Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98FEA81AF83411EFAFBD345B762E951A.roa
File: 98FEA81AF83411EFAFBD345B762E951A.roa (raw, json)
Hash identifier: f5/mXgDz9+VRjAgIsxRXUVBni/ndrBqH8lxVN6yEPmQ=
Subject key identifier: 09:DD:AA:A1:50:B5:47:54:F1:0E:38:1B:C5:24:55:12:89:2B:85:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0141A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98FEA81AF83411EFAFBD345B762E951A.roa
Signing time: Mon 03 Mar 2025 13:37:06 +0000
ROA not before: Mon 03 Mar 2025 13:37:02 +0000
ROA not after: Sat 05 Apr 2025 13:37:02 +0000
asID: 213690
IP address blocks: 156.249.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 13:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82340 (0x141a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 13:37:02 2025 GMT
Not After : Apr 5 13:37:02 2025 GMT
Subject: CN=67c5b082-6baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:5e:a5:55:bd:ec:d6:97:8e:cf:f7:3a:17:
e7:cd:73:93:ce:1b:49:fd:46:78:84:cd:4f:96:46:
c9:08:42:71:0f:a4:e6:e8:bd:01:4b:67:ea:1b:05:
e9:0e:83:76:ea:72:3b:e6:65:dc:a5:ce:e1:6e:70:
5e:41:76:39:c4:4a:d6:00:67:2e:8c:d1:a1:84:65:
a4:39:f5:88:30:ba:70:0c:f7:ef:8d:35:c9:5f:ee:
6c:83:2b:7d:41:c4:8c:37:71:5a:45:0a:7a:80:e4:
df:89:47:fb:e2:a9:32:55:cd:65:c2:2e:72:ce:86:
6a:27:1c:f2:b3:75:82:af:19:6a:71:07:76:79:5b:
9f:1c:7d:20:fc:8b:aa:a2:6c:e2:d1:42:e1:0f:fb:
62:96:ce:3e:2a:14:00:ea:e0:b3:70:2a:c6:66:56:
37:1f:8b:e0:3e:b3:c0:cc:7c:51:ae:11:eb:ed:e0:
d5:7b:c9:07:e1:2e:ed:2b:7d:43:5a:16:b8:d0:10:
29:a2:0b:85:8b:5d:b5:2f:0f:2b:8b:25:fe:21:58:
93:72:09:75:83:27:d0:68:a6:ff:a6:1b:5e:10:81:
33:6d:02:db:bc:09:55:ea:aa:2b:4f:79:c6:66:45:
1a:f8:00:62:56:95:dd:bc:c7:d4:1c:91:0d:f2:7a:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DD:AA:A1:50:B5:47:54:F1:0E:38:1B:C5:24:55:12:89:2B:85:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98FEA81AF83411EFAFBD345B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:75:17:8f:74:3a:6c:1e:bc:46:08:2c:9b:51:d2:67:24:ae:
e0:1b:34:0c:a1:a8:df:78:0a:1b:77:9c:91:14:f2:d8:bd:b4:
c8:8f:8e:b7:cf:4e:06:13:b3:a5:89:c6:d7:7f:27:66:cc:f9:
ab:23:1b:86:38:c2:29:ea:6f:45:cf:02:b4:27:63:24:02:ca:
e4:a5:9b:53:5f:e5:7c:55:4f:ed:5e:7f:85:51:10:94:98:94:
2e:63:20:37:3b:e6:62:41:c8:84:07:09:97:1a:f0:d5:eb:0f:
3f:fa:56:bd:7e:c5:e0:ba:f0:39:ce:8d:c0:ae:eb:fd:c9:55:
7c:d7:bd:53:c8:fd:70:1e:c2:64:61:8b:1b:86:35:db:0a:70:
2e:e1:2a:72:89:02:de:7b:de:f8:0e:df:83:72:c3:d5:48:a8:
92:ec:9f:c0:91:bc:3d:d0:4c:cd:50:5b:27:c9:c9:da:b7:d5:
64:6a:6d:7a:a6:53:87:0c:f5:07:1b:a1:cf:6f:e2:d1:70:0a:
8c:a4:63:d1:07:f3:2d:30:a0:f5:56:9f:81:8a:55:69:9f:2e:
b8:3f:cd:ee:08:90:dc:6b:bf:55:e1:69:8c:51:2a:75:df:85:
f8:92:9e:dd:c1:68:f9:d0:e4:60:95:ba:45:87:e5:eb:ec:1b:
72:8e:55:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:07 2025 by rpki-client