Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DE20F32E54511EF946A9F47762E951A.roa
File: 8DE20F32E54511EF946A9F47762E951A.roa (raw, json)
Hash identifier: 0z9NGYvKCi+fE1Bsxc5ELeMYLacJad/dRC2Kzcj9+eg=
Subject key identifier: 1A:9A:A3:DA:09:AF:8A:9F:5E:E3:ED:05:59:31:58:DD:5E:20:65:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DE20F32E54511EF946A9F47762E951A.roa
Signing time: Fri 07 Feb 2025 11:20:37 +0000
ROA not before: Fri 07 Feb 2025 11:20:33 +0000
ROA not after: Sat 13 Dec 2025 11:20:33 +0000
asID: 984
IP address blocks: 156.230.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73015 (0x11d37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 11:20:33 2025 GMT
Not After : Dec 13 11:20:33 2025 GMT
Subject: CN=67a5ec85-c4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:30:ac:33:b1:8a:ef:19:a7:cb:56:f9:dd:
b8:9e:00:b8:5a:ae:31:fd:ef:4b:9c:9c:a5:e7:3f:
7c:88:76:b0:00:4a:dd:1d:33:d9:6b:e9:ae:c9:88:
9d:e9:6b:97:7b:6e:b1:99:18:2a:69:57:df:d6:fb:
13:19:4d:af:52:77:e7:b5:92:2c:00:8e:c3:14:3b:
bc:a9:eb:d9:5f:61:0a:44:6d:ac:db:2a:6b:10:e4:
78:41:b7:07:8d:d4:6e:4d:e4:03:25:06:5b:7d:29:
e0:23:04:e5:73:6a:11:7d:05:8e:6d:2d:19:de:9b:
3a:4a:d3:90:c0:fc:a0:47:a7:32:a5:64:4f:60:50:
87:8d:3b:92:d2:5d:47:0a:db:18:0e:8e:0d:6d:f5:
7f:dc:19:f7:27:6e:4a:cc:61:35:70:e0:ef:90:45:
cb:4c:a4:7e:7d:03:f0:a6:b3:7e:7b:81:48:24:ca:
e1:7a:b2:77:06:bf:6b:89:6f:44:73:fb:21:d4:c9:
87:d1:c7:35:bf:f5:09:99:5f:58:5f:1b:4d:48:37:
82:a1:1c:57:06:74:43:7a:24:71:d7:5d:fe:25:53:
c1:22:8f:6f:66:5e:ff:19:31:2e:b2:6d:5c:83:33:
20:9c:f5:48:01:1b:ac:d8:88:e4:23:7d:d7:5f:4a:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9A:A3:DA:09:AF:8A:9F:5E:E3:ED:05:59:31:58:DD:5E:20:65:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DE20F32E54511EF946A9F47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.179.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:7e:f3:2d:16:1d:4d:23:6f:dc:d9:2d:95:c5:26:00:ef:89:
f9:02:9b:64:c3:94:d1:73:5e:86:3c:aa:48:0e:c4:85:49:65:
ba:e5:c9:a0:0b:3a:e1:e1:02:dd:86:f6:5f:e7:53:aa:55:c1:
ef:bc:51:00:b0:0d:d1:6d:9e:bb:91:f5:d3:53:95:13:46:3f:
33:f3:ab:a1:09:26:1c:d2:8d:ec:ea:c4:1c:4c:1f:c4:8d:09:
44:83:dc:cd:75:dd:0d:ed:64:aa:dc:3d:b7:1f:ec:a8:31:8d:
98:64:67:83:b6:54:3a:95:14:34:fb:ff:e7:c1:ba:63:c8:e9:
be:56:da:0b:89:04:44:4e:f5:36:fb:22:b1:62:9e:1f:1b:ae:
75:27:e2:0c:2c:12:4a:84:d7:63:e0:81:a0:c9:61:ad:09:cf:
82:7b:8a:3b:0d:c9:c8:f4:13:fc:14:71:c8:bd:32:70:74:2b:
30:77:11:d1:4e:9b:45:43:13:07:9e:5a:7d:67:74:da:90:b3:
d4:9f:67:ef:60:1c:02:ce:1b:9b:29:97:d3:0a:0b:2b:a6:b7:
48:23:64:83:51:9e:30:b2:b8:05:06:40:37:08:13:22:93:85:
9d:20:57:cb:71:c3:95:2e:83:9b:85:cb:83:e4:07:2e:37:c5:
25:9c:69:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:45 2025 by rpki-client