Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1B1F54A0D3611F096AC5F88762E951A.roa
File: A1B1F54A0D3611F096AC5F88762E951A.roa (raw, json)
Hash identifier: 3OtrnyMBFwC1MygYGRqvgSWJnHgMjUB46KHxJevOrao=
Subject key identifier: 22:3B:81:70:86:EA:53:C1:6C:D2:59:03:0F:3C:15:6F:52:AE:D8:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01493C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1B1F54A0D3611F096AC5F88762E951A.roa
Signing time: Sun 30 Mar 2025 07:14:34 +0000
ROA not before: Sun 30 Mar 2025 07:14:30 +0000
ROA not after: Tue 29 Apr 2025 07:14:30 +0000
asID: 213812
IP address blocks: 156.229.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84284 (0x1493c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 30 07:14:30 2025 GMT
Not After : Apr 29 07:14:30 2025 GMT
Subject: CN=67e8ef5a-f88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:70:74:d4:c8:aa:94:f1:93:4f:25:02:8b:
90:ca:dd:bc:83:8c:0d:8c:7c:91:a9:a7:91:4b:d1:
85:14:bf:5f:2c:b2:10:12:4d:a4:2a:df:a3:10:2c:
21:ea:71:3c:31:84:e6:1e:f6:44:ee:7e:36:14:a9:
4d:7d:42:b6:59:13:40:62:68:ce:a1:fb:fb:20:b8:
73:b9:89:c2:ee:a8:f4:63:b1:fe:59:b0:94:ba:f3:
7a:81:46:79:76:fb:5c:15:97:5e:11:e0:c8:20:90:
91:1b:82:9a:c2:32:21:0d:53:2b:02:78:9a:35:10:
25:01:f5:d0:cf:46:3c:58:46:98:e8:e9:85:68:76:
e7:6d:32:dc:a9:88:e9:48:bf:73:56:7b:69:d6:ab:
08:96:0c:ee:0b:d5:70:e0:4c:68:7a:25:95:4f:08:
84:e2:59:b3:47:eb:30:99:40:ee:22:52:c3:09:a6:
ab:2e:ef:12:8a:df:f7:5a:b2:85:41:31:3c:b0:bb:
85:77:f9:5e:72:00:70:63:3d:77:f5:fc:13:88:29:
20:39:e0:15:4c:85:5e:62:7e:6b:2e:3c:37:0c:a8:
2a:1d:94:fc:64:5f:03:fe:55:1e:f4:40:bd:d7:dc:
28:40:5a:bb:5f:68:37:fe:d4:c7:a9:e8:69:fc:2e:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3B:81:70:86:EA:53:C1:6C:D2:59:03:0F:3C:15:6F:52:AE:D8:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1B1F54A0D3611F096AC5F88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:30:a4:44:2b:ed:0b:27:92:7b:2f:3b:b3:46:9b:1b:a0:cc:
6a:23:bb:c6:b2:44:45:09:a5:f7:62:51:14:54:9d:b5:42:d5:
34:47:3d:66:13:ad:b6:ba:43:85:02:c4:f7:0a:bb:44:11:b8:
84:b2:b5:53:1d:71:61:63:33:86:1b:22:3e:11:35:c8:a5:6c:
6b:db:85:ad:02:d6:f5:9c:90:e3:68:79:1f:3b:76:98:e1:a3:
4e:ab:a5:21:d6:d5:43:b9:1a:f9:28:de:eb:c4:b1:db:e5:f6:
c1:d4:22:6c:e3:4f:3d:99:f3:b5:33:e5:36:c7:18:47:7c:9f:
3a:b5:c1:4a:66:15:69:8d:e6:6d:c9:0b:06:42:94:e3:9e:ac:
ae:37:ed:1c:ab:a8:61:ac:e3:c8:c4:4c:ab:e6:57:61:f6:b2:
69:51:54:8d:db:6b:ee:e5:9a:b7:56:e7:7a:ad:ee:5a:df:90:
85:a3:61:c5:07:d5:3a:f7:11:05:4f:b6:9e:77:75:4c:e4:2f:
02:ef:f7:33:0c:4e:10:38:2e:a3:1b:3a:79:07:fd:a0:e2:e2:
9a:65:e1:84:82:8c:a7:a1:c1:d9:99:4f:88:45:83:4c:74:f8:
2f:92:80:95:1c:e3:a8:d9:c3:d0:2e:07:e5:11:67:18:75:a8:
99:d3:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:21 2025 by rpki-client