Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/929BB7ECF46F11EFBD24DC91762E951A.roa
File: 929BB7ECF46F11EFBD24DC91762E951A.roa (raw, json)
Hash identifier: 3vyDKESw+MH/4AecxsKEHl2ssS4V/G8UiXyZeGJ/flU=
Subject key identifier: B0:58:DF:29:59:06:93:DC:D4:B6:28:F9:DD:97:9B:97:1B:A7:2A:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013665
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/929BB7ECF46F11EFBD24DC91762E951A.roa
Signing time: Wed 26 Feb 2025 18:29:11 +0000
ROA not before: Wed 26 Feb 2025 18:29:07 +0000
ROA not after: Sat 19 Feb 2028 18:29:07 +0000
asID: 17561
IP address blocks: 156.233.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79461 (0x13665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:29:07 2025 GMT
Not After : Feb 19 18:29:07 2028 GMT
Subject: CN=67bf5d77-2aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:2c:51:5d:4e:27:0c:42:4a:3a:65:c7:1a:
c0:c0:51:9f:c2:bf:7d:bb:f4:ee:57:97:2b:a9:4c:
83:79:b9:bd:8a:3b:c3:86:4a:47:a9:1e:7d:9e:53:
28:92:c0:95:41:25:e8:42:a1:b1:19:4d:08:c1:58:
d1:e4:50:3c:3d:46:4b:a4:43:35:9d:63:3f:c8:42:
27:7a:44:7f:a8:00:eb:d9:14:e9:51:e9:6c:de:a6:
d7:35:b8:8e:36:4a:b3:6e:34:60:76:20:07:7d:1c:
46:fe:9a:8f:e0:04:34:76:61:f5:87:b3:27:6e:d6:
d3:e3:39:2a:75:e6:29:43:bd:18:8d:80:3b:f5:67:
85:de:fc:12:15:82:2c:d1:22:ff:64:dd:a0:48:b6:
6b:06:ff:71:1b:59:53:2a:d5:df:53:f4:76:5c:3e:
ce:5b:53:07:0a:ed:5e:c0:9c:d1:fc:29:d9:e0:de:
8c:32:5c:ef:db:fb:a9:2c:f5:7e:6e:f9:ad:aa:99:
12:cd:a8:e1:97:47:3d:a5:02:18:02:f9:8d:51:1e:
af:f1:75:29:dc:12:24:e3:7e:cf:3b:78:6f:b6:f6:
83:c2:aa:03:80:5b:dd:4a:b5:0d:d7:7e:fb:75:5a:
9e:91:c4:73:81:1f:59:74:d9:9f:2f:c2:a6:56:f7:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:58:DF:29:59:06:93:DC:D4:B6:28:F9:DD:97:9B:97:1B:A7:2A:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/929BB7ECF46F11EFBD24DC91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.210.0/24
Signature Algorithm: sha256WithRSAEncryption
01:17:ef:8e:d1:d0:5d:70:9b:b6:34:d9:8c:12:31:4a:9b:23:
c4:a0:f7:c9:92:61:e7:59:52:3c:34:4f:d0:c5:b7:02:fd:6b:
be:5c:6b:f0:a0:04:fe:64:c6:e7:d0:8a:ae:82:a7:12:64:9a:
19:20:71:2b:8b:ef:ca:83:16:6b:56:f1:62:28:3f:16:3e:71:
54:98:2c:21:ea:92:fb:aa:c2:68:a0:8a:49:24:a1:dd:b2:72:
db:21:87:22:66:5d:53:27:12:fe:9c:14:2b:bc:ef:69:85:e2:
94:01:98:fd:77:cf:7a:eb:d9:47:b4:2c:85:47:6f:06:f6:52:
e8:23:3a:fa:1d:e0:f3:31:8d:26:0e:65:fd:4a:32:e3:b9:93:
a2:15:bf:15:51:e2:70:e2:79:04:e7:4c:98:8c:44:3a:f6:8a:
57:57:5e:3a:1d:9f:53:68:34:41:9e:25:5a:20:57:15:1f:9f:
e4:b6:11:0f:0c:32:1c:0b:00:45:32:2b:d5:81:85:25:2f:6f:
2f:40:01:5a:84:96:81:a4:f2:2f:41:63:97:5d:57:b9:e1:e1:
b4:2c:08:66:28:71:54:3c:13:d9:93:8d:11:34:38:52:b9:3c:
1a:b3:58:cd:88:a9:cf:62:98:1b:f1:76:90:70:4c:b2:71:ef:
13:b3:b8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:58 2025 by rpki-client