Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ACF215CF48C11EF9C71E65A762E951A.roa
File: 9ACF215CF48C11EF9C71E65A762E951A.roa (raw, json)
Hash identifier: bDEPLoslscviHrxjLhhYGDjuW9i/DQHzdGwb8BOO068=
Subject key identifier: 2E:5C:BE:74:77:DC:EE:61:9C:99:CA:B8:44:78:FA:46:B9:FA:83:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013801
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ACF215CF48C11EF9C71E65A762E951A.roa
Signing time: Wed 26 Feb 2025 21:57:00 +0000
ROA not before: Wed 26 Feb 2025 21:56:56 +0000
ROA not after: Thu 19 Feb 2026 21:56:56 +0000
asID: 984
IP address blocks: 156.232.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79873 (0x13801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 21:56:56 2025 GMT
Not After : Feb 19 21:56:56 2026 GMT
Subject: CN=67bf8e2c-5a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0a:fb:ee:7f:df:85:a9:2b:ea:0c:b6:6e:1f:
ad:60:d3:ed:ac:5c:1b:62:83:44:9d:d6:53:49:82:
d6:c0:ba:7e:19:95:2c:75:1f:ba:78:aa:f1:90:fc:
e4:cf:7d:82:0d:f4:3a:60:38:6e:f4:dd:ba:89:52:
78:55:5d:5b:29:c6:22:d6:58:bd:86:d4:54:c2:ef:
6c:ff:57:c2:ed:31:49:e0:c4:f7:e1:38:c0:91:e1:
e6:51:18:f6:c6:d6:48:a5:4d:a0:60:a9:e0:d4:a9:
2d:86:89:66:d1:81:d7:d0:14:de:a6:81:89:1c:73:
7b:bb:71:79:02:e1:4c:36:1c:59:e5:01:18:2b:8e:
7e:d4:38:a2:af:9f:f5:a2:46:0d:bc:47:ad:67:33:
67:b2:33:9e:48:9f:14:0e:71:c0:fc:8e:26:aa:f5:
b6:41:64:8b:98:a0:d9:ef:84:73:c6:a0:a4:7a:db:
59:4b:fa:71:3c:85:6a:71:8c:a4:0c:db:22:30:79:
aa:01:86:98:c2:3b:fc:55:c5:df:63:67:0f:52:bf:
fe:00:31:c2:cf:b5:6d:2f:0a:e1:d7:82:8e:19:bd:
32:83:7a:a2:ee:e3:fa:49:56:97:0e:a7:d3:2a:2e:
4b:82:f8:fb:79:46:10:10:c2:f8:6b:a5:a4:0e:01:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:BE:74:77:DC:EE:61:9C:99:CA:B8:44:78:FA:46:B9:FA:83:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ACF215CF48C11EF9C71E65A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ed:82:ec:01:38:53:76:56:06:06:99:20:62:c1:b9:0e:89:
e4:07:88:10:e8:34:7a:3d:ec:1a:7f:74:eb:06:73:b6:df:93:
d3:20:aa:fc:69:d3:90:19:64:4d:d3:ba:9b:75:9c:22:9d:ae:
f8:6d:fa:ab:cb:cb:91:31:5b:f1:2a:d6:3c:86:ef:96:21:e9:
08:a4:52:52:1c:c6:c0:00:ab:5a:a9:9d:05:96:2c:d9:a6:64:
66:67:11:d1:46:b2:14:1c:f1:d0:56:0b:c7:56:af:68:d4:8f:
b0:4d:7c:a4:5e:1e:99:0d:70:f0:de:c5:e7:0b:86:14:cc:5c:
0e:e3:fe:0a:ac:55:81:a7:e3:a5:8a:d8:22:fe:30:3f:bf:c0:
e3:bb:5d:4a:4a:cb:ca:07:bc:f0:38:bb:c0:6d:1a:e9:64:ed:
2c:4b:85:61:c4:0d:f1:12:bb:f7:b4:3d:b8:e7:9e:e2:8d:25:
60:35:9f:4d:f7:45:c8:b6:9d:5f:28:7c:dd:9e:69:0a:1b:3d:
79:9d:c7:35:4e:12:5a:18:2f:ac:41:07:47:bf:62:a7:eb:7d:
10:de:f0:10:69:e9:48:df:61:e1:ef:ac:8c:c7:dc:36:36:a2:
83:f1:18:c4:14:d5:24:4e:98:1f:90:9f:1d:59:03:fd:f1:79:
01:53:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:41 2025 by rpki-client