Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/572D5E14F45511EF864F375C762E951A.roa
File: 572D5E14F45511EF864F375C762E951A.roa (raw, json)
Hash identifier: wZ0SvVBw5ijvGvC+aTKOIdN1YwEaN4C+pTxuipMHjKc=
Subject key identifier: 76:D3:BC:7F:CA:B2:A1:F7:DE:45:F9:A7:A8:05:A6:5D:2E:1A:AB:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013437
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/572D5E14F45511EF864F375C762E951A.roa
Signing time: Wed 26 Feb 2025 15:21:24 +0000
ROA not before: Wed 26 Feb 2025 15:21:21 +0000
ROA not after: Thu 19 Feb 2026 15:21:21 +0000
asID: 984
IP address blocks: 156.231.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78903 (0x13437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:21:21 2025 GMT
Not After : Feb 19 15:21:21 2026 GMT
Subject: CN=67bf3174-a7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:42:8a:32:47:49:e7:cb:a0:39:ba:25:12:
c7:27:69:15:cd:7f:bd:00:9e:4c:91:61:0c:e1:fc:
98:45:27:ac:67:11:53:c9:2c:13:48:1a:82:14:70:
d0:bf:09:02:3b:fb:1d:49:40:f3:7b:ac:98:44:99:
cb:7b:27:57:2f:bf:3e:0e:eb:22:13:9d:7b:71:6c:
b8:b6:45:74:fb:05:ae:b0:bc:34:44:26:a2:48:e6:
50:4a:c0:f4:04:1a:9d:26:ea:47:60:1e:f5:22:00:
d4:5c:77:98:09:cf:28:f4:4f:6c:d2:6a:a0:86:37:
41:a0:e4:c0:68:1d:1d:cf:6f:d8:9c:09:ae:18:11:
e6:06:a0:9e:df:3c:ec:23:31:89:f8:1a:d8:ce:63:
61:bd:77:db:6f:e2:04:23:8b:26:74:35:5b:3e:96:
2a:7f:e6:3d:50:ad:33:ee:d4:74:62:ba:dc:49:f5:
33:c3:40:bc:9f:20:13:58:1c:ea:d2:a6:0e:55:15:
d3:cd:0b:3a:0a:57:28:e4:a5:06:7f:65:8e:98:0c:
05:55:65:d7:30:8f:6a:f4:93:81:a6:58:bd:75:a9:
0e:7d:14:12:87:b2:a2:0f:c2:7d:4a:3a:c6:0d:f4:
21:0c:3a:6c:73:69:ee:33:89:9f:77:a3:a2:cf:1f:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D3:BC:7F:CA:B2:A1:F7:DE:45:F9:A7:A8:05:A6:5D:2E:1A:AB:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/572D5E14F45511EF864F375C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.208.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c4:4c:6d:2e:ae:8b:87:c3:82:21:db:c6:cf:d1:5e:a8:c8:
90:1a:68:c7:07:39:38:9b:1f:34:f7:85:54:a3:0f:fe:b6:97:
c8:57:e6:bd:6e:de:b0:95:8a:c7:5f:2c:45:20:b7:2c:b0:88:
76:c2:4a:df:56:78:75:02:42:6d:5b:3d:fe:cf:23:ee:f7:2d:
79:dd:9d:cc:24:09:d1:b0:b7:aa:dd:25:be:2a:87:01:21:c7:
6a:a4:5b:e1:31:94:66:2b:7c:a1:b7:d6:05:d6:59:0e:1e:89:
ab:0f:4b:77:6a:94:0b:31:19:51:b5:d2:0e:82:57:08:a8:55:
25:3c:0f:3b:5e:aa:4b:12:22:56:bd:d8:29:9c:d7:fa:e5:27:
2d:bd:8e:cc:a0:f4:d5:70:59:8d:cc:eb:52:9f:1c:12:ba:9f:
74:8e:34:f4:9a:ed:e8:85:1e:ce:81:53:5c:d7:58:ee:dd:27:
f3:9a:9c:87:fd:45:a9:6b:af:5f:21:56:d9:32:94:b9:b9:56:
57:ea:f0:0e:91:68:13:29:9e:8b:5a:f4:7c:b0:fc:87:f9:82:
aa:34:5b:37:f3:01:d5:fd:d0:7e:43:1d:46:1a:38:60:89:8c:
0e:16:35:2f:4a:fd:a6:a2:4b:4c:8a:66:68:73:7a:65:8e:e0:
55:ab:a6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:37 2025 by rpki-client