Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C350068E53911EFBC2E6478762E951A.roa
File: 5C350068E53911EFBC2E6478762E951A.roa (raw, json)
Hash identifier: 2xLOI3ERGt9ktDbS3rPBvaPOevk3R3nJZ4hH2H/Sqt0=
Subject key identifier: A6:AE:2D:60:1C:A8:8F:04:7C:CF:27:EC:53:F0:71:78:B6:38:1D:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C350068E53911EFBC2E6478762E951A.roa
Signing time: Fri 07 Feb 2025 09:53:19 +0000
ROA not before: Fri 07 Feb 2025 09:53:16 +0000
ROA not after: Mon 13 Dec 2027 09:53:16 +0000
asID: 17561
IP address blocks: 156.230.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72915 (0x11cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 09:53:16 2025 GMT
Not After : Dec 13 09:53:16 2027 GMT
Subject: CN=67a5d80f-438f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:4d:93:2d:39:92:68:55:8b:11:5b:e6:f9:
b2:fd:f4:60:68:90:5e:24:e6:89:8e:3e:44:bf:d9:
d3:32:d1:6a:3a:62:5f:1b:b5:9e:90:0a:ef:ef:fc:
91:ff:8f:3f:ac:d2:33:6d:e1:72:11:67:c6:e8:77:
de:dc:c2:4c:84:4f:78:5f:73:64:df:74:5a:16:51:
98:b3:75:3c:6b:dd:e5:ba:ec:db:d4:4a:42:6d:44:
c7:2b:9b:70:0e:92:59:52:4b:13:12:8d:cc:f8:8b:
7f:64:df:75:c7:5f:13:49:bd:c6:ce:95:d0:a3:fc:
2b:6a:c1:ef:f4:6a:41:91:1c:39:ab:2e:b4:92:01:
e3:b9:8a:cd:37:4f:af:82:78:6b:6c:47:15:a3:b5:
6f:25:94:0d:64:ea:f2:6d:e4:e5:d0:0f:39:9d:d9:
ff:65:f4:27:71:42:9d:38:30:04:cd:8f:06:98:1d:
ec:16:80:7a:3f:e0:f8:34:0a:c0:48:e7:b4:ff:7c:
de:0c:3f:09:78:9c:8e:dd:42:a2:b1:74:ed:84:77:
fb:b5:f0:70:68:ff:91:35:84:86:a2:06:94:84:d9:
67:52:e4:53:c6:cf:c6:de:0d:9f:6e:2d:20:51:f2:
2d:8c:4a:32:16:64:8a:8f:d9:18:2a:36:47:86:49:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AE:2D:60:1C:A8:8F:04:7C:CF:27:EC:53:F0:71:78:B6:38:1D:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C350068E53911EFBC2E6478762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ae:05:b2:a8:10:c5:46:6e:0b:3d:66:6c:db:de:e6:80:f9:
97:06:24:e2:c8:ea:0a:6b:19:c6:e0:52:cd:2d:cb:42:ef:35:
31:c5:93:26:67:6d:7c:50:e6:b5:97:42:7b:6f:30:4c:fe:b0:
6e:85:fd:ec:26:89:a7:aa:9c:c0:23:82:da:27:f4:96:11:32:
1c:6f:96:ff:d3:cd:83:9e:bc:3c:da:9e:ba:29:ab:d5:70:b3:
c9:d2:96:e6:32:2b:eb:78:7b:a0:9e:5f:7f:54:28:d3:db:cc:
a7:5f:93:38:31:ef:5e:71:66:e6:0a:26:1b:a8:93:21:14:e0:
d9:2d:05:66:8d:96:93:6e:ba:70:1d:68:32:e8:5b:80:58:be:
74:f9:42:d0:1a:fc:9c:19:18:da:4b:32:3f:96:11:3d:d3:f9:
27:e5:bd:4a:b3:9e:0e:ad:d5:1e:fa:0e:e0:c5:b1:63:a2:a8:
ed:43:c1:57:f7:50:56:ef:7d:1a:ae:a5:c8:ec:3a:e9:d3:19:
16:f9:83:5a:16:38:a3:bc:5d:6c:cb:c0:f6:ef:a2:e5:fc:dd:
b2:76:b0:75:93:e1:a1:fa:84:2f:0c:1a:83:2e:3c:58:ff:1f:
42:18:82:a9:86:93:61:18:b4:06:3e:24:dd:11:ea:16:77:b4:
b6:c5:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:58 2025 by rpki-client