Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43C38B581A0911F0BB359DCD6DB8BCC6.roa
File: 43C38B581A0911F0BB359DCD6DB8BCC6.roa (raw, json)
Hash identifier: 1gVBwistNnBkaBZsVlbDzCaUFOZxWt13K0iIcGz5Bqs=
Subject key identifier: 6C:8E:B9:84:F3:EE:BF:77:8C:01:C0:5D:27:C5:F0:F6:5E:85:90:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43C38B581A0911F0BB359DCD6DB8BCC6.roa
Signing time: Tue 15 Apr 2025 14:52:35 +0000
ROA not before: Tue 15 Apr 2025 14:52:30 +0000
ROA not after: Thu 22 May 2025 14:52:30 +0000
asID: 213725
IP address blocks: 156.253.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85114 (0x14c7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 14:52:30 2025 GMT
Not After : May 22 14:52:30 2025 GMT
Subject: CN=67fe72b2-4912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:c5:9f:c4:13:c4:a1:ff:b1:73:ce:40:3c:
c3:65:27:66:44:df:5c:46:f7:c0:a8:ad:7c:f6:bd:
07:d3:3a:27:bf:5f:04:75:07:72:cc:b5:3d:9a:52:
5b:59:bf:3a:39:bd:f3:19:86:3b:e3:b1:49:d4:39:
ec:0e:4a:ee:68:c9:06:ca:27:b5:87:3e:58:de:6c:
92:23:43:1e:93:90:c2:04:0d:8b:6b:41:a0:73:56:
14:3d:0d:9e:33:a7:5f:1b:1d:71:36:27:f0:ef:67:
7d:07:e9:8f:7b:b1:a7:74:4b:56:12:0f:a3:44:5c:
a6:80:12:b7:61:9d:f9:91:33:c9:75:c0:55:57:c7:
b4:6d:46:d5:0d:70:0c:06:66:bf:5b:c6:46:39:39:
d3:71:6f:5e:00:3d:67:c3:53:81:29:df:44:ff:3a:
8d:c3:f9:2d:3b:d6:53:e4:cf:b0:83:10:fd:7b:c4:
4b:4d:03:d4:de:a8:18:b0:37:78:08:a5:d7:33:64:
a3:cc:43:d2:4e:94:54:13:70:6f:a6:1e:1d:95:ad:
29:ec:0d:76:c3:09:8d:ad:f6:b1:d9:ae:81:24:21:
6a:8f:c3:36:71:7e:f4:db:46:61:17:20:e4:67:f9:
10:9e:eb:4a:2c:92:a2:26:89:21:41:d1:ee:a1:d7:
cd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8E:B9:84:F3:EE:BF:77:8C:01:C0:5D:27:C5:F0:F6:5E:85:90:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43C38B581A0911F0BB359DCD6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fb:3e:6e:99:c7:80:14:1a:89:6a:ca:f1:a4:f9:4f:c7:8a:
9b:df:6f:6b:99:e6:2d:70:09:a8:21:bb:e1:49:e9:9e:6b:e8:
dd:81:e7:5b:0a:d9:40:24:c7:cc:9b:06:ba:18:46:b0:4c:be:
5f:4a:39:cb:90:fc:dc:8b:08:b4:e9:77:46:ff:2c:ca:66:19:
0e:13:6b:57:02:d7:cf:a2:ae:a7:df:51:9d:c9:7d:e7:24:35:
cf:9f:50:70:3c:be:0f:ca:f9:cd:48:1e:19:ca:e1:22:6f:0b:
b1:09:7c:1e:8e:74:a9:45:14:5d:a5:ab:d5:0a:8b:5a:8e:dd:
1b:75:cf:77:1d:20:0d:68:13:80:a3:e6:9c:ea:ef:3f:b0:14:
43:2b:12:94:62:6f:b7:59:06:c7:12:1c:a1:6e:de:60:9d:9c:
e8:d0:2f:50:1c:20:d4:c1:28:5a:e9:4f:34:e0:55:28:5c:e7:
a9:d4:ea:9c:ce:18:73:69:fd:cb:d0:4a:5e:d0:ea:93:39:2c:
7a:db:75:90:72:55:91:54:65:a8:65:30:09:da:a3:76:c6:6e:
c5:fb:b0:af:ac:e5:33:3c:55:54:07:8b:ca:29:01:bb:c3:06:
f1:ad:03:5b:94:49:82:f8:76:8a:4f:0a:25:20:f5:2c:94:81:
50:e8:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:31:20 2025 by rpki-client