Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ECD99D200C311F0AC90605B762E951A.roa
File: 7ECD99D200C311F0AC90605B762E951A.roa (raw, json)
Hash identifier: YuMl4WQORL1MubEGMatLWM2DStzjcjR6RV1v9StUE9E=
Subject key identifier: 5A:2F:32:F1:58:82:AB:7A:01:FE:51:EA:8A:51:33:C2:F9:7A:AC:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ECD99D200C311F0AC90605B762E951A.roa
Signing time: Fri 14 Mar 2025 11:00:09 +0000
ROA not before: Fri 14 Mar 2025 11:00:06 +0000
ROA not after: Tue 08 Apr 2025 11:00:06 +0000
asID: 198247
IP address blocks: 156.238.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83452 (0x145fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 11:00:06 2025 GMT
Not After : Apr 8 11:00:06 2025 GMT
Subject: CN=67d40c39-e727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:ba:3f:c0:e2:8c:13:8e:e4:26:dd:9d:d2:
f1:25:32:a3:03:14:c1:2c:a5:76:71:56:46:95:d0:
d8:05:21:3a:fe:36:60:07:eb:4f:55:0f:99:37:2b:
74:9e:74:5a:a3:63:70:54:b4:72:22:12:20:b8:05:
71:32:14:e9:f5:10:6f:17:87:38:19:67:54:f0:e2:
39:c7:ec:d5:94:3e:ef:24:1c:33:43:b2:94:62:1f:
40:2d:2b:12:44:ab:38:5c:3e:10:ca:ee:c8:af:07:
3b:17:13:fc:57:a9:8b:ad:cd:4b:48:f2:41:e2:69:
cc:41:8d:f1:46:97:9f:5a:cc:04:e3:23:ff:95:40:
56:2f:44:24:c8:7a:fc:4b:f3:a0:dc:ec:91:b4:24:
69:e9:08:07:88:d7:42:f9:5a:cd:c7:2c:6e:c3:62:
cb:22:39:29:4a:d7:63:3e:bb:21:93:73:fc:dc:bb:
f2:d2:1f:88:d3:d6:1c:24:b4:54:25:81:bd:e4:7d:
10:73:35:ac:d2:e8:9e:12:04:35:86:5e:3f:48:ab:
b0:9a:a8:67:41:81:5a:7f:ae:b5:91:db:1d:bc:ce:
88:88:d9:d1:d4:0d:75:9b:18:33:6f:c0:da:55:4a:
c9:7d:84:a1:6e:09:41:0d:a3:80:df:03:dc:95:04:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:32:F1:58:82:AB:7A:01:FE:51:EA:8A:51:33:C2:F9:7A:AC:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ECD99D200C311F0AC90605B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b0:dc:1a:30:09:49:7a:ef:62:9a:0e:68:7c:25:dd:4c:ef:
18:20:76:27:2e:c0:27:ed:49:12:d6:0c:bc:ab:3c:77:af:7c:
ad:27:5e:01:d8:f4:6f:b4:16:95:64:4f:d1:d4:35:58:16:35:
03:cb:aa:88:85:39:4b:77:67:8d:3a:66:60:7f:7b:f3:2c:f8:
62:35:94:86:e3:92:f9:fe:86:13:4e:9d:d8:8b:34:d9:ea:67:
d3:0c:3f:b2:f2:08:ce:89:ce:a7:af:ed:37:dc:c9:53:09:91:
94:03:8f:17:8f:4a:d6:7e:e2:99:a8:f6:b7:0e:ed:d9:1d:bd:
7f:6f:28:d8:14:d9:91:90:e5:9f:af:3c:b8:71:38:69:69:5b:
14:64:57:16:30:5a:cb:99:0a:43:51:dc:44:20:3c:90:a9:ae:
f4:a0:85:cb:e5:b4:b7:eb:2b:ba:d6:12:9a:7e:04:a5:7f:69:
81:0b:97:35:d4:14:74:b5:59:82:82:d0:e3:56:3e:20:e2:5a:
96:70:98:08:df:92:80:78:a0:2a:9d:86:03:71:19:e8:60:5a:
0e:52:fc:85:4f:6f:2b:5c:c2:a7:86:16:b3:7f:eb:7b:bb:a5:
98:10:f8:2a:13:4e:0b:74:af:7a:00:80:81:2d:b3:79:09:97:
8b:85:c7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:36 2025 by rpki-client