Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8034978EEC8D11EFB90539A5762E951A.roa
File: 8034978EEC8D11EFB90539A5762E951A.roa (raw, json)
Hash identifier: ORhRzjsVMh/ibgQfhz/gii+cEJG7r3U/vV8ZQ+VdYAg=
Subject key identifier: 56:83:78:1D:BA:2B:44:CF:A5:55:B3:DB:70:52:83:71:37:60:10:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012456
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8034978EEC8D11EFB90539A5762E951A.roa
Signing time: Sun 16 Feb 2025 17:43:16 +0000
ROA not before: Sun 16 Feb 2025 17:43:12 +0000
ROA not after: Mon 13 Dec 2027 17:43:12 +0000
asID: 17561
IP address blocks: 156.230.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74838 (0x12456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 16 17:43:12 2025 GMT
Not After : Dec 13 17:43:12 2027 GMT
Subject: CN=67b223b4-63cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:e0:50:7b:bf:71:64:a2:76:bd:c8:45:24:
d0:08:18:93:d8:de:f0:67:b8:c6:b3:45:d8:b9:77:
81:70:33:32:04:ee:f2:94:8a:3f:d1:07:52:67:a0:
7c:74:89:90:b2:04:32:d3:e8:6b:be:de:d0:a9:b1:
b7:b2:71:6b:4b:43:dd:79:7d:08:cc:cb:79:2e:f1:
04:64:f5:3e:31:82:2d:e9:e1:01:2f:bd:ca:2c:91:
14:71:7f:f7:87:ca:4e:83:e6:36:36:40:2a:84:54:
d3:8b:fa:d0:de:cc:5b:b5:6c:dc:e3:33:d5:6c:19:
bf:f9:55:8c:e1:4c:2c:25:4c:a8:45:ee:df:82:27:
7b:83:6e:f9:7f:43:08:be:45:cc:a0:a6:25:b9:dd:
ed:ca:47:d2:e7:07:3d:36:f8:2f:35:ce:f9:ca:54:
45:e8:c3:cc:b6:e4:50:19:05:f9:6e:70:79:a7:99:
87:74:f6:be:bc:32:0d:76:1e:e6:f9:15:4c:36:1a:
18:b5:e0:ee:1e:ea:58:99:12:44:a0:e5:5f:17:43:
bd:c6:c3:73:ac:63:a4:ef:bd:5a:49:29:03:6a:65:
72:e5:2b:4a:f0:ca:7c:44:82:20:fa:92:39:e0:f1:
c0:75:1c:47:86:30:8b:df:44:88:6d:19:2c:15:8f:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:78:1D:BA:2B:44:CF:A5:55:B3:DB:70:52:83:71:37:60:10:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8034978EEC8D11EFB90539A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.148.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:61:f2:71:c5:92:b0:35:b8:d8:03:ce:94:6f:64:d9:36:89:
20:e5:ff:4b:58:e0:86:40:1e:cc:bc:5d:89:1d:19:ef:65:39:
05:fe:a6:e1:35:07:2c:07:51:2d:45:b0:92:36:fe:be:09:d4:
55:b9:1c:6c:57:74:bf:1b:6d:05:51:6b:ba:99:e2:0e:07:d8:
b9:a2:f9:c9:81:ea:d4:c8:ec:82:3d:b5:72:6d:e1:86:83:be:
4b:e8:60:f4:05:92:ec:5d:e7:60:c2:7d:54:fa:52:c5:04:cc:
6a:c6:ee:53:d8:a9:f2:7d:ce:c0:f7:2b:22:2a:8e:53:78:44:
dc:e9:82:b0:68:90:76:b2:72:8c:c7:59:14:b9:9f:4a:fe:a0:
15:b2:ac:49:2d:9d:f6:5e:53:1a:92:05:ba:48:01:43:26:32:
86:67:40:8a:b0:5c:f5:8d:48:90:1b:4a:04:69:cf:6e:5a:9f:
0a:9a:6f:de:26:70:6c:72:d4:dc:39:be:ca:bf:12:f1:90:35:
cd:e4:fc:6d:a6:f7:3a:fc:06:bf:4a:76:a9:23:26:6c:f8:e7:
bb:1b:21:50:b6:25:93:b7:fa:8a:1a:f5:19:f2:ea:6a:5c:ec:
a5:27:c8:fa:cf:18:b7:10:55:59:4d:19:ee:75:78:b3:62:af:
59:43:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:33 2025 by rpki-client