Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71AC78D4F34611EFB9F2DA9A762E951A.roa
File: 71AC78D4F34611EFB9F2DA9A762E951A.roa (raw, json)
Hash identifier: AMhIcuTqZy1CedqVbNButCeXnMASWtPOF9i4bf/41mg=
Subject key identifier: C9:6A:B1:BB:03:6F:D5:C4:F4:8A:E2:34:0D:02:17:95:1C:57:E6:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71AC78D4F34611EFB9F2DA9A762E951A.roa
Signing time: Tue 25 Feb 2025 07:02:15 +0000
ROA not before: Tue 25 Feb 2025 07:02:12 +0000
ROA not after: Sat 19 Feb 2028 07:02:12 +0000
asID: 17561
IP address blocks: 156.249.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77208 (0x12d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 07:02:12 2025 GMT
Not After : Feb 19 07:02:12 2028 GMT
Subject: CN=67bd6af7-38e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:b8:a2:1c:e6:19:2d:da:60:50:cf:c3:6a:
e6:5e:df:f4:d9:0c:89:55:51:62:79:ab:a3:91:51:
6b:d4:9f:cf:5e:c3:81:c0:fb:0a:55:27:3f:0e:82:
c4:ae:60:05:e5:5a:ab:ec:86:5d:0f:1b:e8:f2:e9:
9a:86:7c:5e:a7:c6:6e:a3:b7:23:27:d1:99:81:97:
44:e0:dd:51:81:4f:3f:6b:cb:c6:11:f8:07:c2:77:
ae:fc:70:d3:75:b0:a7:ba:23:9f:7a:a6:d3:e4:57:
72:f6:51:98:d3:f2:82:fe:11:3f:b8:49:89:a6:e6:
86:39:9e:98:61:4e:9a:39:5a:75:37:7c:46:fe:02:
2d:40:23:ce:ed:18:d0:30:fe:ef:76:a7:b3:61:af:
ab:cb:92:53:81:f3:9f:5c:af:76:1c:98:4a:99:9e:
62:79:7b:0b:bd:0d:35:c7:a9:c4:41:6b:93:b4:1c:
e4:7d:b6:49:64:fe:a2:cb:f5:76:84:b5:44:22:b4:
55:08:07:27:a8:31:34:55:ee:2f:d8:fb:f2:7f:22:
3b:d7:f3:7b:4b:ff:b8:2f:5c:89:0c:58:8c:88:7a:
d5:7d:b5:ed:5a:08:a2:e3:55:5f:d9:18:c5:00:4d:
05:3f:b5:ed:97:f0:88:ba:b4:39:ce:41:67:e8:ba:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6A:B1:BB:03:6F:D5:C4:F4:8A:E2:34:0D:02:17:95:1C:57:E6:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71AC78D4F34611EFB9F2DA9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c4:e8:15:11:2e:6c:2d:0e:52:4c:59:e4:d9:56:3a:68:d9:
b3:fe:d6:dd:3f:00:3c:b5:ac:2c:29:ba:18:b4:f9:f0:8c:ad:
50:a7:ce:cd:d8:70:f1:60:d2:20:49:d9:f2:e2:70:19:20:0e:
c9:88:61:cb:19:d7:0d:ce:69:0b:a3:2e:76:1d:ec:c5:4e:fa:
49:c9:90:ec:5e:09:2e:92:ce:6a:78:62:0c:bd:5d:a7:07:b0:
69:a7:ad:51:9a:a7:e6:4a:50:6f:42:25:c2:fd:e5:c3:52:e0:
99:7d:91:1a:dd:42:4c:c4:83:0b:a9:48:69:fd:20:6f:b8:7b:
ae:e4:9e:3d:32:0f:be:19:4d:62:41:aa:09:4f:65:ae:5a:3d:
24:77:36:84:f6:17:f1:14:6f:cd:24:22:8f:a6:89:51:72:53:
71:2e:81:81:10:ea:c0:c8:1e:a6:8c:c7:11:ed:2d:4c:42:89:
a3:8b:fe:62:5a:76:eb:2d:76:47:db:8e:62:8f:76:e6:07:12:
f5:3d:fc:2d:11:1a:33:4b:26:17:fd:6a:cc:54:22:95:b9:54:
1a:9e:3d:bd:ce:1e:33:fc:0a:ff:32:f1:b3:da:77:84:04:b9:
b8:58:e2:75:b8:2a:2a:76:98:69:e7:28:78:fc:bc:6b:6f:e8:
20:3a:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:40 2025 by rpki-client