Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7976D9F2E53F11EFAF0136A0762E951A.roa
File: 7976D9F2E53F11EFAF0136A0762E951A.roa (raw, json)
Hash identifier: nXGtgoebLEYdEJL4Nw6uRPfQ6lIyJlUB0Z98SEaD/so=
Subject key identifier: DA:19:21:91:1C:23:FD:CE:39:58:B0:83:A8:1E:1A:8A:E1:FB:D3:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7976D9F2E53F11EFAF0136A0762E951A.roa
Signing time: Fri 07 Feb 2025 10:37:06 +0000
ROA not before: Fri 07 Feb 2025 10:37:02 +0000
ROA not after: Sat 13 Dec 2025 10:37:02 +0000
asID: 984
IP address blocks: 156.230.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72973 (0x11d0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 10:37:02 2025 GMT
Not After : Dec 13 10:37:02 2025 GMT
Subject: CN=67a5e251-9f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:9d:38:7d:57:9d:62:12:70:8c:bd:2f:e4:
74:88:7a:04:b6:53:76:00:77:f1:e7:d0:d8:86:9f:
8c:f8:b2:6b:8e:b3:97:b0:20:4a:45:c8:e2:22:07:
27:e0:a6:90:f1:ee:11:e4:74:54:6b:fc:5a:84:88:
30:f2:10:e8:10:20:85:48:ab:f1:b0:dc:ba:84:f3:
ef:12:23:c7:c2:ad:58:15:61:e6:02:30:96:e5:99:
4f:e2:0f:b8:74:9c:3a:07:04:bd:b8:86:48:c3:c3:
cf:f1:2d:ba:8a:af:b4:e6:e5:2b:b1:05:01:52:3e:
a4:f8:f3:39:42:a9:35:5e:3d:53:bd:f1:a2:05:ca:
a2:94:0f:70:88:b1:1e:0f:67:6b:9f:94:4a:3b:b7:
d4:78:1c:80:5c:94:e0:9b:c4:88:6a:5d:b5:ef:8b:
8c:ca:df:f3:64:cc:af:c1:3a:0e:05:5d:7b:3a:24:
8b:50:19:c7:08:5b:cb:80:1b:c5:fd:e9:6e:19:f2:
ba:e5:2f:e1:38:f3:d6:af:16:29:b3:7d:6e:4a:8e:
64:83:77:5e:42:99:56:2e:ca:4d:bb:52:bf:ee:82:
05:d8:ec:99:ab:cc:67:5a:2d:f9:b9:72:35:51:73:
bc:16:a4:dd:0c:54:f6:16:e4:ee:35:13:c8:e7:df:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:21:91:1C:23:FD:CE:39:58:B0:83:A8:1E:1A:8A:E1:FB:D3:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7976D9F2E53F11EFAF0136A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4d:84:60:ad:63:24:fc:90:44:4e:72:79:f6:74:07:74:e0:
88:cf:17:e7:3f:b2:0f:97:b4:83:c3:91:5b:33:cd:c2:d1:fa:
02:e4:fe:cb:a8:02:e2:e8:33:e5:bc:ab:33:21:b1:32:6e:9e:
6f:47:90:0c:79:1f:fa:10:10:51:a6:0a:19:c3:b1:10:17:d3:
b6:10:23:93:a4:dc:c4:77:cc:bc:e9:a4:01:bd:c1:82:1f:16:
0f:c5:f1:32:36:df:9a:27:51:ac:7d:78:07:30:74:8a:6e:79:
3b:bf:54:2c:97:2d:c5:b4:09:10:eb:20:b0:46:92:52:1b:4f:
5a:70:b9:6e:1a:c5:f1:76:a1:5c:df:b6:e3:76:5e:50:01:7a:
37:6f:80:8c:0a:3b:42:5f:be:e0:e2:66:16:fd:43:03:25:2b:
77:35:00:54:50:cc:b7:ad:42:82:66:d4:6c:4a:cf:63:c9:fe:
0f:13:57:46:46:da:86:76:cc:37:c4:81:4f:44:3b:bc:51:61:
39:0a:21:49:a6:5c:ee:14:13:f0:f5:4c:14:a1:84:91:bc:22:
d6:eb:ab:f2:2c:42:9c:fc:cf:04:e3:da:7d:2d:8d:91:63:f2:
76:2e:ed:db:b3:de:b0:4d:7b:c8:72:b0:6d:a6:c1:3d:57:59:
d2:fc:f7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:27 2025 by rpki-client