Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/308737A0F46C11EFA34B4879762E951A.roa
File: 308737A0F46C11EFA34B4879762E951A.roa (raw, json)
Hash identifier: TN8YzfVUASyJhwKfB5xvQ+LkNCDKMrInoLYzkWOhryA=
Subject key identifier: 17:7A:3A:33:DD:B4:DC:BA:0B:DA:40:F7:77:2C:FE:F0:DA:78:38:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013618
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/308737A0F46C11EFA34B4879762E951A.roa
Signing time: Wed 26 Feb 2025 18:04:58 +0000
ROA not before: Wed 26 Feb 2025 18:04:54 +0000
ROA not after: Sat 19 Feb 2028 18:04:54 +0000
asID: 17561
IP address blocks: 156.233.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79384 (0x13618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:04:54 2025 GMT
Not After : Feb 19 18:04:54 2028 GMT
Subject: CN=67bf57ca-fec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:30:df:61:99:a0:36:aa:25:4e:03:06:87:b3:
83:93:af:ed:11:25:e7:6d:15:cc:d9:5b:5e:fb:d2:
c2:0e:8a:76:1f:51:ae:3d:f4:14:24:10:1b:07:1f:
37:03:7c:00:87:31:9b:4e:34:ac:58:0f:68:26:e3:
92:93:1e:d1:51:26:e3:f9:81:5b:48:ed:29:04:26:
69:cd:9e:93:71:56:1c:d2:19:03:8d:12:9e:7c:d1:
0b:74:a5:03:61:a0:4c:d8:e6:fd:94:d7:73:6a:f5:
fa:d0:73:33:b2:3f:b1:1b:55:26:5b:97:f6:39:63:
09:6e:77:b3:06:2b:35:06:f3:73:84:16:17:9f:02:
92:e7:9e:87:a1:17:a9:41:fa:97:2f:e0:2a:33:e8:
c4:9c:11:dd:6f:bb:c7:a8:5a:ef:d4:25:3f:a6:93:
ea:1b:80:15:15:d7:fd:85:1f:17:e0:5a:4f:f2:f1:
c3:d4:b1:d9:1c:b3:e6:4b:df:ad:ce:bc:c1:8b:9e:
7b:ad:69:fd:ad:9c:d2:a7:f4:63:10:fe:b5:29:90:
c4:02:ee:92:45:44:7f:be:01:f2:d9:62:6a:e2:c4:
50:db:f6:69:a6:ee:18:f6:15:28:56:01:1a:a8:c6:
44:08:49:73:4e:cf:77:34:f5:24:21:03:fd:64:14:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7A:3A:33:DD:B4:DC:BA:0B:DA:40:F7:77:2C:FE:F0:DA:78:38:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/308737A0F46C11EFA34B4879762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.115.0/24
Signature Algorithm: sha256WithRSAEncryption
55:03:c6:c2:bf:cb:39:4a:17:a8:29:a0:33:08:ce:fd:9b:c6:
14:e6:3c:71:8f:40:60:c1:f6:48:ef:26:39:5b:23:02:38:5d:
6a:52:ee:1f:a5:e5:bb:3b:ee:22:d6:3a:72:7b:69:c0:13:45:
ef:e3:59:ff:da:00:52:93:9e:e5:c2:ea:d3:93:0f:47:dd:42:
f2:73:46:a2:07:8a:82:05:40:72:48:c3:ec:60:8a:bc:b0:a0:
a1:45:18:da:5f:55:bb:fa:f9:5b:57:1c:bc:92:d0:00:9b:83:
12:30:30:f8:df:4f:b1:c8:81:d9:d6:50:1a:60:a1:e4:30:3a:
c4:68:7e:7b:f3:bc:78:21:bc:23:ca:49:4e:60:05:8e:54:41:
bd:4f:8a:10:d9:fb:43:db:75:85:59:bc:ce:f0:b1:fd:69:ff:
8e:6c:ab:24:b7:3b:43:69:93:4f:c6:24:c0:b6:dd:a8:11:96:
d5:40:58:f3:52:31:13:7a:a0:ef:d4:9c:12:f1:1a:9b:38:3e:
18:7b:c9:13:c4:d7:90:a4:33:85:ba:3f:e4:75:b3:53:b2:5b:
1d:2f:97:bb:33:be:e1:30:4c:18:c2:5c:70:e7:4d:40:27:9f:
9e:d2:37:a1:73:9e:d8:39:8e:f9:00:b3:63:be:d0:15:9d:cc:
8b:6d:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:57 2025 by rpki-client