Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FF5D31AF44D11EF86618CA3762E951A.roa
File: 2FF5D31AF44D11EF86618CA3762E951A.roa (raw, json)
Hash identifier: JYF2Iep9h/6/5WDtZgQkVXL4XlNnHdaZ2GdYRTTdY1U=
Subject key identifier: 93:CE:12:64:D3:71:73:C9:8E:69:6F:9F:FA:7C:53:E6:1C:CA:12:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0133B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FF5D31AF44D11EF86618CA3762E951A.roa
Signing time: Wed 26 Feb 2025 14:23:03 +0000
ROA not before: Wed 26 Feb 2025 14:22:59 +0000
ROA not after: Thu 19 Feb 2026 14:22:59 +0000
asID: 984
IP address blocks: 156.252.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78773 (0x133b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:22:59 2025 GMT
Not After : Feb 19 14:22:59 2026 GMT
Subject: CN=67bf23c6-7135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:28:f7:94:31:62:c4:98:df:88:29:e7:9f:
d9:5f:b9:8e:f4:bc:00:63:e6:d0:75:b5:df:99:ff:
da:7f:04:e0:70:f4:22:04:72:82:91:3e:9e:74:8a:
12:5b:31:3b:f0:cc:6d:4c:67:6b:21:d0:dd:cf:16:
c9:a2:ee:75:0d:3f:a8:fb:c1:50:14:a6:aa:61:cd:
a6:26:cc:dd:b2:fe:b6:35:3a:6b:d7:68:33:eb:03:
3f:67:17:2a:ee:4f:64:3e:31:af:0a:6b:95:e7:86:
4c:31:aa:4b:35:2b:bd:1b:b5:d1:c4:55:ae:ed:b0:
4a:e4:eb:56:d1:13:54:f7:43:3c:2a:72:82:d3:ba:
b9:93:e5:01:d5:33:9c:a9:f5:f4:7e:03:97:25:8b:
74:04:f3:af:49:41:72:29:8e:01:07:5f:4e:24:bf:
12:a3:c7:16:fa:0d:e9:f5:46:4d:90:43:e2:d1:d1:
8f:92:78:9f:97:d6:97:23:e5:87:e8:d2:01:3f:35:
1f:99:74:78:31:54:fb:3d:f1:95:31:62:57:b9:12:
e2:35:f4:9e:da:84:e2:8a:40:b0:41:f6:0c:df:fb:
9a:19:fc:2f:b6:65:41:8c:d5:e7:dc:ba:80:a2:c5:
b3:f3:2f:de:75:48:66:fd:8d:91:f9:7c:41:66:6e:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CE:12:64:D3:71:73:C9:8E:69:6F:9F:FA:7C:53:E6:1C:CA:12:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FF5D31AF44D11EF86618CA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b0:25:ff:cc:30:f9:0d:90:f2:b4:e2:e4:29:7d:28:9e:0e:
3f:6e:d5:ba:47:f9:f2:bf:87:8e:08:f5:3c:b4:88:16:de:c5:
5b:14:0b:fa:9a:39:2a:cc:8c:e7:41:59:b2:c4:6d:59:68:ed:
75:a2:26:7d:ed:13:f1:18:a3:12:75:17:e0:4c:a1:ac:a9:7e:
ff:2b:ca:33:63:85:57:55:ce:c8:98:5b:91:dd:25:58:59:71:
1f:93:7e:55:e9:06:e8:00:4b:a2:c5:e2:74:56:8f:06:ce:9c:
ab:2a:bb:00:d4:34:06:bd:af:43:54:39:61:3b:28:63:cd:19:
fc:74:db:04:55:0b:e5:ac:ad:f3:9f:4b:fb:7e:d1:d0:9c:fe:
9d:07:0e:67:ad:74:74:25:c6:8a:18:ff:ab:45:2b:05:44:fb:
60:d2:30:3c:36:40:47:e4:88:9a:6a:ba:71:ec:df:2c:cf:ec:
c0:b3:c9:f9:58:db:dc:59:78:4d:3a:29:ab:df:74:a2:f8:24:
d7:88:b5:11:09:e1:9f:28:09:d8:de:3b:31:61:70:9d:b5:39:
e4:b3:a9:b9:f2:99:48:87:cf:70:36:ff:f4:1f:19:7f:78:40:
77:d8:c9:43:4a:b0:5c:c5:6f:e5:77:70:b1:d4:8e:b8:e7:dd:
92:56:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:01 2025 by rpki-client