Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BA9AC60F43311EFACA6F46C762E951A.roa
File: 7BA9AC60F43311EFACA6F46C762E951A.roa (raw, json)
Hash identifier: 2WitqxMPTaU7fMYNhKv3Q0cFqCtWxmCAkrNGueY8c30=
Subject key identifier: 74:8F:5B:DC:21:D2:13:69:20:D3:AF:76:0B:9A:16:CE:9A:D2:D9:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BA9AC60F43311EFACA6F46C762E951A.roa
Signing time: Wed 26 Feb 2025 11:19:03 +0000
ROA not before: Wed 26 Feb 2025 11:18:59 +0000
ROA not after: Thu 19 Feb 2026 11:18:59 +0000
asID: 984
IP address blocks: 156.252.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78262 (0x131b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:18:59 2025 GMT
Not After : Feb 19 11:18:59 2026 GMT
Subject: CN=67bef8a7-5be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:9c:1c:5f:cc:36:fa:39:14:f7:11:22:6e:
c5:f3:8d:4b:c7:41:87:fb:68:eb:5f:a0:e6:a7:f0:
13:c6:05:a9:98:23:05:de:01:cd:cc:15:ca:3a:a4:
df:ab:88:0c:8c:88:44:04:58:c7:a0:db:78:e3:5c:
24:72:c9:13:5a:f0:73:5e:42:b5:39:bc:70:22:5c:
73:e5:ed:2e:0f:25:37:79:56:66:94:37:06:a6:bc:
3c:99:26:26:c1:9b:ed:29:a8:ff:0f:9b:47:e6:ad:
0d:5f:d4:f6:b8:83:69:0c:a3:0a:7d:04:f5:f5:9f:
4a:04:57:c6:44:87:6e:d6:47:1a:80:cc:df:dd:25:
e7:b7:b4:72:68:af:07:d7:44:e9:db:1c:cb:b4:c5:
16:a5:93:67:dd:5a:8e:7f:40:3c:bd:dd:4f:fc:bd:
9d:2a:f7:c3:c2:99:fd:17:c6:bd:8b:cf:30:23:5e:
00:44:7f:a6:01:f8:5d:9b:1d:60:0f:52:bb:78:65:
3c:f0:b5:3b:ad:6c:11:72:05:72:4f:92:ad:3c:46:
cf:f7:d0:0a:ee:5b:94:da:1c:0b:57:c0:33:ba:d8:
2f:a0:21:1c:fd:64:f1:db:a9:c6:40:dd:5f:6b:27:
8c:77:df:48:58:ee:0e:b8:6c:e3:00:80:c4:09:e2:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8F:5B:DC:21:D2:13:69:20:D3:AF:76:0B:9A:16:CE:9A:D2:D9:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BA9AC60F43311EFACA6F46C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.112.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f0:ed:35:a0:e2:84:e2:4b:dd:a5:aa:56:62:5d:a9:de:37:
20:2e:52:be:12:96:0f:75:2d:c1:90:9c:4c:24:65:87:61:5c:
bf:7e:f4:db:f8:ae:45:29:40:48:e4:f3:2c:a8:5f:4d:84:4f:
44:7d:df:60:37:d0:77:1b:d9:41:30:1a:84:7b:28:c4:0d:81:
bc:dc:4d:15:6a:c1:e4:f6:27:88:d0:db:e5:b2:2e:b6:3f:9b:
4e:83:39:32:ff:d8:30:81:bb:20:f2:df:6c:06:28:ec:48:9b:
40:ca:8f:44:60:cc:1a:c0:c8:38:72:13:f1:59:8a:54:b8:f8:
8a:16:51:59:7c:98:53:c1:b4:af:5a:2a:1c:58:9e:f5:e3:45:
6f:21:7c:28:39:ad:3b:8f:2e:8c:3f:ad:fa:c4:f2:36:bc:d8:
63:7b:c2:3c:85:e8:a8:b6:4f:53:f3:56:79:1e:08:3b:38:6a:
14:44:7d:20:8e:35:05:a4:2c:e2:8b:00:83:ec:ce:6b:f1:33:
06:b6:c4:4c:57:43:d9:fa:41:8f:94:5c:eb:bf:92:a6:ef:d2:
ef:64:d1:4a:ef:7f:5c:69:c5:a1:15:22:0a:c5:25:2b:bc:50:
c3:bb:61:ef:cc:f9:9b:b1:ed:6c:85:39:d1:8c:81:ab:fc:c7:
e2:e7:69:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:12 2025 by rpki-client