Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/503DF08AF35811EFA1716E92762E951A.roa
File: 503DF08AF35811EFA1716E92762E951A.roa (raw, json)
Hash identifier: MmN6HY4Wbw3tk1sowwUR5e8GeWuoUKdrcYUAKNTmWFM=
Subject key identifier: 29:9A:62:7C:6C:29:58:F1:92:95:0D:5B:A8:E1:57:AA:1A:A6:68:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DFE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/503DF08AF35811EFA1716E92762E951A.roa
Signing time: Tue 25 Feb 2025 09:10:10 +0000
ROA not before: Tue 25 Feb 2025 09:10:06 +0000
ROA not after: Sat 19 Feb 2028 09:10:06 +0000
asID: 17561
IP address blocks: 156.249.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77310 (0x12dfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 09:10:06 2025 GMT
Not After : Feb 19 09:10:06 2028 GMT
Subject: CN=67bd88f2-f87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:97:a7:cb:24:5e:6d:1e:44:10:5b:41:95:
1f:a5:34:5d:00:39:6c:bf:45:7e:6e:67:84:f2:bd:
0f:54:05:16:a8:03:09:76:8a:c6:ec:61:b6:8f:8b:
8f:ba:5f:5a:ab:6d:ab:aa:34:b0:26:8e:c4:c7:ce:
41:ba:59:9c:64:a2:e0:e0:d6:28:98:e4:fd:4e:8e:
f6:b7:1d:68:fa:63:d2:ba:38:85:3d:18:c1:22:27:
38:e5:db:7d:b9:b1:9e:8f:37:58:22:e4:d9:72:d2:
1e:28:26:9f:a4:42:d8:63:98:06:8d:ce:db:80:11:
c6:a4:57:34:a4:99:f8:5c:2e:77:71:79:0e:9c:51:
24:f4:35:c1:d3:de:ff:9a:65:a6:ff:b3:0a:3e:6e:
6e:9a:a6:df:56:f3:ba:8e:6f:bd:c4:26:b4:7b:36:
82:9c:d5:6c:79:d2:bc:07:c8:78:ab:50:bd:01:e5:
dc:33:6f:4f:43:d9:91:15:6e:0a:5b:b8:c7:c5:c8:
16:14:90:57:0c:5a:21:b5:6f:ec:c4:54:57:39:8c:
e6:35:09:6f:67:1e:bd:be:be:39:95:be:c3:dd:26:
28:ea:35:51:fc:c6:21:26:3c:db:f9:fa:6c:6d:6f:
e4:17:5e:ee:dd:a6:18:a3:c5:15:16:24:d1:e4:e7:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:62:7C:6C:29:58:F1:92:95:0D:5B:A8:E1:57:AA:1A:A6:68:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/503DF08AF35811EFA1716E92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a7:b5:04:4b:81:fc:6f:81:08:d2:75:e5:23:a4:a5:67:f8:
22:d1:db:26:a7:71:b0:ac:64:64:bb:8e:2f:14:6d:56:e6:3b:
82:aa:f2:90:ba:0d:b7:79:b4:7d:35:37:99:cd:33:24:c4:f7:
b9:6d:5b:80:4f:94:bb:06:2c:12:64:40:0e:14:57:e7:67:c7:
5f:08:b2:9d:67:12:c5:d2:61:30:0e:98:65:cf:df:d4:65:cf:
da:61:3d:67:36:5e:57:5e:db:6a:13:c4:c8:3f:c4:74:cb:bb:
01:fb:f5:f7:db:9b:c5:6d:88:6a:20:e0:f6:d9:aa:f2:c6:60:
95:fc:23:ce:48:5b:b5:b7:dd:06:65:71:1b:12:1d:8e:b4:b0:
b5:5f:38:7f:4e:3a:8f:f4:42:f1:77:eb:a7:c3:63:d6:fa:b0:
15:31:71:7c:13:ce:a2:1e:22:7d:f5:5d:c6:35:ad:75:6d:ab:
cc:35:56:1d:23:53:60:e3:17:c4:4a:86:3b:7f:92:de:f7:0a:
46:a5:9d:9e:c0:9d:48:1a:51:51:ec:e2:c6:b3:e6:3e:94:b6:
72:a7:26:cf:a0:f4:6a:a3:a0:f3:53:ad:6b:79:b8:51:fa:e6:
b9:f8:a6:0f:82:7d:39:3a:9a:db:da:10:26:dd:27:c8:b0:bf:
2d:e4:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:55 2025 by rpki-client