:6C:EF:0A:9E:F2:6C:CB:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/295062AEF4AD11EF92DB2CBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c1:0e:70:11:af:f6:8d:97:56:19:9f:8c:b9:67:e5:b2:4d:
07:f5:ca:49:d6:c3:9b:54:00:3d:90:a8:3c:7a:2f:85:72:85:
72:a7:2d:0e:d6:e7:a6:98:41:e1:b2:da:a8:b9:af:8d:ce:d7:
de:bf:15:e7:cc:37:88:8e:9b:be:2a:af:ed:ee:ea:62:34:07:
5d:31:2e:29:38:81:3d:e9:d2:3c:8e:ec:62:03:b8:0c:b1:03:
1f:59:cf:b0:a7:68:c2:d7:e5:11:bd:d6:b3:91:7c:de:5c:fe:
50:20:65:b5:ff:13:fa:f6:d1:e7:14:a0:e0:92:cb:13:e4:64:
e6:93:0a:34:d0:31:1b:c6:01:d5:42:1b:9b:d3:1a:94:ad:fe:
43:e1:fb:9f:91:73:91:9a:47:36:ee:a0:4f:dc:f4:b8:43:c0:
35:bb:e7:91:af:e3:8c:3d:7b:c2:57:b7:c3:a3:67:95:f8:a5:
fd:7b:7d:6a:04:0b:a8:32:67:70:ed:6f:99:3a:56:0d:a0:15:
d3:7e:3c:7a:06:64:b9:2b:b4:4d:99:1d:42:84:1e:97:9d:09:
b9:0e:0a:b2:dc:d3:12:26:01:71:f2:d2:5c:95:eb:b7:c3:64:
d5:43:b6:02:72:f8:dc:d5:11:d0:5f:07:2a:4b:bb:3a:88:ec:
61:f8:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:10 2025 by rpki-client