Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77F76924F43611EF851B7C81762E951A.roa
File: 77F76924F43611EF851B7C81762E951A.roa (raw, json)
Hash identifier: OU8LWd/A6Sk0BhfNIifzaNSRFq1urjugcr5813S4r5Q=
Subject key identifier: FC:99:D6:4A:61:92:1A:95:84:1C:67:56:8F:F3:E8:62:7C:00:50:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77F76924F43611EF851B7C81762E951A.roa
Signing time: Wed 26 Feb 2025 11:40:25 +0000
ROA not before: Wed 26 Feb 2025 11:40:21 +0000
ROA not after: Thu 19 Feb 2026 11:40:21 +0000
asID: 984
IP address blocks: 156.252.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78304 (0x131e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:40:21 2025 GMT
Not After : Feb 19 11:40:21 2026 GMT
Subject: CN=67befda9-3c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:c0:31:f5:b6:ef:3b:be:8b:de:85:a8:2b:
c8:e4:c8:2e:c5:30:c5:e6:77:19:8c:0b:dc:51:5e:
50:e0:ef:1a:d4:6d:9d:7d:1b:37:8e:cc:33:07:db:
36:25:14:62:ec:2d:2f:01:56:9e:a9:82:4c:96:a3:
8a:e1:59:4b:94:30:ec:5d:26:9e:ee:77:eb:50:84:
c3:33:fc:d6:91:ac:d7:5d:e7:11:c7:7d:49:81:2c:
5d:da:16:0c:be:df:d0:8f:1c:aa:3b:1d:93:f2:06:
43:ab:33:09:3a:cd:79:48:cb:db:58:e9:9f:d0:fd:
e4:9e:ff:f8:c7:dd:e5:7b:74:a0:09:a6:a7:4f:3c:
b5:15:4a:a6:98:41:41:92:82:9c:69:1e:3d:b7:6b:
05:e1:e2:b5:5a:f8:1e:e5:40:e1:b6:8f:f9:51:cb:
20:91:ee:aa:b5:c3:5d:7d:2e:6e:8a:3f:6e:15:6b:
36:98:36:64:e0:08:82:d5:ec:a6:d7:cd:62:55:dd:
2b:34:17:66:78:de:dc:0e:1b:d1:0a:04:a3:75:f6:
82:92:14:71:3c:47:6a:c6:05:c5:88:73:62:92:1e:
e1:4b:f0:d9:ab:49:bf:d7:a5:f0:fd:7b:95:3d:e4:
c5:16:0a:6e:09:52:74:4e:af:1e:32:a3:f1:b6:b0:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:D6:4A:61:92:1A:95:84:1C:67:56:8F:F3:E8:62:7C:00:50:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77F76924F43611EF851B7C81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.119.0/24
Signature Algorithm: sha256WithRSAEncryption
01:37:6b:c6:97:85:df:53:39:6c:6b:e2:60:20:e2:c0:db:f7:
3f:80:5a:13:a6:8b:85:d0:f9:f4:41:d2:39:ed:9f:21:63:31:
ff:f4:4b:11:57:0d:7a:bf:14:ad:86:1c:96:ab:8e:c3:2c:93:
e2:01:19:b7:9b:15:0c:ab:c4:2a:e0:e2:8a:87:56:a9:f0:d8:
87:d5:f8:aa:7a:ed:5f:34:4d:4c:ab:2a:5f:da:e2:80:47:85:
89:20:df:8e:2c:ae:16:ee:4a:c9:24:0c:68:45:e2:23:97:7d:
03:9c:45:9c:b0:fe:36:59:00:f5:25:1c:c7:01:d5:03:0f:e1:
15:dd:78:2d:3e:f9:d5:f3:ae:e9:88:d2:0c:f9:d5:3e:c5:b0:
6e:48:14:c9:f2:02:66:45:3a:44:db:c1:64:c8:40:e4:f7:27:
00:0f:05:ce:4c:a2:39:d5:27:5b:cf:2d:d5:c4:8f:5a:70:d2:
8f:2e:27:f8:68:91:25:93:c7:a0:69:1d:1c:24:6d:22:49:6f:
95:cd:17:24:08:78:6c:53:17:e5:ab:0c:a4:70:8e:8d:f3:f8:
ba:f4:8a:20:11:3a:87:96:e9:a6:14:06:38:82:a2:b2:85:4a:
b3:90:0d:26:23:29:31:12:64:18:63:ed:8e:a6:34:bc:21:a4:
89:28:97:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:57 2025 by rpki-client