Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FBBFABCF4A211EF8639D86B762E951A.roa
File: 9FBBFABCF4A211EF8639D86B762E951A.roa (raw, json)
Hash identifier: bsUCJjFRDZLtD5R1q4EU107RxVgRuTuSr6PCkeit2Sc=
Subject key identifier: 2F:60:78:84:F7:7C:6C:2C:BD:67:8F:7E:8A:25:8B:61:4D:75:58:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01387B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FBBFABCF4A211EF8639D86B762E951A.roa
Signing time: Thu 27 Feb 2025 00:34:37 +0000
ROA not before: Thu 27 Feb 2025 00:00:33 +0000
ROA not after: Sat 19 Feb 2028 00:00:33 +0000
asID: 17561
IP address blocks: 156.229.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79995 (0x1387b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:33 2025 GMT
Not After : Feb 19 00:00:33 2028 GMT
Subject: CN=67bfb31d-f078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:31:ac:c2:58:38:80:46:42:53:6b:53:de:
21:25:0b:0c:46:91:12:58:4d:1e:34:95:cc:48:85:
9f:f6:70:9f:15:13:fe:1e:1d:85:24:2b:5a:89:30:
8f:08:f0:d4:17:d8:e3:68:da:73:74:c1:5e:a8:de:
0d:d1:51:9e:8e:c8:ac:83:bd:d1:e7:3a:e4:1d:0c:
46:08:6d:31:1c:b2:1d:1c:99:3e:38:c9:d8:65:f5:
9d:c2:1b:f5:09:92:34:53:ec:19:4d:42:71:24:2f:
df:fc:d9:40:98:bf:e7:a5:a9:5e:5d:d0:6d:57:07:
96:f2:26:26:5d:e6:8d:af:3b:74:f8:ee:3c:47:b4:
97:a9:3f:f7:88:53:03:af:5d:22:62:ed:22:e0:89:
9a:94:f7:01:a3:24:c1:43:f8:b6:ef:0c:f2:f6:bd:
5b:16:91:f2:2f:73:f3:d6:99:87:a5:7a:54:e2:d8:
a1:30:5b:76:b3:ce:0c:47:0e:15:4b:b3:61:0c:ea:
28:ab:4a:61:31:06:4f:cb:2b:82:40:e6:91:07:3f:
20:93:ff:f4:db:f8:74:7d:26:90:d1:06:e5:2c:f7:
a0:f5:11:8a:c9:22:0e:14:28:fc:2d:6e:34:65:9a:
4a:fb:a0:d3:7f:6c:15:b3:3b:f1:5a:dd:9f:62:e9:
79:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:60:78:84:F7:7C:6C:2C:BD:67:8F:7E:8A:25:8B:61:4D:75:58:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FBBFABCF4A211EF8639D86B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.1.0/24
Signature Algorithm: sha256WithRSAEncryption
83:36:0e:a2:f3:ad:31:d7:fa:9f:ec:03:a0:0b:4a:c9:5f:3f:
26:4c:a7:2e:87:d7:c7:fc:3b:bb:79:0d:f8:dd:4d:9a:49:db:
43:d2:c7:b1:30:b0:23:ba:9c:f6:8d:ac:62:46:35:9b:7d:9b:
ce:97:d6:5f:da:1d:e8:7b:7d:b5:be:a7:1e:04:d1:18:e0:c0:
5a:34:30:d0:bd:69:26:34:e6:f2:b3:43:ad:e0:ad:e3:1a:7c:
d5:15:eb:9a:21:ea:ff:27:6e:56:bf:62:e9:64:a1:a5:34:e2:
99:41:a5:4b:95:5c:f4:6d:bb:60:0b:81:4d:ee:64:c6:6e:13:
30:1e:f0:56:a4:e2:07:bf:86:54:4e:5b:d9:c6:56:7a:14:0e:
aa:b4:4a:0c:e7:23:03:e8:26:69:ba:eb:11:62:55:26:4a:a8:
d6:b6:59:d3:6d:32:4a:a2:f3:dd:a7:9a:15:c8:b4:b0:2e:ce:
e7:03:e1:98:fb:5c:94:86:9a:fd:2a:c0:ed:e8:ac:b6:67:a5:
f6:48:56:aa:84:d6:6b:01:c5:fc:17:ac:c7:cf:25:05:32:07:
d3:82:55:4e:cf:ef:f5:18:0e:1b:f7:06:cb:27:80:c2:7f:50:
09:a8:86:c6:22:77:ec:47:bd:e1:1e:bf:e8:2b:4f:61:90:7f:
8e:41:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:39 2025 by rpki-client