Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80163BCEE9B611EF83B616B2762E951A.roa
File: 80163BCEE9B611EF83B616B2762E951A.roa (raw, json)
Hash identifier: dhrc0i+of+zZVkKX5VSut33S03Kny9iC5BjnoG5WmRU=
Subject key identifier: 35:46:5C:3E:D6:DA:DC:33:90:81:74:82:AA:93:0F:3C:78:52:38:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80163BCEE9B611EF83B616B2762E951A.roa
Signing time: Thu 13 Feb 2025 02:59:11 +0000
ROA not before: Thu 13 Feb 2025 02:59:07 +0000
ROA not after: Wed 31 Dec 2025 02:59:07 +0000
asID: 17561
IP address blocks: 156.236.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74174 (0x121be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 02:59:07 2025 GMT
Not After : Dec 31 02:59:07 2025 GMT
Subject: CN=67ad5fff-01bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4a:1e:b3:a4:47:47:64:b0:18:53:78:53:53:
a4:a9:27:fa:be:4a:eb:79:76:ad:56:9e:e6:11:9f:
e2:26:d3:a4:9b:66:17:86:5d:73:9d:e6:e9:ed:96:
d2:69:bb:7e:42:e8:6d:a4:29:9b:70:1d:07:5b:72:
01:eb:ec:10:ac:4a:42:1d:53:28:aa:2f:22:df:8c:
ff:70:72:65:e2:50:a6:ef:6c:50:cd:ae:69:9e:13:
14:0e:45:c8:a5:6e:0e:3e:01:af:7b:6e:95:3f:de:
18:9b:90:aa:f9:2b:16:32:e1:a0:ca:6d:9a:92:17:
5a:63:d6:4f:8c:0a:cd:04:f5:50:49:23:03:aa:97:
9d:bf:2b:ef:da:67:74:67:44:df:2d:20:77:2b:9c:
af:76:ee:f9:5e:4e:09:52:a4:40:b9:ee:f8:7f:5e:
68:10:67:98:5e:f0:9f:b0:04:96:1c:77:40:1d:73:
fd:ed:4c:8f:10:fe:e1:ad:e4:20:f9:66:3e:f0:ee:
5f:04:7a:e4:13:35:60:9b:b8:55:4e:6e:5b:24:63:
7d:35:17:08:a3:11:03:05:39:6e:db:dd:a5:df:69:
7b:07:70:f3:96:ca:97:a8:53:8d:d0:45:c6:36:26:
39:b0:0a:bd:dc:84:02:b5:fd:e4:42:aa:fd:d6:62:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:5C:3E:D6:DA:DC:33:90:81:74:82:AA:93:0F:3C:78:52:38:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80163BCEE9B611EF83B616B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.54.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f2:b9:ee:6c:be:2b:c8:19:b6:da:de:ef:8b:89:8d:d9:99:
7a:7e:fa:b4:68:d2:f0:93:36:2a:06:10:46:3a:6a:89:61:27:
ac:6a:00:24:22:7b:96:1b:2e:48:3c:39:bb:46:06:fd:16:9d:
7e:4c:52:e4:01:70:94:c8:61:e4:2c:1b:e4:e4:f4:4f:99:2d:
13:13:9f:86:a0:18:2c:bb:1c:2c:b8:65:a9:be:b2:1c:9e:ff:
f7:ee:c9:54:a6:d7:83:ec:63:7d:df:f7:e2:36:55:ee:54:56:
75:59:21:97:aa:79:24:de:43:9c:f7:0e:de:31:e5:e1:d1:c6:
78:8e:fb:92:d2:0f:78:9a:e3:31:20:49:56:db:ce:92:35:6a:
b4:50:a1:22:c9:88:b1:44:ee:e9:1a:de:bd:6f:87:8e:25:6c:
cf:54:13:c2:84:0c:b2:82:4a:cb:d6:ed:a5:70:34:ee:b9:7d:
6e:fe:9d:5f:cd:19:49:a0:94:d3:c5:a5:26:82:62:49:3c:11:
30:14:f0:ea:59:9d:c8:a4:64:7b:d9:dd:ef:77:ae:74:73:29:
06:68:8f:e1:2c:d1:07:64:43:51:1e:bd:e0:13:cc:f2:25:e7:
f7:13:d5:ac:b6:29:0e:60:09:fa:16:0b:5c:f2:4b:63:96:35:
a8:da:55:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:31 2025 by rpki-client