Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E23B9DCF4A011EF904B745D762E951A.roa
File: 2E23B9DCF4A011EF904B745D762E951A.roa (raw, json)
Hash identifier: QqeNEoL41A2m84ZkfkQVThjPaAoYnGcAtdlurs83vRc=
Subject key identifier: 35:10:F5:F7:5E:75:E6:9E:6E:04:8A:D6:B0:20:53:7C:3E:59:3C:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013862
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E23B9DCF4A011EF904B745D762E951A.roa
Signing time: Thu 27 Feb 2025 00:17:08 +0000
ROA not before: Thu 27 Feb 2025 00:00:04 +0000
ROA not after: Thu 19 Feb 2026 00:00:04 +0000
asID: 984
IP address blocks: 156.232.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79970 (0x13862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:04 2025 GMT
Not After : Feb 19 00:00:04 2026 GMT
Subject: CN=67bfaf04-94cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:fa:c7:44:de:04:75:35:6d:46:ac:3f:36:
c7:2e:2c:6b:2d:95:42:4c:81:65:36:84:08:ef:83:
3a:7f:f1:32:06:7b:69:69:1f:76:58:18:df:59:23:
a0:fd:6f:a2:52:a1:21:92:a5:e1:2e:cb:93:de:4b:
f8:4f:84:d6:79:70:ed:62:54:68:f8:42:79:0e:c4:
d1:13:b4:ea:ef:0e:57:ca:76:3f:aa:58:16:d1:07:
e0:57:66:c5:6b:13:b0:a4:dc:96:ed:cc:28:da:bf:
43:4b:81:c6:33:e8:1f:cf:25:55:c6:6e:3e:23:48:
ca:45:4b:20:b7:4d:91:02:1c:93:a0:4f:5a:5d:ae:
d4:f2:1e:7a:66:e0:f2:27:bd:1f:e0:e6:5a:ea:53:
f6:21:88:58:dd:7a:69:0c:df:63:b1:a8:58:c2:17:
c4:c5:6f:17:d6:9a:1a:dd:32:45:a5:c2:3f:b8:48:
56:f3:f0:23:db:a4:cf:ca:63:07:3e:c3:47:89:50:
32:47:92:76:56:7b:a8:c7:ef:5a:13:f3:87:4b:17:
ac:c4:64:0d:c0:0d:3d:fd:a4:8b:b4:ba:88:b7:53:
7d:2c:b6:a0:66:6b:5a:31:97:44:4e:38:f7:8f:17:
f1:cc:84:ea:e5:7b:a2:3b:5b:74:91:f0:49:d9:e8:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:10:F5:F7:5E:75:E6:9E:6E:04:8A:D6:B0:20:53:7C:3E:59:3C:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E23B9DCF4A011EF904B745D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c9:db:ce:74:8c:3e:b1:5a:7a:bd:fb:21:5c:2f:aa:63:69:
1e:b3:28:c9:33:24:25:e9:97:30:4c:b9:f9:24:fb:d6:d3:44:
29:16:c7:89:5a:7b:ff:44:c3:50:96:81:b5:e1:ac:b9:5c:fe:
b2:66:02:00:dd:77:1f:4d:52:57:1c:8d:d5:cb:ac:b9:8e:b8:
94:7d:b6:dd:6f:46:c0:ad:14:e4:46:e0:04:87:a3:a9:7a:1d:
d0:04:d7:3e:b8:d3:f0:a4:ea:fe:8f:11:54:aa:a3:2b:4e:5a:
48:52:dd:70:1b:7c:67:db:39:d2:c3:02:e4:d0:16:0a:55:a0:
6a:13:ec:2e:66:8c:15:56:1d:90:3e:14:2c:6e:b9:b9:a7:50:
d8:60:6e:8e:81:1a:2d:b9:b1:97:a3:ef:d2:2c:6a:cf:81:b6:
a3:17:a2:61:72:2e:eb:6f:ba:d4:23:55:3f:a9:5b:e3:81:e7:
3e:57:56:11:44:75:10:3e:9b:55:53:e5:a9:ec:85:2c:dd:09:
df:78:98:8e:e4:ac:87:f0:4b:ec:79:c9:af:eb:7f:61:dd:f2:
ca:a8:ce:30:02:65:b1:3d:18:e7:de:37:f2:2a:f7:44:e3:d1:
7e:7f:1a:30:19:70:8a:f3:62:0a:cb:22:66:c8:4f:dd:5a:24:
45:ff:8e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:20 2025 by rpki-client