Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F1B8886F16B11EFA5DA9157762E951A.roa
File: 5F1B8886F16B11EFA5DA9157762E951A.roa (raw, json)
Hash identifier: xNAintepH11gnKWZrLKcjtARoemnGC2qpruOlON9J1k=
Subject key identifier: D1:41:EA:F5:58:83:DB:1C:26:74:3B:98:BE:BA:2D:92:77:E4:F9:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0129A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F1B8886F16B11EFA5DA9157762E951A.roa
Signing time: Sat 22 Feb 2025 22:21:33 +0000
ROA not before: Sat 22 Feb 2025 22:21:29 +0000
ROA not after: Mon 24 Mar 2025 22:21:29 +0000
asID: 25160
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76201 (0x129a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 22 22:21:29 2025 GMT
Not After : Mar 24 22:21:29 2025 GMT
Subject: CN=67ba4ded-1034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:e8:cd:f5:94:4d:9c:a2:32:90:a1:8c:45:
12:dc:d4:7f:d4:69:81:dc:f2:e9:9a:ee:e8:25:8b:
4b:46:c4:d7:93:96:20:79:9a:be:3b:ff:2d:ef:cf:
3e:a2:09:d1:f7:12:b5:e6:29:13:22:e4:60:50:bf:
c5:8d:a4:1e:b8:0c:5e:b5:84:f6:85:3c:ff:da:d0:
ea:4b:a6:7c:77:cb:28:cc:36:03:b5:ac:3e:a6:c4:
4c:08:76:6f:af:62:ed:ed:df:b6:1f:6a:e0:2d:ec:
68:cc:7e:97:78:e5:bb:8f:dd:d8:1e:a4:74:c6:91:
fe:9f:84:21:a1:65:06:05:50:e0:24:4a:ff:44:bf:
4f:5b:c1:db:f9:e7:68:ec:76:e8:b1:2e:1c:78:b9:
20:49:ed:1f:ba:5b:cc:3a:62:aa:c0:fc:eb:62:30:
c7:ab:08:00:38:bd:06:c4:cc:1c:5d:f6:f1:ce:13:
0a:4f:ac:8e:8a:47:c5:32:90:6a:35:9b:a9:77:25:
83:4c:73:98:2d:74:16:8a:b0:b4:f2:aa:63:1f:87:
32:83:d3:87:56:8f:b1:f3:e8:c6:ab:01:5c:49:33:
ba:39:6c:9c:57:7a:d8:58:97:92:ef:aa:3b:69:17:
a2:c8:65:d8:a0:d6:e0:04:75:5e:16:d6:06:ac:67:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:41:EA:F5:58:83:DB:1C:26:74:3B:98:BE:BA:2D:92:77:E4:F9:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F1B8886F16B11EFA5DA9157762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:8e:24:cf:ad:e4:4f:6e:00:4f:69:8d:1a:c3:0a:c6:22:2c:
23:65:b8:90:f1:fb:1c:8c:ca:c2:c1:a8:bc:0e:b1:26:fa:22:
a4:e9:b9:a8:a1:67:a1:8b:86:09:81:74:97:70:96:b1:56:0e:
ff:06:30:6b:f8:94:d4:c0:c7:e2:f0:03:74:b5:40:a7:67:f5:
c9:ff:a6:af:62:09:6b:59:9c:24:d7:ac:d1:2e:34:d4:4f:83:
d6:7c:c3:ab:51:d9:61:27:f5:74:b9:08:8d:d6:d0:5e:c4:c5:
24:2b:f9:b4:b9:21:6c:c8:48:e9:c9:c2:64:5d:56:77:a2:d1:
47:b9:12:bd:cd:95:fc:5e:ed:8d:e8:31:5f:c0:0a:88:7c:21:
84:0a:d5:98:c8:97:f4:f7:85:35:f9:97:43:b6:c6:df:33:ea:
17:e7:c0:34:f0:31:27:cf:19:ce:18:7b:e8:ec:91:ed:2c:91:
87:03:41:65:66:5e:bc:cd:fa:3e:65:d3:4a:0e:ba:2e:16:56:
00:ff:a7:3e:9d:0e:fd:55:a5:bd:97:58:11:1d:1f:74:41:7d:
7b:84:a3:d3:a5:1c:0a:36:53:94:5f:e8:25:f7:f6:4f:32:ef:
92:6a:e9:03:5e:45:20:70:78:6b:e0:08:1e:43:bc:9c:9b:60:
99:23:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:35:26 2025 by rpki-client