
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92114544F82511EF822F3B73762E951A.roa
File: 92114544F82511EF822F3B73762E951A.roa (raw, json)
Hash identifier: XiG1sGyFh9axB4AMoLKF6h8ySvdGspya/LxyquL3r/4=
Subject key identifier: 28:DE:B3:4C:13:CD:51:0C:15:8F:4F:29:47:E0:DD:7F:74:EE:23:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01416C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92114544F82511EF822F3B73762E951A.roa
Signing time: Mon 03 Mar 2025 11:49:32 +0000
ROA not before: Mon 03 Mar 2025 11:49:28 +0000
ROA not after: Mon 17 Mar 2025 11:49:28 +0000
asID: 4766
IP address blocks: 156.239.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82284 (0x1416c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 11:49:28 2025 GMT
Not After : Mar 17 11:49:28 2025 GMT
Subject: CN=67c5974c-787e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:06:84:58:54:20:63:30:1f:2a:99:fd:18:
80:41:b4:b7:40:3e:00:e5:70:89:5c:3d:f8:ec:61:
80:7b:c7:a3:9f:c5:ed:30:f4:4a:a2:b9:eb:7d:54:
02:3e:13:9b:55:2a:1f:09:8e:37:f2:c1:a7:ad:8a:
f9:7a:29:aa:86:50:f7:78:dd:7a:03:f4:96:bd:6c:
fd:2d:86:5d:59:94:dc:31:67:cd:3e:76:d1:a9:90:
a0:26:d2:6b:6b:56:1f:47:60:fe:ee:e6:06:b9:96:
2a:82:f3:2b:0d:37:92:4b:58:59:fd:d0:35:2a:b4:
08:c6:f5:35:47:f0:f3:56:03:7f:f6:80:dd:81:02:
eb:90:46:87:b0:6d:ba:7f:e4:e5:94:8c:3e:ce:98:
ff:0c:23:fe:ba:1c:a0:b1:a9:df:36:a8:c4:d4:6a:
cc:40:98:64:81:9e:4d:ab:c1:63:c6:32:ee:ab:ae:
86:91:88:2c:f3:08:90:51:74:3f:e2:5f:52:f5:7c:
69:24:3b:1a:94:92:53:2f:5e:b5:c7:72:2b:e3:07:
16:ae:a8:1f:4e:1d:09:21:3c:24:1d:58:66:eb:ab:
85:9f:c4:39:d2:9a:71:f1:67:c2:ed:b3:34:18:ee:
d0:f9:58:d8:f8:7b:8f:7e:23:19:43:5e:e4:59:ca:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:B3:4C:13:CD:51:0C:15:8F:4F:29:47:E0:DD:7F:74:EE:23:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92114544F82511EF822F3B73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1a:b4:b7:a1:6f:55:c2:ba:e1:04:5f:ad:ea:71:1e:f5:c8:
ae:4e:14:c6:51:78:76:07:0d:e6:92:ac:5d:8a:09:eb:96:01:
25:74:ed:8e:13:b8:1f:32:c5:1d:c1:9a:1c:4b:50:9b:55:e5:
f0:9e:b4:a6:16:54:dc:8d:53:36:98:80:fb:82:96:15:1e:75:
43:47:b2:51:56:9b:4a:17:5a:32:d6:9c:f6:b2:54:13:80:a6:
56:05:e4:5c:62:d9:b3:87:0f:42:99:8d:bd:59:1c:aa:4e:71:
87:39:9f:3b:39:b9:79:8f:8f:23:5f:71:35:b6:f3:3a:7b:ad:
f0:3d:d2:23:8b:45:a5:78:3a:93:30:78:cf:e4:83:95:42:5b:
b1:a6:00:ef:00:d6:0e:14:48:7b:87:f9:57:29:8b:db:0e:26:
c5:bd:1d:a5:4c:72:fe:24:a7:55:7d:b4:e6:e4:7e:2c:f0:94:
53:ef:c6:c8:85:3f:6e:6c:b6:3a:26:75:da:62:c6:10:e0:a6:
08:17:54:6e:15:1c:99:86:d1:8f:b7:3f:15:45:1d:8f:42:99:
ee:84:8e:16:a8:51:55:06:d8:72:6d:c6:72:e5:7b:09:6d:d2:
6c:c8:fc:12:a5:0a:13:27:d3:8c:77:e1:5f:0a:fc:7b:24:b1:
33:11:08:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:00:52 2025 by rpki-client