Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6348490AF4A211EFA1CDAC6B762E951A.roa
File: 6348490AF4A211EFA1CDAC6B762E951A.roa (raw, json)
Hash identifier: Om9V/x1oB3AlbBnQ62U3lFVBpdDUo3gymHpnLR75ut8=
Subject key identifier: 53:CA:16:41:62:55:E9:0E:A3:ED:00:3E:E5:1D:02:A1:FE:0C:45:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013879
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6348490AF4A211EFA1CDAC6B762E951A.roa
Signing time: Thu 27 Feb 2025 00:32:56 +0000
ROA not before: Thu 27 Feb 2025 00:00:52 +0000
ROA not after: Thu 19 Feb 2026 00:00:52 +0000
asID: 984
IP address blocks: 156.232.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79993 (0x13879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:52 2025 GMT
Not After : Feb 19 00:00:52 2026 GMT
Subject: CN=67bfb2b8-01fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:a1:72:28:f7:18:bc:4c:a2:b7:03:17:af:
df:d7:9b:ab:f4:66:23:83:da:05:07:1c:ec:a9:bf:
18:d3:46:a7:80:4c:0a:ce:6c:a4:17:8e:8e:b0:f6:
f9:2c:12:47:ed:14:61:ca:91:55:51:b6:90:dd:16:
20:93:95:24:f4:f2:bb:aa:91:4f:b7:a3:03:6d:bd:
b6:c5:79:7b:37:f9:d0:b1:9e:38:8b:56:dc:9a:8c:
75:1f:3f:62:b3:a7:50:ae:e0:ee:03:72:ed:01:a6:
fc:24:10:e0:84:51:6b:f8:b0:11:92:68:42:93:78:
4c:dc:54:8c:95:14:19:34:6d:d0:ae:7d:e9:52:59:
03:10:cb:b0:a3:79:52:b2:33:f0:9a:c6:80:32:b6:
b2:d8:bf:2d:5a:1a:79:84:6c:d7:79:5d:a7:bb:0a:
e9:e7:4d:99:55:c1:c1:46:99:e3:18:5b:cc:33:e9:
3a:ff:28:52:44:21:38:f0:ed:3c:6c:9c:9a:f4:e3:
72:6c:e2:6b:65:92:33:24:6c:b6:8f:d8:b1:08:d0:
74:3d:54:25:a9:c9:5b:0a:9c:7d:f9:c3:05:59:d2:
9f:b9:75:a3:c8:7b:c2:be:3c:31:89:ea:b6:fd:32:
e4:b7:6c:c0:0b:ee:ca:ac:a6:03:44:bc:4e:ac:26:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CA:16:41:62:55:E9:0E:A3:ED:00:3E:E5:1D:02:A1:FE:0C:45:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6348490AF4A211EFA1CDAC6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.67.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:86:c2:a0:3d:c9:f1:90:07:a8:f5:9c:ec:d2:ff:8f:e3:88:
52:cf:dd:2f:0a:7a:46:65:81:91:fa:8c:09:c9:44:18:d5:e8:
9e:98:52:a4:df:e1:dc:9f:47:4c:23:51:1d:9e:4f:d3:11:a2:
b3:d8:ca:b8:ed:c7:ce:5b:3d:bb:3e:c5:41:b1:b8:97:b4:77:
2c:f4:4a:a6:31:25:04:86:24:0a:c5:90:7e:60:e2:d5:ff:14:
8f:93:04:1a:67:e5:31:bf:48:50:28:67:a0:01:36:dd:f7:94:
45:6b:56:8a:e8:69:df:97:ed:98:b3:17:f7:00:62:4e:44:e6:
2c:7c:4b:6a:e2:5d:6f:bb:b0:1a:c1:51:c6:95:59:b0:61:c9:
3b:f0:d4:1a:69:7a:b2:73:df:40:ca:d0:55:12:83:82:e4:e6:
a5:15:6c:7e:be:85:1a:a4:13:cf:88:62:9c:66:d7:10:32:d6:
d0:7b:b9:46:6d:67:2c:8b:cd:b3:2f:ad:c2:c5:67:c5:cf:c3:
97:1b:2d:e7:f8:dd:e3:9d:6e:bb:1c:f3:d9:50:9e:ff:3a:b2:
d3:32:03:88:94:4a:46:10:49:33:90:4e:22:2d:da:13:cf:39:
db:44:16:fc:2f:9a:2e:ee:f5:23:f0:09:bf:f9:28:98:2f:df:
a2:96:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:09 2025 by rpki-client