Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7370B914F47C11EF81283D6A762E951A.roa
File: 7370B914F47C11EF81283D6A762E951A.roa (raw, json)
Hash identifier: +uq0Arn2PrfLN17Z2Pp+CQVeXc922pqAgwq78WqDBPg=
Subject key identifier: AE:E8:51:B0:B3:69:C2:F5:50:82:40:96:07:59:85:04:BA:DB:AF:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013753
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7370B914F47C11EF81283D6A762E951A.roa
Signing time: Wed 26 Feb 2025 20:01:22 +0000
ROA not before: Wed 26 Feb 2025 20:01:18 +0000
ROA not after: Thu 19 Feb 2026 20:01:18 +0000
asID: 984
IP address blocks: 156.247.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79699 (0x13753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:01:18 2025 GMT
Not After : Feb 19 20:01:18 2026 GMT
Subject: CN=67bf7312-f09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:4c:30:7a:a7:b2:72:e7:3e:89:0f:38:8d:
bc:d2:fd:56:b0:a1:ad:24:9e:bd:b4:e3:23:b4:05:
73:c4:89:ae:89:4d:ae:4b:2d:bb:a6:a9:54:cd:68:
5a:27:8f:f1:24:8c:1a:dc:b8:ea:e5:54:7e:f7:0a:
67:48:be:32:bc:2c:c1:2b:cc:f0:54:8b:66:12:f1:
98:6a:9f:e4:90:b4:34:57:9b:c2:f1:25:3d:c1:36:
d1:91:02:f3:1e:e0:73:2d:69:02:ed:7d:f2:41:9d:
e9:6a:2e:a5:dc:b9:15:58:9c:7a:60:17:18:ba:14:
a8:74:d8:74:ab:25:eb:94:b9:e6:84:a9:a8:65:46:
18:50:ad:5f:a2:70:b9:9e:9a:56:6e:3b:75:37:e9:
fe:bf:67:74:ee:5f:7f:47:5e:03:6f:f6:54:e9:f2:
6d:4c:75:1a:cf:04:74:1f:4a:88:a3:39:ce:ce:d7:
15:5a:e8:7c:f5:5e:09:8b:81:2e:1d:ef:51:04:38:
db:83:7b:c3:ae:e6:35:7d:06:a8:21:bd:c9:c9:04:
38:22:23:38:e5:b1:ca:c0:95:cd:18:fa:14:e4:3e:
21:18:72:a9:78:42:79:93:b3:ff:d3:26:44:c1:99:
1e:89:c8:11:25:63:f1:2b:96:de:16:86:61:67:9f:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:51:B0:B3:69:C2:F5:50:82:40:96:07:59:85:04:BA:DB:AF:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7370B914F47C11EF81283D6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.44.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7c:f5:6e:a5:3d:03:f3:04:59:24:6b:5d:07:d7:07:fb:f2:
72:e8:20:ee:88:44:59:64:80:e8:e1:d6:b1:2a:e3:0b:09:c8:
e3:9c:d6:a4:c0:b3:d5:6a:c7:96:90:78:23:97:81:e7:9f:4d:
f3:1c:6b:ea:e7:86:34:31:3b:f2:6b:02:ca:12:2a:96:cb:2e:
df:e9:c8:f0:6b:8f:3c:0b:4c:2d:55:b7:32:b6:e2:be:b1:2c:
57:9f:9e:f4:ab:98:02:10:11:e4:e6:7c:43:6b:dd:5d:32:86:
12:d7:85:63:c9:a7:43:ab:57:30:e4:b7:ef:86:b5:f0:86:52:
51:17:20:8c:9f:be:74:a8:47:7d:1b:08:e4:71:df:f6:ea:19:
5d:40:8e:d7:f5:39:b7:d9:d7:5f:23:88:e5:d1:c4:f5:28:85:
60:fb:ed:07:bb:54:fc:32:15:e0:7d:0e:3b:95:d0:38:33:06:
7b:14:22:42:16:72:d9:22:c8:71:ca:37:6d:6b:01:a3:39:c1:
21:0c:00:93:60:65:f4:be:83:93:13:8f:b9:f1:5f:4d:88:2b:
b1:5f:1b:a2:de:28:89:d9:93:79:86:d1:b3:52:d1:43:9a:ec:
eb:89:40:46:5f:91:cc:75:56:29:74:d6:69:0e:f7:ce:59:d8:
d7:1f:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:57 2025 by rpki-client