Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FBB4A380CCB11F08EE13371762E951A.roa
File: 2FBB4A380CCB11F08EE13371762E951A.roa (raw, json)
Hash identifier: dgTxqPANEJwT3UdRkvgiy6cBg6B+E4XaYY29Zb+xpQ8=
Subject key identifier: 8E:95:05:ED:48:5E:56:0E:DD:4C:9B:B9:20:52:7B:C7:2F:87:48:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FBB4A380CCB11F08EE13371762E951A.roa
Signing time: Sat 29 Mar 2025 18:25:27 +0000
ROA not before: Sat 29 Mar 2025 18:25:23 +0000
ROA not after: Mon 07 Apr 2025 18:25:23 +0000
asID: 212238
IP address blocks: 156.232.0.0/24 maxlen: 24
156.232.1.0/24 maxlen: 24
156.235.53.0/24 maxlen: 24
156.239.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84196 (0x148e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 18:25:23 2025 GMT
Not After : Apr 7 18:25:23 2025 GMT
Subject: CN=67e83b17-0499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:f2:76:89:35:c7:f1:6a:52:e8:e3:46:c8:
0c:2f:b9:62:c7:1a:01:3a:e5:4b:5e:8c:08:1d:da:
21:e7:24:76:40:11:1b:62:2d:94:a4:45:7b:43:01:
af:7f:04:93:07:3d:17:3f:63:71:6f:f9:3d:a9:a1:
6f:3f:66:1e:50:9a:a7:e0:10:7b:1e:13:8d:e4:8e:
41:4f:80:91:60:4b:2b:97:47:4c:c9:8d:fc:65:df:
88:f4:dc:7d:5b:48:ff:96:d6:db:26:c0:a1:85:e6:
1b:99:1f:ff:41:be:ff:97:40:0f:ba:47:58:db:41:
78:fb:76:97:40:2a:41:1c:f6:23:25:3c:ad:53:b0:
f5:de:ff:df:a0:6d:aa:fe:9f:cb:b8:ea:aa:de:f4:
b5:55:fc:10:dd:31:21:2a:fa:ca:d2:70:72:8d:86:
54:c1:b8:49:ad:7e:99:78:d9:19:b9:35:a7:30:ff:
13:c2:c5:af:50:1a:e1:14:af:9c:2e:03:4e:78:3f:
cc:08:a4:84:3a:63:7e:76:2a:c9:7d:5d:0f:20:7d:
05:2c:06:e7:7b:3f:4b:88:79:f5:dd:8e:f3:00:08:
27:cd:80:d0:d5:5c:22:2b:32:b2:d2:32:cc:a9:4e:
4b:77:4a:aa:3c:6a:49:dc:be:b7:91:45:fa:54:3c:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:95:05:ED:48:5E:56:0E:DD:4C:9B:B9:20:52:7B:C7:2F:87:48:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FBB4A380CCB11F08EE13371762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.0.0/23
156.235.53.0/24
156.239.18.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5e:bb:2c:7a:b7:d2:65:dc:ac:b1:08:5f:e5:77:d3:b5:ab:
ac:c7:1a:76:62:0e:18:fa:ce:61:17:ab:c7:ca:11:05:73:53:
e3:0b:da:26:8a:d5:73:b2:fd:5a:dc:43:a6:77:b4:9c:11:8d:
13:f6:be:b6:cf:0c:2b:9e:9b:fd:c1:c9:18:66:e1:9a:17:66:
6d:00:f7:9c:2c:54:e2:da:f0:23:7d:b5:bc:fb:3b:ab:cc:3f:
ea:20:1e:78:a2:60:8b:68:b6:8b:9a:5f:56:26:cb:06:7f:c0:
d7:79:44:21:6d:0f:41:4d:5c:68:07:86:b1:f6:18:04:96:77:
e3:88:21:7b:ad:07:65:51:8f:83:27:8e:34:49:af:b2:35:8c:
b7:c8:d4:85:26:b7:3a:ff:0b:e1:e9:95:f7:73:0e:30:da:f1:
6f:2f:e0:48:db:65:3f:0e:eb:a2:2f:0f:96:9c:b0:94:d4:6e:
a8:20:31:96:90:d8:28:9c:33:06:aa:d4:14:34:a2:76:25:f2:
89:9c:6c:4e:b0:03:6c:89:1b:2b:17:f6:85:bd:20:5a:d8:17:
e8:8b:42:e7:ce:2c:74:77:7c:1c:07:58:46:ba:21:6b:45:c4:
79:9b:d8:91:b6:89:13:78:a7:07:63:74:47:98:50:a9:aa:1d:
c0:d8:bd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:09 2025 by rpki-client