Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38FC3172F42311EFB8EBE17C762E951A.roa
File: 38FC3172F42311EFB8EBE17C762E951A.roa (raw, json)
Hash identifier: TP03hIzFP5e7pt0Y1ypuo8AFqtcJHumXRLDb7ytlgf0=
Subject key identifier: 13:89:05:00:3A:33:A6:26:12:37:23:F2:6C:01:E9:AF:E1:68:9B:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013066
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38FC3172F42311EFB8EBE17C762E951A.roa
Signing time: Wed 26 Feb 2025 09:22:39 +0000
ROA not before: Wed 26 Feb 2025 09:22:35 +0000
ROA not after: Thu 19 Feb 2026 09:22:35 +0000
asID: 984
IP address blocks: 156.252.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77926 (0x13066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:22:35 2025 GMT
Not After : Feb 19 09:22:35 2026 GMT
Subject: CN=67bedd5f-7282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:d6:c7:79:6d:78:56:ac:b7:b2:82:fe:34:
4e:18:4b:0d:e8:3f:64:14:d6:70:84:25:97:d1:35:
8a:9d:b5:1f:b9:39:d3:a1:3a:04:24:73:77:f9:de:
c3:88:6f:cb:7b:49:df:44:4c:e1:d4:8b:84:c4:a4:
54:43:90:e2:c2:aa:75:57:a4:72:ec:d0:93:db:90:
7c:01:9b:65:3c:8c:23:db:2b:b8:ca:27:d4:a7:da:
25:92:32:29:47:27:10:69:b7:16:39:36:d2:f6:f6:
e9:7d:cc:b8:f4:d2:f1:82:02:f0:da:6b:e5:cd:5e:
8c:8d:45:68:62:9a:b4:fb:1e:f8:df:30:f3:9d:e9:
a3:c7:6c:3f:58:dd:ef:3f:4b:8a:fd:68:33:f6:9c:
0c:47:a7:b8:39:46:07:ea:ae:6f:a6:19:92:fd:5a:
15:ea:f0:7f:3a:73:e6:f4:7d:d6:1e:4a:e4:bb:d4:
b8:7e:ea:de:65:fb:be:98:56:78:4c:1e:6e:5d:67:
c0:a2:26:40:58:f6:2b:8e:f9:70:b9:51:42:bc:25:
94:a4:f9:b5:35:80:a5:08:a1:4c:42:94:2f:0b:b4:
f2:3d:e7:bf:65:8c:04:79:fe:ca:8a:da:b5:2e:d1:
d7:bd:c2:10:27:d3:93:3a:3e:8c:32:06:06:2d:62:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:89:05:00:3A:33:A6:26:12:37:23:F2:6C:01:E9:AF:E1:68:9B:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38FC3172F42311EFB8EBE17C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:1f:a0:7c:b6:c4:49:dc:36:88:45:e0:d7:86:9e:f7:41:1f:
0c:01:bc:d3:39:5b:02:84:3a:f6:17:70:4a:1c:a6:d1:73:a9:
68:91:d7:fb:49:b9:33:cc:6b:4c:01:48:51:05:19:20:8e:eb:
a7:fa:d8:29:96:ac:3f:45:ea:9d:83:21:92:f3:a8:bb:fa:d6:
4d:f4:34:a8:4e:44:00:eb:ff:31:86:e6:ba:fa:0a:ff:b5:af:
5c:4b:a4:7d:cc:32:08:8f:1f:d0:c9:2e:28:4e:99:25:f2:cd:
75:9c:8d:11:36:26:29:7a:fe:9b:54:66:67:7d:4a:a2:54:b5:
8c:60:d4:5d:56:0c:d0:fd:45:48:05:90:17:0d:32:15:f1:f3:
6b:e7:b3:00:ab:bb:46:64:5a:e4:13:a6:a1:bc:05:bc:47:54:
e2:b8:4f:68:96:30:1f:2d:e4:ec:0e:e5:2b:0c:a9:45:2d:dd:
f4:6d:18:19:cd:d4:f6:61:46:e1:91:a8:16:23:2d:16:85:11:
d6:0b:69:ad:e8:87:4c:6f:02:05:54:9c:72:53:39:18:b4:7a:
d5:53:e7:dd:3c:1e:bc:7f:43:03:fb:fd:d3:59:8c:3b:52:83:
49:6d:c6:4a:73:e0:4a:77:4c:76:f1:92:06:57:0f:35:a2:09:
9f:df:cd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:15 2025 by rpki-client