Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A7EE48CF4BB11EF809CD1AB762E951A.roa
File: 5A7EE48CF4BB11EF809CD1AB762E951A.roa (raw, json)
Hash identifier: mohhPNP/se0RcRqCpLDv6E2OlAaN/KAXfEgGzMrOpdg=
Subject key identifier: 49:81:49:A3:74:0F:C0:CD:86:9A:99:E3:FB:09:00:56:4A:18:B1:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A7EE48CF4BB11EF809CD1AB762E951A.roa
Signing time: Thu 27 Feb 2025 03:31:39 +0000
ROA not before: Thu 27 Feb 2025 03:31:35 +0000
ROA not after: Sat 19 Feb 2028 03:31:35 +0000
asID: 17561
IP address blocks: 156.229.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80075 (0x138cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 03:31:35 2025 GMT
Not After : Feb 19 03:31:35 2028 GMT
Subject: CN=67bfdc9b-ef6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:74:29:6d:fe:7f:21:7a:6f:74:9c:5b:05:
43:b8:c0:ee:4a:21:0b:85:70:08:55:db:f0:ec:1a:
70:d6:d6:cf:db:56:99:58:68:d5:76:47:31:63:e0:
0f:07:29:c7:7b:71:ef:6f:f0:62:15:eb:6d:33:dc:
af:d3:eb:6f:ff:62:ef:f6:a2:cb:7b:4e:60:81:b4:
64:69:24:c5:a2:36:57:34:1d:1a:4e:e5:0e:9f:0b:
03:9d:ba:2f:7c:df:6c:3a:f7:8e:b8:b1:75:d2:c4:
21:ef:83:a6:3e:03:33:ee:7d:82:8e:cd:81:13:da:
1e:39:d6:64:c2:3e:d4:39:19:b0:80:84:72:03:b6:
05:03:ce:68:8c:5e:fc:b5:46:e7:c5:12:66:a3:4b:
93:6b:8d:4f:dc:c3:01:c9:df:0d:9f:eb:e4:0a:2f:
0e:ff:42:71:16:d0:40:4d:19:33:04:db:60:03:c2:
95:4d:c6:8f:62:21:c5:c3:ef:17:13:d0:c7:71:6b:
1e:03:67:b8:41:27:83:6b:a8:6b:e8:16:63:f3:da:
f0:89:10:f5:44:ee:38:8c:41:2c:fe:d1:68:7f:05:
36:b6:e6:c7:78:23:55:8c:03:86:ae:09:4d:fa:e7:
5b:b2:78:1f:7b:22:e5:28:c5:5b:70:b6:64:e1:22:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:49:A3:74:0F:C0:CD:86:9A:99:E3:FB:09:00:56:4A:18:B1:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A7EE48CF4BB11EF809CD1AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:be:f5:fe:f7:1a:48:3e:a0:26:71:1d:6d:43:1f:fa:3b:3a:
c6:8d:52:ff:fa:e0:4f:fb:a0:0d:22:76:33:88:0f:84:26:8b:
43:7a:f3:56:7a:e8:d3:fc:15:ea:56:9c:1a:bf:d4:e5:9e:bd:
72:72:2d:5d:18:32:82:c9:f0:41:5a:19:e2:4b:0e:63:ed:60:
c9:f0:61:fd:dd:6a:3a:f2:4b:d7:33:ec:40:fc:7a:d2:75:89:
58:b6:eb:7f:5d:80:d2:47:60:b4:54:e5:18:79:ba:c9:80:e8:
7b:24:e0:f0:d5:ef:9e:4c:29:bd:02:22:76:da:fc:1e:0d:6d:
d8:ad:3b:ee:c0:f0:3e:2e:58:0b:55:8f:5f:ae:29:66:71:c4:
b1:22:00:d9:30:be:4a:fe:7c:45:09:12:8d:e6:e0:c5:9d:bd:
45:7b:fe:d0:9f:3d:a9:e9:84:4f:c6:5f:4c:ee:61:e1:75:e6:
1f:87:17:b0:b5:fa:ba:9e:b4:7a:c1:59:19:0a:54:71:e0:d5:
1c:ab:43:ec:32:09:60:cd:44:55:96:c7:6f:5e:e3:4f:1f:5f:
86:99:5c:01:86:88:c0:18:2f:f0:2e:87:92:98:93:a2:e6:85:
28:17:16:7a:06:79:f4:3f:44:a9:0b:9e:ad:20:89:25:5f:77:
c7:d7:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:19 2025 by rpki-client