Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/570A11C4F5DC11EFA0A65163762E951A.roa
File: 570A11C4F5DC11EFA0A65163762E951A.roa (raw, json)
Hash identifier: inE5o/31eQ1GTTzjiDzmCnweLhyTXRZ/BKWqOlyAFn4=
Subject key identifier: 21:76:1D:FB:10:49:0A:8B:58:68:B6:7F:D9:AD:AD:03:BA:61:20:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/570A11C4F5DC11EFA0A65163762E951A.roa
Signing time: Fri 28 Feb 2025 14:00:17 +0000
ROA not before: Fri 28 Feb 2025 14:00:14 +0000
ROA not after: Sun 13 Apr 2025 14:00:14 +0000
asID: 138915
IP address blocks: 156.244.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81429 (0x13e15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 14:00:14 2025 GMT
Not After : Apr 13 14:00:14 2025 GMT
Subject: CN=67c1c171-fa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:51:a8:a3:59:6b:ec:f9:9d:53:56:a2:64:
27:ec:2f:c8:a5:50:4d:6c:c2:0b:45:09:ce:54:9e:
76:53:93:c8:5e:7b:94:54:c2:4c:af:f4:ca:12:f6:
b7:27:08:24:1d:f2:d9:c8:f3:d6:1c:33:d2:b1:b9:
46:eb:08:c6:1e:e7:7b:c9:8b:88:84:de:26:56:29:
0b:3f:eb:1b:af:0f:d4:c5:c4:02:51:74:75:d8:4c:
ea:1b:b1:cc:b4:78:db:1f:85:1f:59:b1:2a:8f:9c:
79:23:26:a0:db:18:fb:2e:b3:b0:28:ff:a8:c9:d2:
b0:70:3e:9b:93:2f:eb:bd:6d:c8:ee:13:8c:8e:80:
95:4f:1a:91:b6:96:a7:2b:b3:30:16:87:56:ef:c3:
32:d5:8b:c2:40:72:3c:4a:0d:67:a5:a6:be:d1:fa:
a5:80:90:40:f5:4f:d9:5d:c0:a1:f4:3c:02:e3:8a:
df:9b:7c:54:b7:b5:90:3a:cd:65:cf:4d:23:f2:3b:
70:c5:48:36:4d:42:85:73:7f:80:95:4c:2a:64:9f:
1a:c6:fc:79:9b:9d:a9:14:fd:b0:1e:e1:45:75:41:
75:8b:54:69:6b:f5:7f:b7:23:b0:ca:76:8a:d9:20:
84:f2:b5:6b:c4:cd:79:d3:40:63:a7:08:e5:7f:69:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:76:1D:FB:10:49:0A:8B:58:68:B6:7F:D9:AD:AD:03:BA:61:20:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/570A11C4F5DC11EFA0A65163762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c4:60:6b:c8:09:51:f5:14:42:f6:2c:d5:cf:2f:f9:3d:08:
f3:dd:40:c4:a8:61:fe:1f:50:be:80:c0:a8:0f:28:c7:b8:e3:
5d:77:b1:96:39:95:56:7b:e2:09:bf:cc:2e:37:17:7f:00:be:
55:05:6d:3c:d3:27:c2:db:00:65:15:ec:97:a7:5d:0e:ab:54:
d9:c0:96:b4:95:d5:dc:72:bd:e9:94:bc:9d:6b:cb:3d:46:ec:
f7:62:aa:74:fa:ca:d7:2a:27:c1:c1:4d:a3:b7:00:16:82:51:
d6:84:75:05:65:83:d9:36:8c:f6:9e:28:99:3d:ee:3e:91:7b:
f6:bd:e7:58:fa:c4:47:66:98:a6:b6:b7:6d:f8:46:fd:58:30:
78:9d:5f:92:2b:a9:54:8e:dc:e4:94:46:4a:bc:51:8f:9b:9d:
91:d2:1a:ee:14:a8:79:0d:67:b5:7e:c9:bb:eb:b1:ef:c6:c9:
1f:ad:bd:6f:44:f0:16:54:c2:4e:06:14:89:d6:f6:64:6f:69:
5d:7a:9e:17:1d:0b:33:f1:e2:d5:4d:3d:42:90:5f:94:59:4a:
41:37:67:fe:77:d3:16:52:42:c4:40:9a:fd:c4:22:04:49:bc:
a6:19:5c:ba:8c:95:12:7c:3d:25:7a:bc:72:b1:dc:46:b4:04:
43:ca:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:18 2025 by rpki-client