Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4423F2B6E06D11EF844B29A0762E951A.roa
File: 4423F2B6E06D11EF844B29A0762E951A.roa (raw, json)
Hash identifier: EjJrDbZXZTA2i6fij8vsQllY/jSoUTpUaFLFhGS4QW8=
Subject key identifier: CE:E3:65:8C:21:CE:AC:F8:78:39:93:22:AA:DA:31:B2:55:EB:AF:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01186B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4423F2B6E06D11EF844B29A0762E951A.roa
Signing time: Sat 01 Feb 2025 07:22:17 +0000
ROA not before: Sat 01 Feb 2025 07:22:13 +0000
ROA not after: Thu 01 May 2025 07:22:13 +0000
asID: 328608
IP address blocks: 156.243.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71787 (0x1186b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 1 07:22:13 2025 GMT
Not After : May 1 07:22:13 2025 GMT
Subject: CN=679dcba9-cb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:de:60:e9:60:98:74:6b:5e:b4:15:95:36:
0a:2f:83:ad:3a:bf:0d:70:42:44:4e:1f:77:f0:43:
3f:ed:c4:35:d8:6a:77:51:c1:de:3d:8e:e3:b5:2c:
e5:2f:3a:12:c5:af:b4:49:17:e7:67:a5:89:1b:cb:
43:74:39:7e:e2:c2:4e:68:2d:3a:c9:57:00:e2:2f:
6c:bd:86:dd:bb:f1:e4:d3:8f:32:a4:d0:15:0f:b2:
7e:80:3b:a0:81:ca:43:5d:d2:a9:93:9d:91:82:5a:
93:a1:5d:d3:54:4d:49:57:ea:ce:68:86:5e:75:28:
c6:52:09:22:2a:fd:77:b7:83:b5:83:f7:9c:ce:59:
1c:97:35:b5:d5:be:c9:49:90:75:d1:fe:87:05:f8:
bd:0c:56:49:ad:cf:a9:03:1c:bf:35:f1:54:b8:2a:
c2:9a:c7:03:06:c2:bd:fd:fb:07:67:90:92:48:d0:
69:af:cf:3b:5a:2d:3c:03:de:b0:12:59:31:bb:bb:
39:59:55:88:2e:95:d1:34:58:9f:40:16:aa:4d:3e:
54:ef:a9:bd:84:09:83:42:cd:3f:3e:d7:d4:60:2c:
ef:79:7e:74:71:ac:68:b6:9f:50:90:81:b1:f0:aa:
e8:dd:50:9f:24:1c:0e:54:c4:99:4c:2e:d8:21:87:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E3:65:8C:21:CE:AC:F8:78:39:93:22:AA:DA:31:B2:55:EB:AF:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4423F2B6E06D11EF844B29A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.136.0/23
Signature Algorithm: sha256WithRSAEncryption
65:af:ea:68:0a:5e:48:ae:07:c2:95:b0:7c:cf:4e:07:c3:ed:
3e:fd:71:44:a0:27:86:a9:e2:67:39:f1:21:62:7f:b7:c8:3c:
1d:26:6f:05:31:7e:9c:cc:53:e4:1e:f4:93:7e:d4:b8:96:2d:
57:6d:1c:2a:8c:98:10:c4:3e:f7:12:16:37:b2:09:0c:a8:8a:
a6:30:f7:ec:81:65:92:ff:81:d0:19:71:72:27:fe:98:55:c1:
85:78:46:33:9b:c8:66:17:71:8b:0c:59:ec:a5:96:dd:88:5e:
1e:42:b7:b2:84:bc:a3:dd:c9:75:82:6c:ee:46:ee:ed:57:14:
d7:7d:cb:8e:93:f2:92:8f:79:ae:5d:ff:a7:5d:16:7b:a6:7c:
9a:5b:f6:66:02:c1:24:85:6a:fc:23:13:05:ad:0c:9b:0b:43:
78:0b:9f:f9:44:01:62:cc:b5:4a:c2:33:d1:1f:2e:b3:9f:08:
85:f8:4f:f1:4a:e2:1c:29:35:56:ac:25:18:12:8f:85:dd:b0:
19:3b:a0:0b:eb:ab:a8:30:05:1b:53:03:cc:ef:d5:d5:b0:7c:
ce:7b:6d:d3:7e:d0:02:00:d9:c5:6f:f8:25:7a:9b:43:04:b4:
47:06:1c:b2:6a:17:67:c1:de:ce:03:20:47:bb:44:7b:85:81:
19:66:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:44 2025 by rpki-client