Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ECF27C0F44B11EF95524495762E951A.roa
File: 4ECF27C0F44B11EF95524495762E951A.roa (raw, json)
Hash identifier: DRykWWSE3HN3eqh0+5arNssXq4zMNGDJrL6r4c3s6OA=
Subject key identifier: 50:71:3A:A4:82:7E:CB:46:B5:07:E1:1C:34:F2:24:89:98:F1:F8:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013396
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ECF27C0F44B11EF95524495762E951A.roa
Signing time: Wed 26 Feb 2025 14:09:35 +0000
ROA not before: Wed 26 Feb 2025 14:09:32 +0000
ROA not after: Thu 19 Feb 2026 14:09:32 +0000
asID: 984
IP address blocks: 156.252.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78742 (0x13396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:09:32 2025 GMT
Not After : Feb 19 14:09:32 2026 GMT
Subject: CN=67bf209f-8534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:84:6b:be:d7:f3:bd:60:29:5d:22:cd:68:
62:24:dc:47:83:c1:b1:c2:a7:e2:73:11:c2:f2:81:
a8:40:57:d7:c6:e5:1e:2b:57:cf:9a:41:01:c5:51:
f3:7c:8c:7a:37:38:c8:18:b2:ca:98:41:21:04:04:
70:85:dc:5d:44:b9:90:42:fa:df:7f:73:2e:1a:e7:
d5:2b:58:27:bc:00:6c:1c:25:2e:82:26:2b:44:2f:
ff:60:6a:b8:53:a4:b4:27:11:eb:4b:ff:28:37:7f:
0e:8e:ac:66:1f:bf:1a:2b:1f:eb:45:fa:9c:0a:35:
79:1d:60:3e:75:e4:33:4f:ee:96:33:06:f4:a1:88:
8a:33:36:b3:42:f0:bc:96:81:df:7f:c4:09:51:b3:
dc:89:f9:c1:70:1e:c5:f2:36:26:04:3b:8f:0b:08:
fd:8e:64:bf:96:6d:a8:24:33:81:0b:d9:bf:62:93:
12:9b:88:97:9d:a2:b2:ae:c4:4e:46:fd:50:ab:43:
61:97:f0:6b:ed:fa:19:a4:c4:ee:b6:d1:9a:ed:5f:
b6:c1:a9:df:8a:25:39:4d:70:58:15:06:33:5f:26:
3e:e5:66:61:5c:96:a1:bf:26:23:60:35:3f:fd:52:
f7:f9:a0:52:e2:46:90:94:e0:26:8c:2e:ba:32:95:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:71:3A:A4:82:7E:CB:46:B5:07:E1:1C:34:F2:24:89:98:F1:F8:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ECF27C0F44B11EF95524495762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.185.0/24
Signature Algorithm: sha256WithRSAEncryption
53:72:cd:5c:4e:ee:22:0f:eb:c6:86:76:93:b5:52:66:4f:d5:
8b:53:1d:64:61:54:fc:af:f9:54:04:88:2c:6d:b7:1e:30:da:
5b:cf:bc:fc:18:3f:6e:da:ee:63:09:b6:67:82:83:16:09:06:
1d:62:c4:5b:a1:64:25:52:d3:ff:0d:a1:33:21:f9:2c:76:38:
1b:d7:86:3e:f6:cb:8e:f4:a2:45:cc:f5:36:8e:71:7b:17:f6:
2d:91:91:cb:62:1e:0d:10:52:2e:d0:5b:e1:7d:ad:a0:7f:8b:
b4:24:17:a5:ac:a2:41:52:47:16:83:f3:29:db:61:84:78:dc:
17:81:74:ea:4f:50:f9:7e:df:9c:3d:dd:33:a1:59:71:16:21:
2b:b3:b3:63:f3:d3:e7:04:3e:83:96:16:81:83:4b:34:16:1a:
69:18:ee:f5:7b:fe:1e:21:8a:8e:ef:86:63:29:cd:08:a3:f9:
87:e8:5b:78:3d:f7:e2:62:a6:8c:42:65:f5:1d:06:e3:be:b0:
8f:14:dc:18:06:54:86:77:01:48:01:43:63:e0:64:ea:3c:24:
94:f5:cc:b7:21:2d:e6:02:35:51:3e:b4:fb:98:52:0b:c2:a5:
5e:fb:52:34:97:cc:6d:8f:d2:49:24:21:14:1e:e3:7b:e8:e1:
20:88:30:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:05 2025 by rpki-client