Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED92B50107011F0ADA89391762E951A.roa
File: 2ED92B50107011F0ADA89391762E951A.roa (raw, json)
Hash identifier: FEb025bEb8ZPaQt0eLiMNtNWQ+6/tTmOfiu+qrtwum0=
Subject key identifier: 44:B3:DC:81:7C:4D:A9:DD:38:19:B6:CB:2A:EF:1A:1E:C0:2F:A7:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED92B50107011F0ADA89391762E951A.roa
Signing time: Thu 03 Apr 2025 09:44:06 +0000
ROA not before: Thu 03 Apr 2025 09:44:02 +0000
ROA not after: Sun 15 Mar 2026 09:44:02 +0000
asID: 13335
IP address blocks: 156.238.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84390 (0x149a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 09:44:02 2025 GMT
Not After : Mar 15 09:44:02 2026 GMT
Subject: CN=67ee5866-c09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:29:66:92:2d:7c:97:15:c5:91:57:94:3f:
43:df:8e:85:4c:13:90:05:04:c8:e0:1c:82:b2:99:
1b:d6:cd:d9:8a:de:1c:39:cc:d4:df:1a:73:b8:b1:
82:3b:09:41:70:9d:da:b5:8e:85:16:eb:27:2a:79:
44:c4:78:94:b4:1f:ba:e1:a7:4a:eb:81:cc:9c:27:
11:28:69:66:20:7f:e7:7e:c5:f9:b4:85:f0:a3:bc:
62:a8:a0:2b:1f:ca:e5:39:2f:dd:17:15:43:84:5b:
04:ef:72:e9:f1:31:28:8c:f4:67:1f:21:bd:79:b7:
69:cb:44:81:7b:73:47:ee:a5:3e:73:ec:61:88:80:
0b:88:43:f1:04:5d:a2:f8:50:ad:26:2f:1f:88:4a:
44:1d:5a:c2:1b:a7:87:ab:f3:6a:e2:e8:8f:95:f4:
56:01:12:d5:61:2d:07:57:01:7a:96:71:ff:85:b9:
02:5b:09:3c:90:30:4b:0d:7f:bb:e8:a0:0b:d2:b4:
cf:be:3d:82:52:63:29:7a:2b:14:cd:bc:60:d6:7f:
c0:f7:79:f2:fd:d7:35:de:b4:00:9e:05:38:a5:4c:
b4:fc:fe:ef:db:b9:e1:a2:f6:4f:86:e7:d7:32:32:
ca:c0:8f:84:69:53:55:bf:fa:c8:e7:87:05:fa:ca:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B3:DC:81:7C:4D:A9:DD:38:19:B6:CB:2A:EF:1A:1E:C0:2F:A7:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED92B50107011F0ADA89391762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.181.0/24
Signature Algorithm: sha256WithRSAEncryption
48:48:9f:ba:39:00:4b:d1:e2:02:6d:36:38:5e:0b:49:37:3d:
9a:81:30:e7:ba:9b:14:fa:ae:0e:65:cd:e6:73:90:16:2e:3e:
fe:63:c1:2f:b3:0b:c2:dc:f3:a8:35:b8:48:7b:66:f5:c3:55:
a1:f1:ad:56:2d:4f:ea:fc:b4:77:b0:a2:f7:1d:58:f0:8f:2a:
26:7e:e9:95:b5:d3:ab:7c:84:b2:fd:19:59:bd:26:21:2c:cf:
86:3e:b7:3d:4f:44:1c:da:22:b8:e3:82:f6:49:54:e1:67:44:
39:66:32:8e:18:23:68:04:82:0c:fa:c2:95:f5:60:cd:a4:44:
90:27:a2:6b:c9:06:9a:34:45:85:b6:8a:d0:fd:f6:40:21:13:
04:2c:16:24:ed:52:85:dd:12:a4:d3:95:c5:67:3e:b9:88:4f:
11:19:d9:e1:00:b9:f3:9d:4a:8d:6a:8c:41:44:da:a9:a7:c4:
ee:90:ef:47:90:b2:50:89:40:43:ac:63:8a:5e:2c:24:82:bc:
ed:1a:f9:5e:be:17:33:e6:d6:bf:b3:e5:3b:4f:6b:80:4e:5e:
75:4a:36:76:6b:41:df:1a:30:60:46:74:c6:b2:e7:f9:ba:e1:
22:3e:9a:dc:ba:1d:b9:cf:41:5c:ba:05:e5:0f:57:7b:8e:87:
bc:3a:52:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:57 2025 by rpki-client