Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78C96A960A2511F0B4CB9AB5762E951A.roa
File: 78C96A960A2511F0B4CB9AB5762E951A.roa (raw, json)
Hash identifier: og/rWpcceCbX9vPgffQKmqjrZTd4gqc4j0g/EbVF7UQ=
Subject key identifier: 9C:7F:9C:1C:7C:1A:E2:30:F4:05:C2:5F:B0:7F:5A:B7:B2:9F:17:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014852
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78C96A960A2511F0B4CB9AB5762E951A.roa
Signing time: Wed 26 Mar 2025 09:34:10 +0000
ROA not before: Wed 26 Mar 2025 09:34:05 +0000
ROA not after: Mon 28 Apr 2025 09:34:05 +0000
asID: 139880
IP address blocks: 156.227.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84050 (0x14852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 09:34:05 2025 GMT
Not After : Apr 28 09:34:05 2025 GMT
Subject: CN=67e3ca12-7bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:60:52:31:a8:05:6a:0e:19:5e:6e:8e:b3:
e3:0b:36:e4:26:11:2e:9f:0f:ca:fd:51:b5:12:db:
10:1e:9c:70:7c:e8:51:a9:5a:82:76:0f:41:9c:05:
b1:83:b6:1a:f9:11:39:74:ce:60:6e:b2:a8:ad:2a:
73:96:85:bd:c9:a9:26:6d:c4:a6:b4:2f:be:c0:6f:
f9:e4:2a:91:6a:00:89:eb:ab:75:ce:11:68:b4:37:
01:c9:af:71:e3:13:eb:96:ca:e8:59:fe:67:83:cc:
73:a8:12:71:cf:fb:09:5d:84:b1:9b:86:1e:1b:c0:
a4:ee:95:07:21:c8:02:6e:21:d0:e9:23:fe:a9:2d:
ea:2f:e0:dd:67:73:ff:be:af:6a:41:40:08:33:43:
00:e2:5f:ea:d7:56:65:f8:04:0e:f9:94:6d:aa:d4:
99:ca:25:1a:fc:aa:74:0b:18:5d:30:d4:5f:b6:36:
a2:a2:4e:86:34:59:28:de:2c:37:5b:5e:a6:93:55:
cd:d8:ec:68:dd:c3:99:3c:2f:e1:65:0e:c4:6b:39:
16:fd:64:3f:ab:ab:59:e6:3b:4a:1b:70:75:d0:1b:
13:8e:31:40:ec:1c:2a:8a:21:33:4b:65:a4:18:65:
bb:bd:72:2f:05:5c:8a:93:45:f3:19:73:59:7b:40:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7F:9C:1C:7C:1A:E2:30:F4:05:C2:5F:B0:7F:5A:B7:B2:9F:17:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78C96A960A2511F0B4CB9AB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:08:7a:08:7f:72:1c:36:1a:5e:79:8a:07:a7:27:8b:5a:3b:
e8:19:25:a3:18:0e:40:b2:76:ca:82:96:9d:a2:9b:a9:db:4d:
bb:8e:58:0a:66:e0:6b:ee:75:5e:2b:17:ca:b9:7a:8c:e8:54:
97:42:9b:77:47:39:53:37:43:2e:5a:65:75:ce:49:32:13:b2:
63:4e:9f:72:1e:fb:e0:34:a9:59:32:ec:0d:84:c7:b5:fa:d3:
23:94:73:26:1b:74:76:de:a8:d7:b5:10:0f:7a:48:ed:ba:db:
ce:df:5a:0d:28:4f:71:9a:1f:9a:a3:ce:46:a9:84:55:99:2d:
fa:d3:b7:93:8f:1d:71:59:97:1c:22:a9:31:ac:75:63:1b:18:
c9:6b:52:d7:93:a7:d5:9f:03:f3:43:04:d1:f1:e6:ea:cf:8d:
05:c0:3e:7c:ce:bc:57:c9:de:f2:19:c3:29:5d:d5:bd:a3:47:
9c:f3:af:9b:a1:1e:49:2a:77:03:ac:3d:22:0e:40:b6:3f:02:
e7:26:c7:19:3c:33:d9:d2:46:3e:e5:aa:1e:42:63:93:ab:13:
22:57:c5:10:36:d2:d1:40:7e:78:69:aa:a6:65:88:34:d4:7a:
d3:9e:df:dd:6a:e3:68:19:8b:34:29:00:7b:c5:3c:6d:59:85:
65:3c:db:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:51 2025 by rpki-client