Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/596B14C6F42A11EF9ED9CCAC762E951A.roa
File: 596B14C6F42A11EF9ED9CCAC762E951A.roa (raw, json)
Hash identifier: lAk22qzuf+N1+i6uUk7QEfiTHQNLwLpKxNtPpUv/evI=
Subject key identifier: B0:97:72:C0:A7:0F:6D:DE:93:71:E1:05:2D:56:B3:4D:DF:5B:F3:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/596B14C6F42A11EF9ED9CCAC762E951A.roa
Signing time: Wed 26 Feb 2025 10:13:40 +0000
ROA not before: Wed 26 Feb 2025 10:13:36 +0000
ROA not after: Thu 19 Feb 2026 10:13:36 +0000
asID: 984
IP address blocks: 156.230.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78042 (0x130da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:13:36 2025 GMT
Not After : Feb 19 10:13:36 2026 GMT
Subject: CN=67bee954-d2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:95:55:86:24:e5:64:70:48:84:fd:93:33:
ea:44:ab:e1:38:42:11:ba:42:92:ad:30:eb:ca:59:
f7:3e:6d:31:36:aa:e7:ac:0c:4b:05:f4:cc:91:c1:
e1:f8:1c:bf:c3:02:99:04:ff:26:d2:f0:a5:93:15:
20:40:da:6c:01:da:8f:14:4b:80:8d:15:67:60:51:
42:0f:84:6f:6b:62:a7:34:00:2b:2f:84:cc:87:d7:
d4:71:88:c2:bd:57:fb:64:0f:24:8f:0a:09:56:94:
92:c4:dc:c3:03:b6:5d:f7:c2:f7:a5:9e:9a:b9:47:
a3:f1:53:d2:c7:b7:af:ce:92:a1:8e:69:f6:08:1f:
e3:aa:64:10:ce:3a:75:1c:0c:69:1e:f0:f0:89:dd:
ce:be:22:6d:8a:11:8b:aa:7e:4a:90:22:cd:77:6c:
65:56:de:3a:d5:2e:ac:b4:28:81:c5:72:e8:68:7c:
94:29:d7:9c:3a:46:07:12:89:a6:39:2e:a7:65:69:
26:73:72:8a:11:b6:5d:87:e8:12:e3:03:17:a6:14:
6e:c6:86:52:5e:76:5d:4d:c7:0e:3b:49:04:e8:00:
c5:4a:7d:12:12:ea:11:13:c1:76:27:94:0f:11:3e:
42:8e:bf:70:07:76:27:b2:ea:72:4d:4a:37:1e:ba:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:97:72:C0:A7:0F:6D:DE:93:71:E1:05:2D:56:B3:4D:DF:5B:F3:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/596B14C6F42A11EF9ED9CCAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.144.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4d:e5:cf:10:c7:6d:4f:31:32:de:86:e8:68:e6:e3:2b:37:
a4:7b:e4:a4:50:ed:0e:ad:d9:e5:af:90:58:f9:a1:69:5e:ad:
a2:51:aa:4e:40:ea:d2:c9:fa:91:93:e5:cb:5c:08:e4:2d:81:
70:db:3c:81:7a:16:77:cb:84:8c:6e:18:ef:ef:ec:9d:da:8e:
00:25:77:29:8e:96:79:f9:ed:d5:b6:cb:23:0b:35:be:29:c6:
31:08:b4:af:2d:d8:06:da:56:8d:45:89:b6:da:92:be:c6:47:
ac:14:bc:e3:ec:88:f6:bb:17:ba:fe:aa:8c:d3:f1:66:b7:1b:
98:df:11:0a:5c:0c:b5:0c:fe:cc:d5:5e:ae:98:28:68:36:0b:
24:88:61:b1:49:4d:4d:de:30:2b:89:57:91:10:d5:b2:d6:e9:
92:cb:14:c1:38:d9:50:e1:2a:06:93:95:37:fd:28:1c:2a:cd:
23:cf:64:3a:29:f5:0b:05:b6:5f:37:28:60:22:db:39:b4:5f:
15:66:23:7d:1d:55:41:ba:38:14:b1:b6:32:aa:12:9f:10:4c:
a7:7f:f2:d7:71:0e:04:c2:77:03:10:f1:34:1c:0a:87:45:23:
e0:3b:be:b2:59:f4:6b:71:ce:6c:3d:02:7d:15:9c:70:74:74:
5f:ea:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:52 2025 by rpki-client