Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5E9A16EF44D11EF9B4061A4762E951A.roa
File: A5E9A16EF44D11EF9B4061A4762E951A.roa (raw, json)
Hash identifier: yqIf/vzA4TicJNMV7pBh/adXzdAbRNHugCnuqdYuVxY=
Subject key identifier: 51:B0:94:5D:A5:D8:D6:04:3C:24:AE:28:D7:45:83:92:C1:8E:D9:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0133BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5E9A16EF44D11EF9B4061A4762E951A.roa
Signing time: Wed 26 Feb 2025 14:26:21 +0000
ROA not before: Wed 26 Feb 2025 14:26:17 +0000
ROA not after: Thu 19 Feb 2026 14:26:17 +0000
asID: 984
IP address blocks: 156.231.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78781 (0x133bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:26:17 2025 GMT
Not After : Feb 19 14:26:17 2026 GMT
Subject: CN=67bf248c-7848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:e3:16:77:65:a5:7d:7e:71:e3:15:4e:2f:
00:a5:f7:ce:76:8f:e5:93:e2:2c:08:17:ef:00:aa:
dd:3a:65:ec:e1:64:22:f2:87:9a:ad:4d:2c:8e:c6:
00:a9:32:ba:c1:35:71:11:a2:89:9f:3b:73:13:48:
55:c5:f8:5a:3d:ad:c0:21:99:cd:3e:73:90:2d:4c:
ef:4f:b7:f0:75:bc:c4:99:84:05:f8:a7:86:f1:25:
d5:0c:14:a1:4e:00:c0:7e:40:08:03:fa:00:2f:29:
2b:d4:51:a3:9c:27:e0:21:3b:b3:40:72:73:ab:68:
b4:41:fa:dd:6d:b9:7e:ce:71:15:00:a2:f3:4d:ef:
67:2a:74:60:8a:c4:ab:08:02:a3:8e:12:df:0f:79:
fc:55:33:e9:a7:46:9c:65:48:dd:a9:35:72:e9:93:
af:3e:46:f5:7d:03:58:da:c9:d7:71:ab:70:be:59:
c3:2b:0e:4c:05:3d:9f:e4:ca:04:12:49:7d:c6:27:
2d:4e:44:4f:15:54:17:4a:44:d6:42:83:fd:67:3d:
b1:fb:b2:66:d3:42:a2:29:b6:94:ad:d9:56:83:9c:
32:3a:8e:70:ea:23:c5:4b:30:b1:2f:13:de:2e:2e:
7c:23:84:00:67:b2:b5:31:06:ed:12:93:3e:5c:f7:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B0:94:5D:A5:D8:D6:04:3C:24:AE:28:D7:45:83:92:C1:8E:D9:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5E9A16EF44D11EF9B4061A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.186.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:0d:d3:be:1e:03:b1:9c:2b:6c:08:b2:d6:e3:dd:05:a7:fc:
ca:6b:65:da:8d:59:07:c1:f3:7a:06:ca:16:6a:33:6f:d3:34:
64:b2:2c:12:a0:ee:5e:ef:5e:66:90:b5:3e:0e:f9:90:23:cc:
97:7a:04:3a:f1:20:77:76:15:6a:94:00:ad:10:f3:7c:6f:57:
5c:ea:02:80:9d:92:e3:76:ee:39:fe:59:ed:cc:de:69:5c:d0:
c8:7d:9e:cd:c9:14:89:84:6d:f7:0d:17:e1:81:b7:9d:c0:28:
0f:75:15:09:d0:b7:55:c9:02:17:a7:a4:d9:8d:77:e9:21:77:
5c:ab:77:81:56:06:10:d8:f1:f1:e5:25:97:ca:65:cc:f4:ca:
5a:6b:43:8e:48:3f:1f:43:b6:bc:90:82:54:ab:90:af:4e:f1:
58:5c:46:bf:1c:57:36:eb:c3:fb:c0:e8:82:8a:24:db:67:16:
51:7d:3c:8f:21:8e:d0:86:46:85:30:22:4c:ef:bc:26:bd:c2:
d4:a9:4a:e4:ed:b0:f4:a9:0c:2d:af:d9:8e:d0:b3:19:16:81:
fb:55:62:f3:87:2c:85:cb:6d:68:12:89:31:a4:22:1f:6e:d9:
0b:e0:b2:ff:8a:4a:0b:26:47:be:95:6f:53:7f:52:6e:c9:f2:
79:f0:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:35 2025 by rpki-client