Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FE25E12C95411EF9D6DAB50762E951A.roa
File: 7FE25E12C95411EF9D6DAB50762E951A.roa (raw, json)
Hash identifier: YdmLzYqO9wvyT3tBZKGYyBmLl4oqPffujAmDr/+FDNI=
Subject key identifier: 79:88:67:16:B1:28:4C:12:1B:6B:0B:E7:12:4D:DC:61:C9:71:43:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F3E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FE25E12C95411EF9D6DAB50762E951A.roa
Signing time: Thu 02 Jan 2025 21:57:03 +0000
ROA not before: Thu 02 Jan 2025 21:56:59 +0000
ROA not after: Sat 13 Dec 2025 21:56:59 +0000
asID: 984
IP address blocks: 156.226.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62440 (0xf3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 21:56:59 2025 GMT
Not After : Dec 13 21:56:59 2025 GMT
Subject: CN=67770baf-b05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:f2:53:22:23:cc:36:80:3a:cd:2b:f4:bd:
aa:cd:a4:22:aa:12:21:d0:a5:0d:9b:d7:4a:08:49:
b8:83:61:02:90:81:2e:bc:8b:aa:76:3a:29:a6:7f:
bf:ef:93:34:e0:3c:4f:f5:92:07:e4:47:d0:78:ff:
47:45:92:75:45:7f:2b:47:30:91:5c:17:d0:e7:c1:
1e:e3:12:77:1c:0a:d6:ae:b0:51:38:ef:5d:92:60:
39:5b:40:44:17:48:1b:06:c6:de:a6:89:04:4e:ef:
35:4b:70:c8:a8:ab:e5:48:f5:7d:00:a4:50:e2:b4:
63:df:e2:af:be:99:c6:58:9b:ed:61:06:db:b6:55:
f0:e7:28:74:cf:73:f9:64:16:20:12:5d:7c:99:86:
14:10:8a:40:7b:a5:ae:4f:10:3a:4c:24:65:c5:1a:
52:1d:bc:e3:c9:e1:5f:10:89:4d:95:4f:79:d3:fd:
1c:bf:07:17:ab:29:0e:72:aa:9d:72:3c:b0:ca:38:
8e:b1:43:72:60:4d:44:d7:5f:68:15:31:69:4f:56:
e7:86:db:a0:73:1c:86:03:1d:0d:bb:24:71:19:fc:
3c:41:a9:bf:ec:28:a8:61:63:91:10:42:8c:bf:38:
c8:51:f5:e5:f9:e9:6c:f7:56:0b:b5:04:0f:ee:02:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:88:67:16:B1:28:4C:12:1B:6B:0B:E7:12:4D:DC:61:C9:71:43:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FE25E12C95411EF9D6DAB50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:91:7f:e8:2a:3f:95:20:54:ef:a7:5b:1f:4e:cb:b2:fc:2c:
94:5c:1b:b2:fa:19:f5:13:0c:e9:d9:d1:73:f1:5d:75:61:80:
cf:0c:c7:0b:ef:b0:63:df:ae:c8:c6:bc:50:f6:20:c1:12:29:
94:0f:3e:c1:b0:89:65:44:12:e2:63:10:7a:63:23:5f:5c:54:
e0:33:ab:b3:3a:fd:ac:c3:25:68:f8:02:e5:ac:6c:b0:22:72:
72:3c:8c:4a:bf:a2:02:e7:cd:33:6e:0f:dc:e8:1b:06:ef:5b:
70:f1:b0:bd:1d:03:48:3e:be:7e:79:24:67:09:85:24:33:2f:
52:61:8a:3a:6c:02:a0:58:57:52:cb:3c:a2:30:a4:ef:33:9a:
ea:3c:4d:7b:a4:4f:5a:4e:f0:8d:79:23:c5:a4:91:ec:09:22:
02:2e:9e:c7:11:d3:b2:64:d0:3e:dc:de:2e:26:32:ed:4d:6c:
04:23:8d:5a:eb:f4:e1:88:08:29:19:e4:e7:57:a3:d0:7b:e0:
02:4b:55:5f:a2:ea:a9:5b:d6:3f:11:47:a3:51:70:0b:b0:9b:
6c:26:d9:c0:62:83:6b:27:22:89:24:15:62:67:51:1a:f5:49:
01:a5:4f:71:0f:1b:72:b2:4d:70:e2:0c:e0:29:25:d9:cc:b2:
57:7e:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:28 2025 by rpki-client