Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963EFA36F44111EFBCA24750762E951A.roa
File: 963EFA36F44111EFBCA24750762E951A.roa (raw, json)
Hash identifier: S2k0fr0hu9zbWM81vz5y6HxB2QwlFncNIUow/pNCvfA=
Subject key identifier: A2:79:C0:09:C8:71:69:1C:7B:31:23:AC:D7:EF:2E:F8:8A:1E:E6:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0132D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963EFA36F44111EFBCA24750762E951A.roa
Signing time: Wed 26 Feb 2025 13:00:00 +0000
ROA not before: Wed 26 Feb 2025 12:59:57 +0000
ROA not after: Thu 19 Feb 2026 12:59:57 +0000
asID: 984
IP address blocks: 156.245.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78551 (0x132d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:59:57 2025 GMT
Not After : Feb 19 12:59:57 2026 GMT
Subject: CN=67bf1050-87a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:1c:f5:a1:73:a9:b9:37:37:31:73:0a:dd:
a4:92:f0:6b:27:1a:f0:03:be:a1:1e:c9:6e:46:fb:
06:4f:02:2d:9c:3d:69:7f:ef:96:9f:fa:aa:e8:f1:
7e:62:61:ec:36:b3:23:3d:a3:d9:64:07:64:49:c0:
09:07:b6:bd:d8:8a:8b:e1:7f:b1:5c:88:34:9a:a6:
80:06:07:dc:40:d1:a5:d1:c4:96:d2:42:4a:b9:6d:
a8:aa:bd:b4:b0:7d:13:ae:c7:6d:32:19:20:65:f2:
b2:06:b9:84:35:7d:b4:e0:d9:5e:11:fc:93:3f:8f:
fe:a0:f0:ca:ab:3c:53:65:b0:63:8a:7f:85:7a:04:
f1:3f:a9:34:82:c9:9d:fc:96:10:f5:08:2b:98:6a:
b8:0c:44:9c:61:ed:60:b7:73:2a:c1:bd:79:5b:d7:
9a:9d:5a:04:e5:c9:e0:c1:a8:5c:b9:d4:25:65:44:
14:f8:3e:05:d6:7e:ae:45:1a:59:97:1a:5e:97:bf:
2b:ec:e4:0b:79:8b:19:e7:cd:57:83:56:80:b7:20:
fb:fd:19:8c:78:a2:ed:d0:b6:12:bd:c2:8c:28:a1:
ca:d8:48:75:de:6d:e9:bf:1b:86:ff:ff:25:0c:66:
ec:79:9c:78:13:91:f4:5e:33:c2:bd:05:5a:7e:5b:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:79:C0:09:C8:71:69:1C:7B:31:23:AC:D7:EF:2E:F8:8A:1E:E6:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963EFA36F44111EFBCA24750762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.232.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:bd:02:f0:46:d2:9b:a7:ba:9a:e2:2f:84:e0:19:8f:5a:d7:
1b:24:2e:be:5b:80:f7:52:bf:13:8b:ff:91:5f:67:d7:34:e2:
a8:50:ee:d1:c6:e5:33:04:2c:b3:8a:c2:a4:78:3e:90:cc:81:
f6:53:1e:a0:66:79:97:09:26:6e:69:ed:b4:3f:06:12:7a:7c:
8c:9e:78:48:60:1f:ee:03:3b:21:d0:77:72:1a:a1:72:56:61:
f2:dc:44:15:c8:07:98:0f:f4:ea:00:83:65:12:8b:77:d7:1a:
7b:b2:c6:c8:da:4c:1e:fb:53:22:7a:02:1d:d9:33:25:9d:15:
74:df:e6:6e:a7:66:ca:9e:37:ef:d7:da:c9:1b:d8:2e:18:8a:
29:aa:5b:ed:2c:08:bc:77:16:71:0c:24:e8:5c:41:3b:23:92:
ba:f7:2c:61:1a:4e:7e:5a:fa:21:e2:fe:31:2c:2c:63:61:e5:
d8:d7:aa:69:6f:37:e9:de:c2:0c:7a:3b:0b:4a:5a:a7:eb:29:
93:ce:e8:4e:27:16:0b:74:f2:37:35:95:58:50:23:83:34:cd:
7d:d8:35:dc:32:63:05:c6:79:4a:cd:30:c5:f4:4e:da:fd:ae:
1e:2a:9b:54:e0:56:7f:0b:ce:70:f3:02:ed:dc:8c:c6:ae:9d:
6a:b4:58:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:32 2025 by rpki-client