Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/885DEDEEEC8C11EFB684409D762E951A.roa
File: 885DEDEEEC8C11EFB684409D762E951A.roa (raw, json)
Hash identifier: oWmFpBnhrHLOZXSGmqe80U1FmI9SUoawR17VJdjbzn0=
Subject key identifier: 79:7D:0C:8B:1D:35:F4:5C:EE:36:92:19:11:29:5B:49:6F:7B:DE:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012450
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/885DEDEEEC8C11EFB684409D762E951A.roa
Signing time: Sun 16 Feb 2025 17:36:20 +0000
ROA not before: Sun 16 Feb 2025 17:36:16 +0000
ROA not after: Mon 13 Dec 2027 17:36:16 +0000
asID: 17561
IP address blocks: 156.230.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74832 (0x12450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 16 17:36:16 2025 GMT
Not After : Dec 13 17:36:16 2027 GMT
Subject: CN=67b22214-ab4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:02:bc:33:bf:a4:48:4a:86:23:9b:02:65:
51:82:f4:26:ed:ea:53:99:73:2c:4b:c3:61:a2:c0:
6e:b8:59:67:12:8b:8b:51:d2:b4:c5:6d:ac:dc:4f:
09:fc:64:71:49:1c:3d:49:79:df:54:e7:a6:81:33:
85:22:70:00:a0:0d:61:81:ec:5e:a9:a2:78:5f:74:
8e:19:b1:e4:6b:5b:f2:62:5e:ea:be:4a:b2:76:ea:
79:09:7b:cb:0a:db:65:71:b6:33:cd:bf:13:54:3f:
06:81:67:1e:18:64:58:8a:0b:a8:9f:10:df:b6:3c:
54:14:5d:9d:9c:9d:db:1e:75:a6:98:e3:d2:f1:48:
30:4b:42:4d:17:68:43:d4:5f:83:29:30:16:7f:00:
ab:b6:1d:97:b3:ab:ab:ba:ca:cc:a2:3d:48:1a:76:
be:0c:68:dc:ce:ed:93:d3:e1:07:e9:1d:6d:8b:cf:
2a:ae:ee:e5:15:dc:a3:fa:11:fd:ad:48:3c:2b:8d:
45:f3:44:69:e2:6b:8a:f5:2f:35:1e:2d:44:f5:c3:
17:a5:6e:87:0e:c6:3d:d8:db:0e:4e:e8:9a:f4:63:
b8:91:22:4c:c9:78:6d:be:a7:c1:c9:9b:88:19:19:
be:f2:da:bb:e2:2c:66:ab:57:b7:92:13:5c:d9:55:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7D:0C:8B:1D:35:F4:5C:EE:36:92:19:11:29:5B:49:6F:7B:DE:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/885DEDEEEC8C11EFB684409D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.144.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4c:19:c9:38:2e:2c:57:26:45:14:f4:c7:d4:de:ea:da:0a:
96:2f:d9:a3:2a:b7:27:2a:01:0e:fa:43:66:74:75:cc:35:e6:
80:7d:41:a9:f7:10:d3:26:bb:cb:bd:06:2b:4f:54:e9:82:2b:
e2:77:a9:07:37:0b:12:cf:1d:80:b1:0b:b7:1d:e2:24:59:a7:
71:d1:6b:59:98:62:cb:8c:e7:c4:6a:32:b5:3c:65:50:fe:46:
b3:d9:74:7f:2c:21:fa:0b:a3:69:f5:97:8a:20:5a:ed:80:9b:
9b:64:9c:81:f9:ea:e6:86:e5:cc:12:d0:20:7f:3a:77:78:a1:
55:d7:fd:25:69:57:78:93:fd:df:db:1d:6f:3f:9c:e7:51:ae:
88:bc:13:0a:af:40:b3:6d:21:5a:eb:31:84:75:04:37:0c:32:
0a:53:85:a8:32:59:42:00:e8:df:e2:70:29:36:cb:b6:53:0c:
19:45:07:c6:75:85:b1:4f:59:12:8c:fc:dc:f5:a3:27:7f:39:
5b:a0:f2:f7:0e:8f:21:69:d3:2f:85:e4:23:7e:1d:9a:85:41:
db:4a:41:89:43:a0:87:01:7f:2b:68:fc:4a:73:62:6b:8e:05:
ec:cf:54:26:20:98:5e:70:44:db:14:a2:d1:a0:6d:a2:b0:23:
f2:ef:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:47 2025 by rpki-client