Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93AB855AE53C11EF8268748E762E951A.roa
File: 93AB855AE53C11EF8268748E762E951A.roa (raw, json)
Hash identifier: yHewJggSTgal6k0KNErW6qPyJBjpwnxmaTqNKeZqoBs=
Subject key identifier: 28:05:07:02:CD:05:58:B3:EE:AD:EC:78:1C:BC:9C:AD:60:98:F4:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93AB855AE53C11EF8268748E762E951A.roa
Signing time: Fri 07 Feb 2025 10:16:21 +0000
ROA not before: Fri 07 Feb 2025 10:16:17 +0000
ROA not after: Sat 13 Dec 2025 10:16:17 +0000
asID: 984
IP address blocks: 156.230.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72932 (0x11ce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 10:16:17 2025 GMT
Not After : Dec 13 10:16:17 2025 GMT
Subject: CN=67a5dd75-ad33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:36:95:c0:ce:a5:c3:65:0b:b6:e3:02:1c:45:
6a:8a:22:12:f6:ad:fa:51:aa:54:fe:03:fa:41:47:
14:33:ef:0a:bd:99:38:ab:37:e2:ac:88:03:55:98:
8e:58:15:98:88:25:6f:59:a4:d5:fc:03:a8:08:19:
66:14:2f:1e:31:e2:b1:ee:86:49:98:b0:b3:90:c1:
18:d9:04:e0:12:cf:9e:36:57:dd:de:91:0b:7a:b2:
bc:84:10:16:8e:64:14:16:cf:b7:7b:84:a0:bb:1d:
bf:6b:f6:57:02:6a:57:63:5f:24:69:ac:bb:a0:42:
1c:7a:ad:7b:83:1d:bc:ec:41:a8:29:5f:2f:c6:28:
4d:9d:ba:8c:e7:5a:6e:e0:e8:78:91:a6:b6:2d:e2:
81:ab:8d:0c:bb:e8:13:70:5c:9a:ef:eb:5e:ee:59:
aa:2f:b6:64:4c:8f:22:9b:13:b5:0e:fb:ab:00:26:
7a:52:1b:47:61:08:b6:cf:49:09:83:d6:f6:ab:7f:
7c:d6:ac:bf:8e:43:10:0e:7b:0b:81:93:69:17:88:
a3:18:7d:97:37:40:8e:9e:13:02:ec:a1:d0:2c:17:
01:ca:ca:77:c6:e5:17:f8:7e:79:06:7c:10:96:b0:
b3:e8:0c:45:79:d3:3b:5e:16:18:dc:f8:00:8a:33:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:07:02:CD:05:58:B3:EE:AD:EC:78:1C:BC:9C:AD:60:98:F4:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93AB855AE53C11EF8268748E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.152.0/24
Signature Algorithm: sha256WithRSAEncryption
af:12:44:64:99:61:20:d4:e5:dc:b9:2b:0f:bd:49:3d:02:7b:
bb:d3:60:ee:4e:91:78:0a:18:16:c5:4c:d2:95:d5:f5:96:71:
31:b9:87:8c:eb:c3:3b:d1:04:21:04:6f:dc:11:18:13:a1:eb:
c5:06:a3:97:90:37:c0:75:04:99:8e:c4:40:1d:b4:c0:b5:32:
3d:cc:ce:3d:13:ef:5c:fb:0e:dc:ca:a8:1e:dd:6b:1b:44:84:
07:65:f3:c6:8f:75:57:65:35:30:1b:54:5d:e0:ec:c4:cf:63:
40:27:12:fc:a2:f8:a9:30:e5:23:ba:cf:4f:fe:ce:6c:6a:ea:
7b:45:9d:3a:e3:a7:39:0d:a1:dd:8f:10:84:35:28:a7:93:cc:
51:11:3b:1b:84:d8:29:d1:f9:63:d5:b5:ae:9e:94:2c:c6:af:
1f:d1:ef:6a:0f:a2:65:ee:34:cc:40:9a:22:a8:a9:d8:30:8e:
4a:ad:2e:e9:3e:52:47:4e:83:64:0c:19:ea:65:d8:42:2e:4e:
eb:fc:c2:f0:a0:18:3e:1b:8b:ea:fa:98:df:e2:10:d3:40:9f:
aa:49:b4:f8:53:a0:0d:c2:d1:6b:f1:1b:6a:c1:b6:61:f9:ef:
eb:21:cc:48:27:b4:75:a9:48:9d:2a:05:98:85:c7:30:a3:26:
34:14:e1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:41 2025 by rpki-client