Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4E77D6F42411EFABE55982762E951A.roa
File: 4A4E77D6F42411EFABE55982762E951A.roa (raw, json)
Hash identifier: vz7WURKDPaEAOkXvMDbY4MvoLm27hxyw3qUNFcpYG7E=
Subject key identifier: FF:FD:5F:DF:5E:CB:B9:54:5F:CE:3C:06:DC:43:4B:62:2A:78:50:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013073
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4E77D6F42411EFABE55982762E951A.roa
Signing time: Wed 26 Feb 2025 09:30:17 +0000
ROA not before: Wed 26 Feb 2025 09:30:14 +0000
ROA not after: Thu 19 Feb 2026 09:30:14 +0000
asID: 984
IP address blocks: 156.252.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77939 (0x13073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:30:14 2025 GMT
Not After : Feb 19 09:30:14 2026 GMT
Subject: CN=67bedf29-15e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:08:76:40:54:f9:cf:f2:27:6d:44:65:67:
a6:fb:8e:51:59:61:f3:3c:d2:58:fb:93:da:21:f4:
62:7b:3d:7b:42:37:ab:49:02:1e:7f:69:50:97:85:
fb:5d:72:5f:1c:79:f4:6b:cf:2b:1b:a4:6d:4c:1a:
c3:8e:e6:58:94:85:81:db:0a:97:19:d4:0e:19:e2:
0c:1d:5f:42:f8:f5:61:60:f7:bc:7b:40:04:6e:cf:
cf:74:23:63:b3:be:c4:f9:6d:82:a2:bf:a7:64:33:
4d:52:07:db:cf:0d:f9:85:2d:90:f5:ae:11:fa:77:
4e:73:11:d1:2d:a5:84:77:32:a4:7b:e4:47:b0:71:
8a:83:d8:ad:ec:d8:3c:05:75:17:ca:c5:16:33:13:
9f:37:d6:db:ce:14:57:f5:ce:62:1d:d6:92:1e:8e:
61:6b:53:46:50:ff:0f:fd:64:31:dc:d6:82:2d:c3:
fd:86:71:1f:a8:df:20:df:70:75:7d:3e:32:81:34:
f7:66:1f:94:53:cf:bf:d7:98:af:32:62:60:3b:82:
1e:a9:cf:8a:41:d1:96:af:af:37:48:05:29:96:61:
60:fd:8d:4d:dd:83:92:38:56:59:4d:8c:4b:65:64:
8f:38:25:1b:4a:e6:e4:20:3f:09:df:5f:28:f6:b2:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FD:5F:DF:5E:CB:B9:54:5F:CE:3C:06:DC:43:4B:62:2A:78:50:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4E77D6F42411EFABE55982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.58.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1d:91:ac:a9:a8:de:89:59:77:32:4a:d8:15:c4:5d:3b:8b:
8a:5b:a6:65:e7:22:87:4e:6f:29:c5:15:bf:33:27:7d:3c:d0:
5a:67:40:f6:56:5e:77:b6:a2:08:34:e6:93:5b:1d:af:df:7f:
56:8f:2e:3a:51:3c:34:74:cd:83:46:6e:33:4a:4d:07:b4:be:
5f:e6:d4:fb:e4:1c:eb:30:53:f2:01:ae:8a:f7:08:ce:dc:15:
83:4a:3b:ef:9d:9c:9c:dc:2c:6b:be:bc:dc:49:39:17:7e:fd:
66:13:87:76:ee:6c:41:98:b4:28:13:54:ed:0d:a4:9f:09:39:
cf:e7:9e:48:da:67:69:01:17:f6:52:2a:fe:f9:f4:4d:2b:43:
3f:9a:5a:d6:7d:83:f0:78:55:08:61:e9:82:b8:81:a8:37:c1:
94:e5:85:35:61:eb:cc:5c:b8:a5:89:33:40:d0:51:0b:1a:24:
5d:7c:de:43:10:ed:f1:11:de:4c:a1:fd:c4:4d:3e:bd:ce:f2:
d9:e7:f3:90:17:2e:e6:2b:c9:b9:fe:f4:d5:27:21:56:ad:6d:
71:f9:58:7e:33:02:50:f6:64:71:6d:3c:4f:22:a4:2e:fa:d9:
74:bd:7b:03:93:d1:2d:ff:fc:62:c7:3c:02:2c:f5:60:78:4e:
92:43:8a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:25 2025 by rpki-client