Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/469D1AC4F44811EF8DF3CD81762E951A.roa
File: 469D1AC4F44811EF8DF3CD81762E951A.roa (raw, json)
Hash identifier: j+hz+zXM6+uxF1cp497UYFnwNkGOPmpwqQE2STAo94I=
Subject key identifier: 04:C6:D7:E5:69:15:FE:B2:88:05:73:14:71:FF:F7:F3:61:EA:93:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01335F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/469D1AC4F44811EF8DF3CD81762E951A.roa
Signing time: Wed 26 Feb 2025 13:47:53 +0000
ROA not before: Wed 26 Feb 2025 13:47:49 +0000
ROA not after: Thu 19 Feb 2026 13:47:49 +0000
asID: 984
IP address blocks: 156.247.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78687 (0x1335f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:47:49 2025 GMT
Not After : Feb 19 13:47:49 2026 GMT
Subject: CN=67bf1b89-4bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:5e:64:44:e7:55:d7:bf:4e:1c:28:ef:94:
2f:b1:ad:a6:53:08:c8:e9:6b:b7:17:4f:26:b3:d3:
c7:0c:93:ac:c8:3d:72:20:17:76:4c:18:02:00:a6:
77:af:93:5c:b3:55:b2:ff:73:77:6d:36:9c:6b:6f:
80:c1:dc:e9:fe:1f:ea:af:76:b3:72:b2:5c:d8:51:
f9:d9:8b:d3:52:17:98:b7:ad:20:e3:53:e1:0e:ce:
30:8a:ef:93:56:a0:74:6e:c8:83:3a:47:5e:a5:a7:
2a:4b:ed:86:65:8e:55:d0:5d:7b:fc:43:7f:00:c4:
38:09:d7:42:f0:8b:b8:e4:52:c0:6c:e4:b2:11:f9:
a5:9b:72:c8:67:71:ca:e1:52:41:de:63:3f:1a:10:
87:19:03:9c:13:db:41:ac:6e:0f:4c:af:b2:69:3c:
99:f8:61:9a:a0:e5:ac:c6:2d:37:21:80:40:ee:cf:
39:f6:85:3d:f0:12:a9:85:79:d9:f2:27:4e:a4:a3:
9c:8f:b5:f1:09:31:7a:5c:50:45:cd:37:b3:07:60:
18:94:c5:cd:3b:54:22:4c:2e:8b:40:65:27:c8:07:
80:88:6e:7a:3d:4f:d1:4d:b9:14:1c:4c:1e:6a:34:
22:30:f8:89:55:98:4c:96:ec:72:15:3f:f4:f1:f0:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C6:D7:E5:69:15:FE:B2:88:05:73:14:71:FF:F7:F3:61:EA:93:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/469D1AC4F44811EF8DF3CD81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8d:9a:74:c8:9c:18:d9:55:d3:cb:86:cf:b6:24:6d:4d:ee:
b2:f3:d0:d4:92:c2:6b:13:97:fc:07:72:de:3b:0c:60:68:e4:
80:31:33:e7:13:80:63:dc:3b:de:1c:b9:d2:51:60:07:ea:5a:
09:1f:48:04:d1:67:f8:ac:98:a5:0b:f3:ae:94:3c:e1:a4:cb:
5b:04:d4:3e:91:5d:08:ad:4b:42:c9:b8:ed:52:95:6d:ab:6b:
d5:7e:ee:7c:81:d1:c3:d0:5b:5b:83:03:4b:60:5f:5a:b4:77:
aa:e2:2c:f4:09:7b:38:a6:3d:3c:86:d8:73:90:d5:28:01:d2:
9e:d9:9c:91:d8:72:b1:92:23:75:d8:81:f2:15:40:04:15:cd:
85:c6:00:b7:f2:be:74:f6:53:b8:da:13:e3:7d:a8:b8:e2:a0:
9c:c2:b2:05:af:ca:4a:25:8e:64:11:48:97:67:cb:b1:c0:bd:
59:a7:7e:56:2f:82:f3:23:a5:a1:f9:c6:8f:15:6e:fd:34:b8:
da:3e:ea:c2:02:f4:92:4f:64:ba:7d:a1:0a:19:37:e6:52:82:
63:64:6b:79:fd:cb:8a:78:4b:a7:51:ba:dd:5d:06:5d:74:bd:
78:c2:2f:ee:eb:33:c9:75:13:c3:68:14:b6:25:df:1e:fd:72:
c3:f8:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:55 2025 by rpki-client