Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E67A784D4AF11EF89F4D5A0762E951A.roa
File: 7E67A784D4AF11EF89F4D5A0762E951A.roa (raw, json)
Hash identifier: x973IpS07BXLWjej8bQrLIgWADMywVqxf4fbuChlr6c=
Subject key identifier: F5:1B:EA:64:03:30:50:77:76:4F:4C:9B:80:DD:47:04:F4:60:A1:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010943
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E67A784D4AF11EF89F4D5A0762E951A.roa
Signing time: Fri 17 Jan 2025 08:46:08 +0000
ROA not before: Fri 17 Jan 2025 08:46:04 +0000
ROA not after: Thu 17 Jul 2025 08:46:04 +0000
asID: 63199
IP address blocks: 156.227.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67907 (0x10943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 08:46:04 2025 GMT
Not After : Jul 17 08:46:04 2025 GMT
Subject: CN=678a18d0-072f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:4d:4c:6e:43:db:91:ec:9a:b1:27:6d:6a:
5c:70:b4:81:d3:aa:83:63:c0:97:c9:0c:23:29:3d:
66:29:14:df:01:0c:d9:a6:b7:85:74:48:d1:17:da:
18:f2:2f:70:45:91:73:0d:ab:c4:e8:80:bb:1d:60:
41:b4:8f:3c:a9:2e:53:3d:f5:54:5b:2f:e6:8c:02:
c6:e4:f5:dc:d7:46:d1:7f:94:4d:9b:53:fa:0f:69:
d0:24:fc:ae:c9:3b:85:ab:a1:0d:3c:35:09:f7:85:
f2:74:e5:6a:1b:66:6c:93:43:fe:52:c0:71:79:4d:
71:24:1a:b3:0d:03:a0:70:eb:88:28:b6:c0:d2:9e:
67:2b:aa:f0:b3:47:d6:43:45:d3:45:82:41:c3:0b:
6a:76:5c:df:13:29:1e:3b:37:b6:1a:e4:59:e3:0c:
43:d7:66:7f:80:c5:a9:3a:aa:40:c8:9e:01:c3:c5:
a6:7a:05:e9:73:5b:2a:e2:23:40:99:d0:7d:68:00:
ca:79:4e:f6:84:b0:83:d2:26:40:2d:6e:fe:50:78:
7c:c8:04:ee:36:f0:e8:09:f7:d2:1f:be:ec:75:ce:
b5:2d:49:b4:33:86:4f:f6:03:78:3c:18:44:85:6c:
48:aa:6b:7f:44:c7:da:13:12:8a:19:9c:d0:a3:15:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1B:EA:64:03:30:50:77:76:4F:4C:9B:80:DD:47:04:F4:60:A1:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E67A784D4AF11EF89F4D5A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:fd:12:6f:d7:27:17:eb:a8:c0:44:fd:df:aa:c2:98:13:5a:
9c:03:b3:a4:05:33:50:79:9e:d9:65:9e:95:aa:cd:69:25:b7:
67:b4:77:86:ba:bc:5c:aa:d8:62:ae:94:a3:45:29:e0:af:12:
73:64:79:f2:79:58:e5:ef:bd:8d:8b:58:4f:c7:ef:72:37:10:
ff:aa:cc:a0:c0:41:4a:45:98:3b:a9:50:da:dc:bf:b1:ee:fa:
6b:71:d5:19:f3:0b:21:aa:c2:cb:bd:55:1c:bb:1c:8d:d0:a2:
9d:80:6e:cb:f5:30:26:e4:9d:68:cb:4b:cb:b6:e4:0b:39:3c:
da:e8:b8:0c:5c:8b:8c:0e:cd:68:5b:7f:74:a2:66:0f:b8:93:
1f:30:97:99:27:53:df:df:99:62:81:cf:89:7b:91:1d:66:a8:
22:0d:74:0b:b7:3b:53:1e:7d:ca:9b:4a:6d:c6:00:9f:0e:b4:
ca:71:16:12:be:af:0d:ed:fb:cc:0f:51:5a:38:48:dc:1a:77:
d8:d8:fa:95:27:1a:d7:21:37:f2:53:ae:c8:56:a7:43:20:f4:
99:01:a0:32:aa:0a:1f:84:a7:2f:db:39:a6:f4:43:0c:79:e4:
80:fb:52:16:18:d3:1e:ed:90:1d:41:4e:50:40:80:f5:fe:94:
57:ab:44:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:58 2025 by rpki-client