Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9215B936F4B911EF9278B59C762E951A.roa
File: 9215B936F4B911EF9278B59C762E951A.roa (raw, json)
Hash identifier: 4rKnwl0g2kEM8skpyjpVyCLMrV2tT2GtX9ko2t1sXhg=
Subject key identifier: 5B:AF:80:EE:36:7E:67:12:92:D3:7B:50:00:01:13:AC:23:53:5F:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9215B936F4B911EF9278B59C762E951A.roa
Signing time: Thu 27 Feb 2025 03:18:53 +0000
ROA not before: Thu 27 Feb 2025 03:18:49 +0000
ROA not after: Sat 19 Feb 2028 03:18:49 +0000
asID: 17561
IP address blocks: 156.229.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80067 (0x138c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 03:18:49 2025 GMT
Not After : Feb 19 03:18:49 2028 GMT
Subject: CN=67bfd99d-0654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:49:55:06:c7:61:81:0f:5e:c1:86:29:b6:
fe:65:89:1a:32:52:90:de:34:e2:e7:c5:f4:25:c1:
7f:dc:8e:ce:15:45:5d:b6:89:8c:a3:f8:3c:7a:aa:
ce:c7:8b:9a:36:12:82:bd:da:b0:b7:22:0a:5b:27:
f1:5c:76:84:33:19:62:60:7a:24:0e:f7:1a:00:2d:
ed:a0:28:14:85:7d:77:8b:65:f8:c0:6f:25:c0:23:
c8:2e:5e:d3:92:68:00:e2:ca:69:07:96:1a:ab:a3:
8f:19:d9:06:e0:36:d4:b4:a6:fd:1c:ef:1d:2d:c4:
4e:ad:9e:f4:85:8c:12:f7:20:87:fd:1a:10:c2:b0:
40:a0:9e:92:eb:ff:8b:d2:75:11:54:dc:9a:fb:f8:
d8:b5:9d:89:ec:36:e0:ea:64:cb:17:0c:34:53:18:
0e:b1:b3:31:13:cd:28:b5:8e:cd:80:10:06:49:ab:
67:48:d5:f1:8f:9a:b0:f9:11:ca:48:e8:ea:8e:78:
b1:dd:64:89:f8:37:4b:7e:93:bf:75:4b:1d:d8:e7:
d8:a7:fa:e4:64:51:45:e3:ca:96:b1:f1:d9:6f:66:
e9:c9:79:1d:d2:39:bc:dc:fb:1f:f5:eb:24:b0:24:
0b:b4:b2:a0:d5:e9:bc:c0:27:c7:f2:9a:c9:17:00:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AF:80:EE:36:7E:67:12:92:D3:7B:50:00:01:13:AC:23:53:5F:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9215B936F4B911EF9278B59C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.226.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:15:bb:c5:19:3d:23:20:79:62:9f:f2:13:13:a2:a7:96:d4:
1c:82:cd:59:a1:1e:1a:40:94:97:e6:73:3e:10:33:15:d9:48:
e5:8d:34:18:3c:e0:e9:bc:3d:f0:c2:85:ce:49:23:bf:bd:ed:
77:1b:b6:8d:f3:10:18:fd:76:f1:93:f2:29:55:f4:78:94:77:
4b:2b:81:5e:6b:e0:c3:58:24:ca:29:ab:96:31:3a:ee:6a:74:
c3:72:b4:0f:36:34:86:7b:67:31:e6:c8:83:9e:1d:4e:7f:bb:
c6:dd:41:7d:4b:14:ec:f6:fd:14:3c:58:37:c8:5c:c1:8d:89:
da:00:e9:15:ee:fb:91:4b:ca:27:9a:3d:99:1b:44:08:da:f4:
23:0a:37:06:df:17:14:4d:7d:84:31:f7:fe:5b:cd:e7:85:eb:
21:3f:89:8e:d8:82:7f:bd:1e:fb:74:d5:09:a1:28:cf:9b:97:
3f:95:6e:da:23:f7:84:8b:b1:2e:59:9b:14:f2:87:7a:cb:30:
6a:3d:c3:73:82:b9:d7:27:d0:0f:52:06:cd:7b:e4:77:7a:ed:
3b:79:39:fd:35:3b:5d:80:7a:a3:bb:1f:0b:e2:0e:f9:cb:cf:
2e:1c:62:55:3c:77:bb:6d:fb:59:f4:14:cc:bd:d8:01:1e:4b:
45:50:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:39 2025 by rpki-client