Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29F4AD0AF43011EFBAB0BF55762E951A.roa
File: 29F4AD0AF43011EFBAB0BF55762E951A.roa (raw, json)
Hash identifier: rAfwWsNOHJfZpviWkP2lFgC8ZsbhzYcmR68IXTLiyXQ=
Subject key identifier: B1:8C:6C:0F:40:FA:6C:3A:3B:AA:6A:13:40:1A:B1:34:85:2C:98:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013179
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29F4AD0AF43011EFBAB0BF55762E951A.roa
Signing time: Wed 26 Feb 2025 10:55:17 +0000
ROA not before: Wed 26 Feb 2025 10:55:13 +0000
ROA not after: Thu 19 Feb 2026 10:55:13 +0000
asID: 984
IP address blocks: 156.252.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78201 (0x13179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:55:13 2025 GMT
Not After : Feb 19 10:55:13 2026 GMT
Subject: CN=67bef315-156a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:26:1d:90:21:35:9b:ea:26:0f:a1:37:72:
3c:81:04:6f:e7:45:0f:1b:65:1c:f5:ce:b1:52:23:
25:da:0d:c2:4d:82:aa:0b:3e:c4:e9:18:06:63:73:
ea:1a:18:92:c0:a9:e9:75:f1:8a:d7:4c:de:8b:13:
e7:00:ff:48:02:b8:cd:7c:d1:f2:6b:2a:03:2d:8a:
57:d4:89:f3:d7:25:0b:f4:e3:dd:1a:e6:6a:4d:34:
94:61:ab:81:3a:4a:e0:e9:ba:00:37:7f:2d:d5:be:
cf:ef:cd:74:6d:1f:b1:1b:3f:42:79:bf:e5:29:7a:
6b:f8:b4:79:01:b0:b3:05:de:43:8f:77:11:4e:d5:
e9:ac:7e:18:3d:08:e6:4d:b7:1f:a5:67:37:06:8d:
88:f9:c9:3f:db:c8:d9:ce:6a:2c:56:f1:01:4f:e3:
3b:47:10:38:d0:cd:ae:79:b5:4a:d7:8d:a2:ff:0f:
80:13:0e:2f:a7:14:91:1e:82:2e:bf:f1:0c:82:e5:
9f:05:bc:dd:b5:96:90:47:58:e6:b1:d7:21:87:22:
6e:3e:48:0c:ec:9b:31:34:57:83:8e:bb:c6:d7:48:
4b:b9:c7:be:4e:61:20:7f:47:15:d6:63:9b:fb:9b:
ab:67:75:a8:9f:ce:c8:23:6b:a9:e9:4a:f4:76:34:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8C:6C:0F:40:FA:6C:3A:3B:AA:6A:13:40:1A:B1:34:85:2C:98:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29F4AD0AF43011EFBAB0BF55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.102.0/24
Signature Algorithm: sha256WithRSAEncryption
93:08:ef:a8:f1:6b:61:48:ad:d9:86:26:6e:fb:84:54:ac:e2:
e1:2a:36:f9:4f:7d:6a:95:04:e0:e8:11:64:bd:71:60:b7:fb:
09:6e:b4:40:fb:b1:11:df:04:3a:ba:51:b4:1c:51:bf:3e:88:
b3:0e:41:48:dd:98:68:85:b6:40:f6:1b:d9:c4:17:de:6a:0b:
f4:83:c5:dc:28:d2:5e:ac:39:a6:fb:00:a2:0a:b1:78:e9:45:
fe:54:8a:bd:88:f1:0e:a7:0f:9c:19:62:04:e1:45:74:08:35:
20:dd:5e:59:bd:3b:05:68:88:15:af:5c:3b:62:7a:1d:a0:ef:
6e:9e:fc:ff:b1:fe:86:e7:2d:48:94:fa:9e:3a:88:b3:9e:22:
d3:85:34:cf:c8:48:fc:cb:68:cb:e0:c8:e9:1b:dd:26:d3:15:
2a:f1:a0:1e:5d:97:49:0e:00:a9:0a:2e:06:c2:c7:5b:fa:83:
37:fa:c9:3c:23:19:9e:a6:3b:1f:12:d9:7d:24:a6:10:70:4b:
c5:28:e4:5d:99:64:c1:e3:cd:4e:f8:00:08:b9:96:bd:1a:6b:
14:16:e9:fe:3c:20:f5:b9:71:1d:cc:ad:0a:88:1f:38:e7:8e:
20:38:68:a1:7b:79:b2:34:6e:39:8d:72:e4:b0:ff:2a:f1:a8:
99:b9:48:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:51 2025 by rpki-client