Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F38330023411F0A5B98BA2762E951A.roa
File: 71F38330023411F0A5B98BA2762E951A.roa (raw, json)
Hash identifier: o1MewXbke3BSe+p44zdE56rGWz3WtfToN+XB5oGpUbg=
Subject key identifier: 19:30:70:2B:68:8F:BB:FA:14:D1:60:1D:63:C3:91:C2:00:BC:01:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014655
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F38330023411F0A5B98BA2762E951A.roa
Signing time: Sun 16 Mar 2025 07:01:12 +0000
ROA not before: Sun 16 Mar 2025 07:01:08 +0000
ROA not after: Tue 22 Apr 2025 07:01:08 +0000
asID: 7018
IP address blocks: 156.253.226.0/24 maxlen: 24
156.253.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 16 Apr 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83541 (0x14655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:01:08 2025 GMT
Not After : Apr 22 07:01:08 2025 GMT
Subject: CN=67d67738-513b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:6e:87:85:78:03:4f:06:02:33:98:c0:63:
93:b9:e7:6f:02:1f:98:41:f5:05:d3:37:ea:75:02:
c7:03:6b:37:ad:71:bf:a0:85:4a:26:1c:d9:4f:1e:
6c:1c:5f:07:70:2f:40:43:f5:62:d8:6e:77:ea:5b:
79:51:4f:a0:88:83:29:6d:fe:19:05:11:52:2f:20:
30:a1:f1:8a:ff:5d:ce:5b:ab:9e:72:76:e9:a3:24:
71:db:4c:0e:3f:e8:3f:cb:80:20:13:cc:cc:cd:64:
e3:be:6c:db:1f:c3:b1:8e:f8:47:48:31:46:8c:a2:
47:70:17:d9:7b:88:7b:27:f3:d7:c1:0b:ad:73:5f:
80:3a:80:2d:6f:43:05:e6:3f:80:da:ab:1b:20:61:
53:d0:bb:a6:19:11:14:29:2f:88:0d:c1:00:42:96:
63:c3:9f:9b:21:6a:d1:c2:28:81:98:f8:ee:00:12:
32:f4:50:59:8b:a2:32:09:79:75:d9:2b:c3:b3:d3:
8e:d7:94:90:1e:87:f3:ed:cc:03:83:69:5d:bb:9e:
70:44:a4:0f:1f:c0:48:91:56:bc:71:57:dd:15:a6:
ab:ee:8d:6c:98:7b:10:c3:83:e5:a2:1c:e7:ae:8d:
70:64:ec:31:0e:c6:b7:59:ef:55:c8:ae:c0:f9:48:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:30:70:2B:68:8F:BB:FA:14:D1:60:1D:63:C3:91:C2:00:BC:01:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F38330023411F0A5B98BA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.226.0/24
156.253.240.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:71:9e:f6:d2:ab:50:ce:99:3d:b2:0f:ac:8d:0f:d8:b0:df:
58:26:a9:c1:ee:00:15:7e:c6:4f:e8:7c:54:ef:49:8c:79:05:
2b:5f:19:40:3b:38:f5:98:3a:e2:cd:64:a7:a6:c0:5e:f1:63:
ef:1c:24:8f:9b:59:b5:f2:b2:46:1e:44:98:6c:ba:cb:d8:a3:
27:38:7e:c0:09:9b:85:c1:07:72:3c:51:2f:b0:20:06:34:cf:
f1:e2:7f:88:25:0b:dd:3e:07:30:ef:b7:39:71:e6:1b:8c:57:
b5:22:b5:6f:d3:54:53:7f:0f:f7:bc:4e:33:98:0e:88:98:60:
3e:91:f1:66:39:de:38:a8:ea:cd:f6:ad:0c:e5:e9:cc:f5:cd:
0a:c4:d7:3a:58:5c:cd:58:b8:47:7c:cc:81:4f:41:fe:1c:88:
89:6a:98:5b:99:3a:33:98:8f:eb:56:03:22:4d:11:2c:49:71:
1f:ab:96:e8:4f:93:7e:97:15:3d:e2:a3:d4:dd:39:b0:3d:84:
17:87:b7:30:f0:1d:36:64:df:a6:11:76:45:af:ac:f4:84:24:
65:39:dc:d7:b8:0a:86:0f:6f:85:69:f2:bd:aa:7b:1a:d9:f9:
c8:ba:c8:5c:a7:a9:dc:bb:1a:a8:4b:df:13:88:13:de:54:da:
0e:d9:f2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:11:06 2025 by rpki-client