Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EFB693EE54611EF8D1E234C762E951A.roa
File: 4EFB693EE54611EF8D1E234C762E951A.roa (raw, json)
Hash identifier: 10d/hSSAuQ5Cc4kDCsH5GdQ0LVP/LNRMtRLQ2wjR0ls=
Subject key identifier: 59:E6:DB:7E:B4:3C:BB:A2:E1:F5:84:31:EC:61:93:F3:7C:24:E4:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EFB693EE54611EF8D1E234C762E951A.roa
Signing time: Fri 07 Feb 2025 11:26:01 +0000
ROA not before: Fri 07 Feb 2025 11:25:55 +0000
ROA not after: Mon 13 Dec 2027 11:25:55 +0000
asID: 17561
IP address blocks: 156.230.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73019 (0x11d3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 11:25:55 2025 GMT
Not After : Dec 13 11:25:55 2027 GMT
Subject: CN=67a5edc9-f226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:56:bf:ca:a8:e2:4d:5f:5a:0d:96:b8:7c:
b4:29:5a:bf:d6:8d:68:b7:e3:d6:95:73:4b:63:3d:
61:cf:8b:fa:ec:d0:e8:84:3b:88:13:3a:4c:fb:f5:
94:c1:e7:2b:cd:be:07:a7:c6:01:d4:3d:16:80:3f:
6d:73:e7:9c:3a:b5:62:ba:38:95:aa:9b:16:61:c5:
8a:a2:f1:2e:65:38:dd:74:11:8a:c3:64:0f:90:31:
43:91:96:18:b3:99:6f:ad:0f:e5:a9:b1:bf:0f:43:
42:0c:a6:1e:d3:69:e0:62:d9:6b:04:56:c0:86:05:
43:d5:39:23:a0:e6:e0:ac:39:29:18:fb:9b:a9:26:
27:54:41:a1:72:c6:17:6b:ae:ce:c4:0c:00:70:3c:
5e:15:4a:ab:ce:d3:d2:fe:b5:70:ff:a1:9c:00:28:
c5:cf:e0:3f:df:f8:d7:5d:07:73:ba:1a:8e:1f:8e:
8a:84:4e:8e:a0:65:81:29:e2:2e:3e:b7:9d:00:ce:
a1:76:61:b0:e4:11:fe:1a:f2:30:b7:3e:80:5f:01:
6a:3c:01:41:84:eb:a7:02:cf:3b:89:68:e7:8c:29:
79:c4:a2:7c:62:d2:38:35:5a:81:28:95:44:a4:49:
75:69:46:a0:cb:60:e3:85:10:87:f9:a0:89:ea:6a:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E6:DB:7E:B4:3C:BB:A2:E1:F5:84:31:EC:61:93:F3:7C:24:E4:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EFB693EE54611EF8D1E234C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.181.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:bc:ea:9e:c6:e5:be:09:4c:e5:dd:e5:c7:03:59:3c:c7:bd:
11:19:51:21:0d:6f:51:c2:4f:0e:fe:8b:ba:4d:97:ab:ae:35:
aa:8a:cd:d6:c3:25:e8:70:62:63:87:a4:b6:bd:ed:be:b9:6c:
f1:d6:2e:0b:5d:56:4d:e2:6f:e4:ab:ae:f7:de:03:b4:71:4e:
3f:cb:d6:37:76:c2:68:54:b9:24:7c:ca:92:cf:bb:2e:4f:b3:
c0:2e:ec:1f:6e:4d:82:32:f0:f7:0f:d6:38:97:be:0d:51:28:
1a:f2:4a:1d:c9:7d:f9:9a:3a:08:33:e0:b1:58:1d:24:5f:0d:
9a:c4:ba:a1:b8:51:43:23:36:ac:31:a1:0c:a0:55:d8:65:70:
13:77:e7:0b:92:4c:75:d3:f1:e1:d3:64:13:12:de:62:48:fb:
ce:c3:b6:ed:f1:02:a7:5d:26:20:5e:9a:42:b7:a1:f8:4a:4b:
81:f6:f8:b9:96:fb:05:0f:bb:40:6b:ef:ec:37:4b:53:a6:74:
b3:15:74:6f:48:98:1e:da:fc:25:26:23:2a:ee:94:87:76:61:
53:37:06:38:af:1c:dd:b7:1e:d3:c7:65:9a:b5:5a:ff:74:ae:
b2:e3:dc:5d:95:35:90:24:67:63:28:f8:fe:ee:66:3c:35:f2:
60:df:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:38 2025 by rpki-client