Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48129F86F5D911EF994CF24F762E951A.roa
File: 48129F86F5D911EF994CF24F762E951A.roa (raw, json)
Hash identifier: zfxKMHhKK3P1GYT67OcAefu+MMhabN5VN3tJDsWzbLY=
Subject key identifier: FE:8B:66:BE:0E:80:6E:DC:47:1C:E9:F7:82:FD:B2:15:7A:28:77:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48129F86F5D911EF994CF24F762E951A.roa
Signing time: Fri 28 Feb 2025 13:38:24 +0000
ROA not before: Fri 28 Feb 2025 13:38:20 +0000
ROA not after: Sun 13 Apr 2025 13:38:20 +0000
asID: 138915
IP address blocks: 156.244.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81395 (0x13df3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:38:20 2025 GMT
Not After : Apr 13 13:38:20 2025 GMT
Subject: CN=67c1bc50-32e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:4a:74:2f:73:06:92:3f:d1:45:93:30:86:
26:c6:e7:0b:c4:65:88:f6:c1:3a:ab:b3:44:28:aa:
f8:a6:ae:14:ca:ec:d4:ea:9d:78:4e:7f:51:0e:bc:
fc:2c:ea:08:31:97:28:0f:6b:16:7f:cf:18:dd:07:
b6:ea:2d:be:6f:ad:f6:94:98:aa:03:9c:3b:0b:13:
1b:f5:ca:a3:0a:bd:88:68:5d:bb:14:3d:de:7b:1f:
ba:0c:1c:d9:8e:ce:ba:e8:b3:b4:ac:43:ca:09:6b:
72:d1:38:57:f3:38:76:47:36:43:09:88:0c:71:90:
a3:52:ae:a1:fb:9b:bd:58:61:9c:7a:86:68:64:a3:
23:b1:bb:bb:f9:82:43:28:9a:b9:a1:15:ab:97:bb:
61:24:7e:40:70:2b:e2:ad:f3:30:d8:59:a3:42:d6:
e6:fe:b8:a9:ed:b3:bc:b4:23:3f:0b:95:e0:c6:a5:
e4:2a:d6:ee:af:90:4f:ea:0e:cf:4e:85:5d:b5:79:
24:1a:18:a8:18:8e:9e:ab:68:18:92:e1:f0:f0:dd:
6a:68:a0:5a:f4:52:9d:28:25:5a:c4:7a:d0:bb:c9:
70:07:16:87:9f:0b:0e:b2:e3:82:65:32:61:90:ea:
68:59:ed:45:96:9a:b4:4e:dd:02:90:12:ce:c2:08:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8B:66:BE:0E:80:6E:DC:47:1C:E9:F7:82:FD:B2:15:7A:28:77:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48129F86F5D911EF994CF24F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:70:95:a5:6b:40:90:53:c5:92:4e:bf:f0:1d:2a:58:6f:e8:
ed:e5:e5:38:4c:84:ff:94:ad:34:b7:26:2a:17:59:bb:db:dc:
f2:9c:33:9a:90:3f:bc:f3:98:7e:a8:05:1d:ec:a6:69:90:62:
ac:61:7e:59:13:8e:c2:a6:1a:6e:63:85:ca:a7:ce:a9:c3:a9:
da:40:9d:c3:1b:02:ed:10:d1:30:a8:ad:fa:55:ac:8b:28:92:
ec:78:fa:18:bc:14:07:cb:82:00:17:64:20:76:9c:99:f7:4e:
36:48:41:29:87:34:45:88:c8:21:78:4a:2a:a4:32:69:e6:1f:
f0:ea:25:3e:d1:aa:aa:c0:e8:0b:8a:90:ff:7d:fc:e9:61:e3:
c0:2a:aa:43:a6:0e:bb:06:7a:65:de:19:93:cd:32:a2:02:93:
04:50:49:a5:97:2b:ba:c0:fa:c9:01:31:92:75:8f:a0:19:ac:
e0:f6:7c:44:ea:8b:86:04:4b:61:68:f2:a1:43:bd:79:11:60:
46:01:20:11:af:22:f3:69:25:f1:6c:98:74:a1:c7:49:e1:47:
b9:ae:4f:8d:eb:ca:76:3f:ec:5d:c0:09:2d:5c:f5:7e:93:cf:
cd:0d:3b:22:2d:0f:d2:08:08:e2:b8:7c:9f:6f:1b:0c:44:38:
0f:68:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:02 2025 by rpki-client