Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77BB24E4144A11F09231937C762E951A.roa
File: 77BB24E4144A11F09231937C762E951A.roa (raw, json)
Hash identifier: HZNrw9iHxnOR8NaiJwcOJPjMv6idWcRVFoWsxNdsOiI=
Subject key identifier: 37:6E:E9:9E:7D:A2:84:23:50:20:07:54:57:DE:53:A3:33:54:B7:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014ADB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77BB24E4144A11F09231937C762E951A.roa
Signing time: Tue 08 Apr 2025 07:24:12 +0000
ROA not before: Tue 08 Apr 2025 07:24:07 +0000
ROA not after: Wed 14 May 2025 07:24:07 +0000
asID: 152700
IP address blocks: 156.228.126.0/24 maxlen: 24
156.228.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84699 (0x14adb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 8 07:24:07 2025 GMT
Not After : May 14 07:24:07 2025 GMT
Subject: CN=67f4cf1c-ee3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:8a:aa:07:91:3d:00:84:1a:5c:f9:14:f6:
37:86:74:bd:c1:e0:fd:55:a7:e0:21:01:5e:87:de:
cf:69:b1:ed:59:1a:fc:06:1e:2e:ce:39:65:20:76:
a1:84:72:a4:30:87:e9:37:e7:67:97:23:3d:bd:a4:
7f:96:73:1a:eb:a4:b7:4a:21:cd:9c:83:3c:df:53:
99:99:8e:90:1a:f7:1a:93:4e:17:08:ed:be:10:fd:
f7:19:73:5f:9e:8f:fa:13:f6:21:90:b8:e4:23:a2:
1b:d2:ae:2c:05:bb:2f:16:09:84:9d:b8:28:78:cc:
02:04:1e:30:5b:d5:82:ac:43:c7:eb:22:fc:10:93:
ea:cb:e7:23:b5:05:5d:75:f7:40:1f:fd:46:18:3a:
2b:97:b4:33:98:29:d5:a0:18:bb:a2:d0:20:1c:21:
ae:50:8c:df:df:60:d3:3d:5e:ed:dd:b5:2d:c6:23:
7d:d9:b6:11:6f:9c:12:20:37:28:ee:70:39:0d:8e:
2c:22:fa:38:20:4c:30:55:82:96:18:30:61:0c:9f:
f3:e8:5b:90:06:e2:15:63:26:f8:63:c3:19:0d:fa:
c1:b7:6f:f1:4b:51:78:81:23:45:21:4f:62:e8:6d:
25:01:8e:bd:f0:09:4b:20:79:c4:ca:6f:a7:cd:11:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6E:E9:9E:7D:A2:84:23:50:20:07:54:57:DE:53:A3:33:54:B7:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77BB24E4144A11F09231937C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.126.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:27:5d:39:7f:d3:fa:c2:b6:f1:c1:87:b2:0b:79:f9:5f:f6:
00:ab:2e:04:88:26:7a:71:fc:17:cd:d7:c7:d8:7a:8f:ea:18:
a3:ca:e3:5d:49:e8:89:8b:92:1e:c7:bf:4c:96:03:5b:24:8f:
85:4f:62:84:87:0b:5b:84:ea:82:4b:24:0e:2c:e4:1a:cc:c6:
e7:47:15:d2:1f:be:66:2c:e3:0b:15:29:00:d4:ad:16:47:3d:
4b:62:84:ac:88:b2:d0:2d:31:2c:39:69:5a:c0:99:e0:ca:0f:
af:08:48:37:c9:da:ec:f9:b7:e2:da:97:2b:09:e6:71:12:7c:
5b:92:ad:3f:9d:bc:a9:d0:34:03:2f:99:55:19:66:58:9b:11:
ec:49:d3:53:e1:da:c3:64:fc:68:5b:ea:d3:ec:aa:52:75:c0:
e8:34:d1:c5:1a:23:47:be:1c:5d:96:f0:57:ef:cc:12:9b:84:
3a:c0:9c:a8:b9:50:fa:3a:8d:1e:f1:9d:a4:36:f3:6a:8f:89:
77:87:a3:8f:30:ee:b3:60:4d:a0:3f:8a:b7:61:7b:aa:76:6a:
27:3f:4d:3c:cb:52:d3:82:af:9a:54:a6:78:ab:6b:6e:02:ae:
a8:94:9e:bf:9d:df:e7:4c:c2:b6:b7:52:7d:c5:0b:e2:cb:9e:
0a:6d:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:06 2025 by rpki-client