Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B5C5888FA6411EF84EDDFA9762E951A.roa
File: 3B5C5888FA6411EF84EDDFA9762E951A.roa (raw, json)
Hash identifier: PyAAkvoc4dkxGsLzTvFKzcevZaWVf53DKvUs1qNhGKY=
Subject key identifier: 01:87:A1:73:03:6B:B3:55:2D:62:96:B0:54:87:38:E9:8A:34:4F:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014363
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B5C5888FA6411EF84EDDFA9762E951A.roa
Signing time: Thu 06 Mar 2025 08:23:07 +0000
ROA not before: Thu 06 Mar 2025 08:23:03 +0000
ROA not after: Sun 13 Apr 2025 08:23:03 +0000
asID: 397423
IP address blocks: 156.225.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82787 (0x14363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 6 08:23:03 2025 GMT
Not After : Apr 13 08:23:03 2025 GMT
Subject: CN=67c95b6b-780e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:52:e2:9f:42:0c:7e:b7:1c:be:13:4f:3d:31:
94:23:82:86:be:d4:d4:e4:ca:85:fc:58:9d:5d:29:
81:85:0d:6b:f1:aa:3d:5f:d7:59:fa:d2:85:15:6b:
60:a9:b0:ad:e7:0d:50:c6:0d:d2:0b:dc:01:61:25:
f3:cf:9e:97:5a:ab:ca:46:a4:64:fa:5d:dc:b2:fa:
bb:6a:1a:cd:0c:96:30:7c:a3:fe:1b:81:b1:df:e6:
04:ea:1b:ae:e7:4b:10:bb:6c:42:bf:f0:2d:30:7e:
7c:08:6c:54:b9:3d:0a:1e:7c:4a:7c:b6:98:5f:39:
b0:22:ab:3e:7c:29:a0:42:6c:dd:5b:15:c4:da:a4:
87:1a:74:58:75:ea:c9:76:c6:a7:fa:5c:df:24:fd:
5b:62:7a:ed:a4:28:6c:f7:1c:af:16:91:a0:2b:24:
65:4f:08:fa:cc:58:f5:7c:dc:0d:16:58:6d:ee:00:
1a:a3:ca:34:31:59:1e:24:20:6d:f4:2c:a2:05:8b:
34:35:32:ff:34:d4:09:cc:a0:1c:07:31:90:00:04:
21:fa:5b:5a:f2:85:fc:10:66:c1:5f:aa:e5:78:14:
9b:f4:cf:c2:c4:40:92:8b:7c:da:19:eb:4a:e6:42:
46:0e:3a:d7:d5:a3:d6:16:e2:38:f9:11:28:2b:df:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:87:A1:73:03:6B:B3:55:2D:62:96:B0:54:87:38:E9:8A:34:4F:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B5C5888FA6411EF84EDDFA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.65.0/24
Signature Algorithm: sha256WithRSAEncryption
22:fe:3f:28:51:0c:d7:bd:ac:f9:d4:61:76:cb:73:93:60:da:
44:7b:f9:a9:81:69:62:16:7f:91:97:6b:c4:d5:b8:35:8d:b9:
1e:eb:a0:0b:93:33:0d:2f:b5:ae:b0:9b:e1:1a:6b:97:ea:ca:
4d:17:ef:a3:f9:36:3a:ae:dc:21:04:dc:ad:d3:84:cf:17:97:
ea:89:e2:0c:18:b4:d1:24:e9:86:44:52:e9:77:c5:82:49:06:
c4:41:c6:ab:98:a0:93:cc:fb:b5:91:8a:ed:cb:b6:cc:7b:46:
f1:41:ae:f0:db:c7:d0:b3:cf:39:b1:57:80:c3:9e:03:1a:59:
18:e2:26:f7:27:b4:07:d3:7d:34:5a:87:02:bb:a8:8c:89:6d:
d8:57:8f:28:10:d8:3c:a9:71:05:69:aa:a8:e2:5e:1a:3f:66:
3b:25:bb:a4:ff:f1:21:3c:eb:4f:d2:1e:8d:c2:1d:48:21:6e:
b1:08:25:c0:54:97:b5:f4:c5:df:fb:1c:2f:70:ca:43:df:6b:
ec:f0:fe:12:25:fc:7a:ad:75:7c:f7:fd:0d:60:4d:a7:52:54:
45:da:e4:66:4a:c4:c7:b5:e2:bb:d0:27:f9:bc:bc:fd:b2:f0:
57:d5:63:d5:cf:02:8b:bf:82:7a:75:32:79:7d:66:fb:a2:13:
8a:fa:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:46 2025 by rpki-client