Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E5117F00A2611F0A6FF42BB762E951A.roa
File: 3E5117F00A2611F0A6FF42BB762E951A.roa (raw, json)
Hash identifier: SomYa95EfaaW55L8zl4IA1aKBx3LoxDaybyBmFFQ7Ao=
Subject key identifier: 58:A4:BF:44:13:B6:D8:48:B4:F2:D4:96:6F:73:F6:69:38:8F:DB:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014854
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E5117F00A2611F0A6FF42BB762E951A.roa
Signing time: Wed 26 Mar 2025 09:39:42 +0000
ROA not before: Wed 26 Mar 2025 09:39:38 +0000
ROA not after: Mon 28 Apr 2025 09:39:38 +0000
asID: 133180
IP address blocks: 156.227.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84052 (0x14854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 09:39:38 2025 GMT
Not After : Apr 28 09:39:38 2025 GMT
Subject: CN=67e3cb5e-b592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f2:a5:40:0f:08:56:aa:38:46:5d:2e:36:76:
4f:76:1c:44:cf:56:e5:28:26:fb:55:26:76:58:ae:
77:e0:c5:cf:eb:9e:9f:90:23:30:36:35:ef:0d:42:
33:8d:e2:0e:85:b0:8a:92:96:12:09:65:72:ca:8e:
55:49:39:e9:1d:a5:86:24:0e:c9:64:87:b8:de:d3:
28:ac:4d:8b:3e:17:ac:4b:52:91:ef:52:13:1f:48:
cc:26:ad:45:fc:62:7d:d5:30:f1:01:44:d9:da:3f:
6f:d6:d8:ed:93:fe:99:27:bc:64:3f:53:af:1f:fe:
01:c0:4a:04:18:1e:22:e9:f6:80:43:04:a5:39:3f:
2b:df:de:3d:f4:e6:eb:00:1f:7d:18:4c:0e:3a:ad:
3e:8b:a8:8d:76:67:cd:03:6c:3f:37:b9:57:3e:94:
d6:04:d5:e5:9e:16:eb:d6:46:08:91:dd:d8:55:eb:
83:c3:7f:82:13:8f:85:d8:0f:b1:5c:62:c8:76:72:
b3:86:4c:b0:e8:7b:b3:6d:8b:72:58:1d:72:bd:63:
af:02:08:37:be:4c:8b:3a:76:aa:df:0c:71:d7:1e:
b5:89:2d:42:f2:01:e3:b8:83:e2:94:00:bf:47:d3:
0f:2e:c9:c1:57:87:83:25:fb:41:58:6f:ee:1e:b0:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A4:BF:44:13:B6:D8:48:B4:F2:D4:96:6F:73:F6:69:38:8F:DB:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E5117F00A2611F0A6FF42BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9d:fa:ed:36:10:41:23:f5:c1:16:46:6a:71:2e:59:9e:6a:9e:
1a:6e:68:de:f5:77:68:30:c5:2b:a3:8b:3f:16:2e:81:04:d5:
bd:e6:33:01:b4:00:b4:a7:7a:64:4a:c5:95:30:6c:bf:5c:43:
75:59:23:99:ab:f7:0f:6d:2d:9f:fa:53:dc:7b:92:be:bc:2b:
c9:df:07:6d:0e:5c:35:b0:a1:08:fe:ac:1a:34:56:db:fe:34:
fb:7d:22:f1:6e:9e:e5:4a:7d:dc:71:27:90:ee:77:1a:c0:ed:
fe:f7:6d:4b:6d:2d:69:a0:a1:df:a0:dc:95:5a:a5:0a:60:22:
e7:06:48:92:f8:f9:8a:47:e7:0d:f0:d7:64:72:7e:65:00:b1:
77:84:5d:b6:10:fa:5f:6d:8c:68:45:72:10:5b:33:c5:32:82:
8e:fa:4e:ea:ad:e1:5c:41:ea:3a:d4:71:10:2d:70:41:09:97:
cd:28:d0:e8:42:a9:0d:b9:f1:2d:54:7e:99:ae:06:cc:37:60:
5d:fa:98:35:9a:39:3e:1c:d1:17:b3:11:52:f8:21:f9:d6:71:
2a:40:7b:03:ff:b3:df:d8:f2:5e:c8:2a:23:29:d7:5c:5e:13:
e4:da:9f:b0:6c:54:e2:19:c8:13:dc:33:a1:3e:96:5d:34:15:
3b:f3:07:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:24:48 2025 by rpki-client