Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CA807C0F5DA11EFA7CAE658762E951A.roa
File: 8CA807C0F5DA11EFA7CAE658762E951A.roa (raw, json)
Hash identifier: 5tr5T+Wv86B1d7PuvTogvO9nU+TxUE6pjbrRS1fa7Nw=
Subject key identifier: FF:6D:C9:FD:D8:C7:00:68:A1:38:8C:6F:C4:C0:22:7C:02:C0:09:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CA807C0F5DA11EFA7CAE658762E951A.roa
Signing time: Fri 28 Feb 2025 13:47:28 +0000
ROA not before: Fri 28 Feb 2025 13:47:25 +0000
ROA not after: Sun 13 Apr 2025 13:47:25 +0000
asID: 138915
IP address blocks: 156.244.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81410 (0x13e02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:47:25 2025 GMT
Not After : Apr 13 13:47:25 2025 GMT
Subject: CN=67c1be70-cd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:13:7b:4c:df:b2:db:40:54:a3:bb:3e:1d:
c9:63:97:03:d9:ae:05:f6:cc:2e:15:b0:cd:d1:93:
10:f7:d4:0f:20:f3:3d:65:13:d1:9a:d2:ca:16:9b:
47:5c:0e:bf:0d:09:ec:b3:04:c3:ef:d7:0e:07:b8:
ea:4f:3f:ba:8c:ce:9c:09:c6:f2:af:0b:12:cc:a6:
0d:b0:df:03:90:a5:35:42:4e:4e:d3:ff:31:4b:4e:
bc:a6:36:59:c8:55:92:5f:0c:28:bb:a7:f0:ae:8b:
a0:83:a4:40:b0:19:54:96:11:78:7f:97:22:d8:a5:
28:75:6e:ac:3b:34:e6:b0:69:cd:55:50:35:7c:13:
78:68:0f:bb:ca:83:ab:db:4b:9f:cb:73:28:cd:c3:
4a:59:24:7c:80:bc:00:49:3a:96:67:d4:0b:9b:80:
6f:0b:18:4b:a0:e1:3a:4a:9e:5e:cc:c0:11:03:71:
38:eb:96:fc:58:04:dc:4c:7d:b3:03:51:a7:06:e6:
40:5f:ee:84:28:90:d5:a8:17:84:ae:4f:92:8c:05:
da:30:c1:a3:d5:a6:09:ed:a9:39:4d:ab:a4:5d:8c:
40:22:43:15:d2:1c:56:5c:96:2a:cb:bb:8a:04:ec:
a4:7e:39:c0:9f:9a:01:3e:7f:06:28:01:7d:82:9e:
22:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6D:C9:FD:D8:C7:00:68:A1:38:8C:6F:C4:C0:22:7C:02:C0:09:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CA807C0F5DA11EFA7CAE658762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.42.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a4:db:90:b4:13:c7:c7:47:39:58:bf:e3:0b:c5:d1:19:c0:
bc:b2:74:14:be:fb:c5:b4:a4:87:17:15:f1:d8:26:cb:bf:92:
40:9e:68:1a:02:52:d1:b3:e6:2c:eb:63:96:47:e3:a5:c3:fc:
ab:3a:d5:14:22:2d:17:6e:f8:ad:06:f2:36:e4:48:cb:64:c2:
63:fb:06:f4:ae:8b:df:b3:79:34:53:2f:a6:be:73:00:8a:16:
59:cb:c6:a5:29:65:e8:1f:56:34:73:35:2a:2a:cd:fa:e1:06:
ac:9f:62:60:ec:fe:b4:6c:60:c5:95:b1:81:b1:6c:bd:74:ad:
d4:4e:29:d9:8a:61:ec:ba:22:71:22:b1:91:af:1c:8e:dc:3c:
15:5e:b6:75:47:27:f2:cf:c3:d3:e1:e8:0b:72:26:9d:c1:23:
cc:b5:b9:01:ed:fc:55:81:f2:39:d7:9b:ee:2e:d1:5f:d3:5f:
b3:bb:d8:28:02:19:c0:94:f9:bd:23:d0:97:d6:63:f3:36:cb:
5d:2f:38:94:a9:d8:fc:5a:a2:1e:cc:8d:ef:fb:d6:e3:c9:64:
bc:54:eb:63:3a:eb:bf:3e:9a:ca:98:3d:32:7d:9d:89:3c:a5:
ee:40:d1:d8:65:82:6a:af:75:1b:79:7d:eb:3f:3b:b5:8e:d9:
51:04:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:53 2025 by rpki-client