Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30009C32F48E11EF8D718C64762E951A.roa
File: 30009C32F48E11EF8D718C64762E951A.roa (raw, json)
Hash identifier: jFJ2CwVvVUNU6qGrwAPynQELaXBDvKE1YMjdfeDinuQ=
Subject key identifier: BB:48:D2:BF:18:8A:ED:4F:7B:8E:24:D2:A1:99:C2:67:B5:D4:1C:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013811
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30009C32F48E11EF8D718C64762E951A.roa
Signing time: Wed 26 Feb 2025 22:08:20 +0000
ROA not before: Wed 26 Feb 2025 22:08:16 +0000
ROA not after: Thu 19 Feb 2026 22:08:16 +0000
asID: 984
IP address blocks: 156.232.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79889 (0x13811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 22:08:16 2025 GMT
Not After : Feb 19 22:08:16 2026 GMT
Subject: CN=67bf90d4-287c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:b2:b9:58:27:24:ee:a6:a9:81:bf:6d:42:
a4:d2:d4:47:48:3d:98:6b:d5:b8:fa:c7:4b:e8:e8:
f2:31:30:da:88:b7:6b:a1:75:1f:db:21:78:79:9f:
41:04:f6:e7:ef:2c:90:c6:eb:d0:4f:35:2e:c2:17:
24:40:47:a7:fd:15:b4:92:d0:ee:68:f4:e3:47:30:
f1:0d:5e:a8:62:65:50:96:46:6e:af:01:7f:b0:95:
be:22:e3:f3:30:65:b7:ff:2a:67:18:cf:e7:3b:77:
61:1f:c0:c0:57:af:96:4f:40:60:6e:f1:c4:d9:51:
2c:7d:92:cb:f2:70:7d:8a:ca:55:1a:2e:25:58:5e:
e7:e2:5c:c3:87:71:51:39:13:06:ab:0a:9a:c2:00:
69:e4:97:3d:97:d2:d0:64:91:75:a5:f8:8e:3c:a8:
b7:d0:60:ff:a4:86:7a:ae:e8:5a:bd:ac:5f:68:ce:
5e:c6:c9:25:29:1f:3c:90:65:87:64:14:f1:79:e2:
90:b8:a9:7e:0a:e3:b2:9a:e0:90:e3:2e:e7:97:83:
61:4f:b3:93:b5:31:79:71:d2:76:ec:23:bd:8c:42:
07:a0:0b:6d:81:b4:84:cb:da:88:fa:a6:24:5e:3e:
c4:1d:fb:58:e8:49:4e:a9:64:59:73:44:10:76:75:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:48:D2:BF:18:8A:ED:4F:7B:8E:24:D2:A1:99:C2:67:B5:D4:1C:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30009C32F48E11EF8D718C64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f5:76:5b:4f:49:bc:e9:8b:44:4b:92:5e:5a:a7:cf:d6:82:
74:c7:46:02:d4:ce:ef:e4:59:2c:f0:41:4a:20:1b:ce:89:3a:
2c:75:23:11:49:7a:4a:ee:02:bf:5e:60:b5:c2:46:11:d2:83:
6d:53:8d:b2:93:40:67:8c:46:5b:00:11:f8:eb:96:b1:04:32:
0c:16:00:01:3c:e9:36:7e:4b:82:04:62:aa:c1:8a:e4:7d:34:
77:04:4d:bf:b3:ac:d0:4a:2c:9a:c9:08:7e:96:b6:1d:34:d9:
ad:67:09:2e:a7:8d:ae:19:49:3e:24:cb:1f:c9:47:00:26:95:
68:a4:94:f7:7a:c8:c7:59:a2:be:f4:c8:5a:62:60:12:c4:ba:
b9:07:6e:5b:31:80:7d:45:0d:b8:64:70:98:82:b3:9c:c7:e2:
10:c8:39:4a:78:59:43:5d:79:9c:04:61:b2:c7:44:f9:93:3b:
b1:41:1c:d4:28:22:1e:a1:1b:7a:dd:77:e9:cd:9d:19:bb:86:
7d:65:c6:3b:02:3a:92:7f:5d:32:41:9e:3e:76:96:fe:b9:09:
61:23:0b:e6:62:62:d1:2f:3b:dd:d3:9f:44:d5:6e:1b:78:1a:
68:a9:44:8b:bc:54:fa:89:bf:44:d9:33:13:19:d0:c8:df:9e:
2c:19:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:58 2025 by rpki-client