Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30E18448039F11F0B3CC71B5762E951A.roa
File: 30E18448039F11F0B3CC71B5762E951A.roa (raw, json)
Hash identifier: lZrigdT87ZDwNpCzX3VYwSIJM0vo59CX7sL0hqJUHOk=
Subject key identifier: F8:3F:C0:7D:50:05:31:3F:2F:F5:77:DD:D4:0C:FF:E4:9B:C0:06:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014675
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30E18448039F11F0B3CC71B5762E951A.roa
Signing time: Tue 18 Mar 2025 02:17:50 +0000
ROA not before: Tue 18 Mar 2025 02:17:46 +0000
ROA not after: Mon 07 Apr 2025 02:17:46 +0000
asID: 139880
IP address blocks: 156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83573 (0x14675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 02:17:46 2025 GMT
Not After : Apr 7 02:17:46 2025 GMT
Subject: CN=67d8d7ce-3292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:b2:43:c9:ed:b5:cf:2d:09:53:be:dd:56:
58:8d:3b:93:02:8b:b7:58:b2:65:d3:ce:ca:e9:4f:
5c:26:87:55:f3:57:d0:d3:64:68:9a:c5:fb:51:00:
3a:18:a3:1e:7f:6f:24:12:65:a1:50:74:77:46:cb:
21:5a:40:2f:9c:21:18:11:64:77:ec:48:d5:54:6b:
57:24:d3:e6:ee:82:aa:ea:4f:86:dc:17:e0:b5:88:
72:03:88:78:db:de:ab:8e:c9:d5:bb:2a:02:08:d6:
22:3b:40:45:a3:16:c7:0c:da:7c:33:df:3f:9a:f4:
07:a0:16:fc:fc:7b:51:ff:1e:b3:47:70:e7:c9:d2:
19:bc:45:04:66:13:8d:9c:87:0e:4e:5e:fd:8d:09:
a3:5d:3a:c7:eb:42:e4:89:87:af:aa:8d:3a:96:43:
52:0c:5c:cf:47:36:02:5e:ff:13:7c:3b:bd:bf:41:
d1:76:0b:0b:6c:91:cd:35:23:5c:98:77:69:3f:bc:
79:d7:15:e8:b0:0d:75:6a:8c:1b:60:22:92:9c:2f:
f1:d6:d4:0f:f6:38:2e:3d:19:7e:41:57:ad:af:b5:
3a:a9:bc:74:d9:7b:59:5f:69:5d:29:9a:6b:e1:d1:
6e:22:e6:b0:80:51:30:c4:86:07:69:e8:60:8e:10:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3F:C0:7D:50:05:31:3F:2F:F5:77:DD:D4:0C:FF:E4:9B:C0:06:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30E18448039F11F0B3CC71B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.64.0/19
Signature Algorithm: sha256WithRSAEncryption
06:ea:4b:e4:30:ac:c0:24:22:a7:26:d6:ad:53:4c:7f:92:5f:
d8:b9:8f:96:d6:44:33:9a:41:de:89:51:50:7c:01:7e:98:b2:
ec:1f:21:97:3f:d3:12:ab:c5:17:aa:38:86:00:97:e9:bd:14:
ef:2d:06:00:a3:0e:ab:66:7c:3f:2d:c1:d1:7d:c9:2f:ed:00:
7b:88:e7:29:73:55:ec:3c:d9:67:e1:30:2c:ef:43:2f:b2:3a:
f0:97:3e:78:f6:09:2a:19:c2:e3:9c:4e:17:94:3d:a8:a1:7e:
a1:98:6e:a2:f6:8c:55:03:ca:34:76:fc:08:53:2b:3c:28:34:
9f:f5:05:62:93:ef:0a:dd:55:56:5a:c8:7a:b1:ca:05:89:83:
57:79:8e:c3:e5:34:31:23:8c:61:10:34:bb:da:3c:e4:bb:58:
bd:fd:e9:f9:5b:42:74:5b:1d:29:b0:ff:10:70:4e:46:cc:ee:
65:21:1b:0a:19:d0:7d:ed:ca:aa:f7:5c:4e:d5:97:6d:41:c9:
f4:c4:33:e9:07:d5:28:e6:1c:a3:ec:61:36:27:ca:23:d3:c4:
0c:74:20:64:dd:5c:a9:53:03:7d:e5:42:07:c7:67:7e:9e:cc:
2b:c5:c6:c3:a3:67:c6:c6:ee:8e:f9:54:14:67:f1:f3:a5:fb:
ed:9e:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:38 2025 by rpki-client