Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/784AA51C062911F0993DB664762E951A.roa
File: 784AA51C062911F0993DB664762E951A.roa (raw, json)
Hash identifier: aGzfIt+2iCDiM0tFikvGtq05hL08tQp8wT4MqvwU+fo=
Subject key identifier: E2:5D:36:3E:D3:44:C2:3C:BC:74:12:C7:2F:2B:C6:CC:B1:72:26:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01476A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/784AA51C062911F0993DB664762E951A.roa
Signing time: Fri 21 Mar 2025 07:52:43 +0000
ROA not before: Fri 21 Mar 2025 07:52:39 +0000
ROA not after: Tue 10 Mar 2026 07:52:39 +0000
asID: 4760
IP address blocks: 156.225.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83818 (0x1476a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 21 07:52:39 2025 GMT
Not After : Mar 10 07:52:39 2026 GMT
Subject: CN=67dd1acb-85b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:9e:02:0d:7f:04:ff:95:d4:15:71:7c:f7:
b6:81:0d:16:2a:55:94:9e:eb:dd:0d:54:54:83:d2:
86:ec:12:46:23:b0:e1:14:b7:69:00:5c:9b:53:98:
4c:5b:12:d2:b1:b0:48:65:c9:f0:23:68:32:2d:86:
e9:cc:5c:2c:2b:49:5c:83:cb:7d:fa:2a:37:c6:a2:
62:53:cb:8d:f4:00:9e:31:9a:c2:a8:1e:b3:f3:18:
24:f0:d3:c2:17:80:d5:a6:65:e0:10:85:99:f3:ee:
fc:6f:38:1f:1a:e0:30:48:1d:6a:2c:9b:59:3f:37:
15:c6:82:68:b9:3e:50:6c:7a:cc:0c:31:c4:77:63:
c6:c4:1e:e8:08:56:0f:4f:41:75:46:7e:58:79:f6:
58:13:d7:c1:01:cd:c7:29:c1:d0:b9:f5:cd:49:fd:
0f:99:3d:13:b1:8e:cf:35:52:e4:fe:81:ea:d1:49:
4a:39:0c:74:ca:cf:5e:ad:ed:82:f1:cd:ce:a6:e5:
cf:47:39:7b:e0:87:99:d5:f2:fa:32:9f:8d:6e:95:
01:03:3a:25:9c:31:97:f1:a0:53:1e:cc:65:0f:39:
42:47:7b:2f:c4:fe:27:1e:c7:a1:e3:1b:65:24:0e:
81:00:b3:04:36:37:0b:12:db:74:6e:40:c4:96:8f:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5D:36:3E:D3:44:C2:3C:BC:74:12:C7:2F:2B:C6:CC:B1:72:26:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/784AA51C062911F0993DB664762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:4f:c1:8b:7c:40:fa:06:40:4c:e3:0f:a6:47:92:b9:70:c5:
e8:1c:d9:76:93:ee:72:8e:23:76:0f:f1:32:f7:40:ca:7c:bf:
60:0a:39:45:9f:60:aa:72:49:0b:b7:69:ed:db:93:f2:da:3d:
79:dd:89:fa:52:f0:69:65:f3:da:f4:e9:4f:d2:7c:19:96:70:
a1:97:58:9a:d4:02:c3:d3:34:ed:82:9e:6d:d6:74:55:c4:41:
bd:7b:f6:f7:40:72:7a:6d:a1:f1:31:75:b6:a1:cb:1e:98:79:
e1:ae:84:c3:af:90:22:ff:66:60:40:a2:5f:96:b8:d3:be:f5:
94:b9:88:57:c8:de:01:a4:fa:d6:92:73:d4:c4:77:40:17:cc:
ce:db:72:40:5f:26:ab:b0:d1:43:54:a1:17:ca:05:5d:26:6e:
d0:58:7b:c5:b8:03:60:70:dd:65:8e:5a:57:ef:6b:86:65:29:
2b:66:2e:5c:f2:1e:e4:ee:18:df:48:c5:f1:ae:1e:c9:5c:ef:
c2:7d:be:a7:1f:56:ab:c6:e3:8a:94:23:44:c4:6b:87:95:75:
8c:5c:a0:74:6a:8b:01:01:47:e5:87:19:6f:05:06:f3:a4:a0:
cc:d9:c7:04:3f:d3:c4:4b:f4:bd:cc:6b:3e:7e:b2:67:e2:da:
50:39:16:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:01 2025 by rpki-client