Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA225124F60D11EF85CF69AF762E951A.roa
File: AA225124F60D11EF85CF69AF762E951A.roa (raw, json)
Hash identifier: hnz5Q5xUZbMG0UhcMPbT2BJHirvAiddJCiMEogRSRxU=
Subject key identifier: C0:F9:29:69:53:C9:32:CD:36:6B:B0:C8:85:AC:08:75:51:DA:90:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA225124F60D11EF85CF69AF762E951A.roa
Signing time: Fri 28 Feb 2025 19:53:24 +0000
ROA not before: Fri 28 Feb 2025 19:53:18 +0000
ROA not after: Sun 13 Apr 2025 19:53:18 +0000
asID: 138915
IP address blocks: 156.244.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81683 (0x13f13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 19:53:18 2025 GMT
Not After : Apr 13 19:53:18 2025 GMT
Subject: CN=67c21433-b48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:f2:94:30:39:6b:a0:14:60:e4:a9:cf:ee:
98:17:1d:92:fe:f1:18:ac:ec:b8:99:8a:b0:1b:70:
f8:ff:0b:cb:75:cb:28:28:b6:c1:4d:b9:49:70:f4:
d0:87:ce:f6:74:a5:69:76:10:33:8e:c7:d9:c1:21:
c7:89:4f:b3:b5:7e:8b:dc:c8:91:4b:27:de:7c:96:
ed:08:b0:d4:b4:53:cf:c8:cf:fe:7d:5d:f4:ea:3e:
bd:b7:fa:0a:14:f8:9c:a8:c3:4f:84:cf:c4:d9:b9:
66:d8:96:63:4b:58:a6:68:8a:bc:fb:d2:c7:e3:51:
b8:f4:3d:b5:52:18:10:d2:1c:a4:ce:55:7f:c3:b2:
ea:1c:f2:c3:ce:81:47:48:60:21:dd:0b:7d:a2:3b:
2f:5f:d1:6b:bf:9c:c7:66:08:74:8c:8b:67:b6:91:
26:84:54:8d:c9:55:e8:dc:09:ea:5d:9b:62:8a:19:
8e:55:ba:58:51:81:46:d7:5a:98:10:29:e6:33:33:
06:27:89:01:dc:62:de:a8:b4:6f:85:1f:04:aa:07:
87:41:00:91:0e:d2:f4:19:ff:a6:1d:2e:d0:b8:71:
44:cc:80:fe:5f:ff:2b:12:a2:50:c7:d6:c3:6b:e1:
9d:bc:59:51:94:69:c3:a0:ba:03:8c:09:24:37:c2:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F9:29:69:53:C9:32:CD:36:6B:B0:C8:85:AC:08:75:51:DA:90:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA225124F60D11EF85CF69AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:bd:51:35:52:03:14:38:9c:ef:b4:11:33:c6:cd:4f:fe:b0:
5c:a2:d1:a5:67:57:4b:55:ef:26:32:6b:bc:8e:d2:48:45:58:
f8:70:56:57:1c:18:69:23:a2:6e:d3:07:e1:05:e8:4f:83:4c:
e3:38:de:af:48:4c:0c:57:8d:6a:00:53:db:80:d5:85:bc:f0:
f7:2f:1b:55:9b:49:a9:92:76:70:26:d7:46:f9:f4:c4:6a:81:
f3:cb:ff:a1:bb:79:6f:67:e4:36:90:97:1d:5f:cb:39:f9:bb:
07:f3:44:5a:6e:14:b9:0a:b6:75:1c:87:a2:67:50:78:a2:20:
cb:99:7c:1d:66:b7:74:2b:dd:b2:5d:bc:c6:94:43:9e:d8:7e:
22:fd:50:80:78:51:82:0f:27:11:21:39:89:20:ec:37:28:22:
4e:45:f3:b0:f4:a9:43:e8:52:c6:13:a8:ab:1a:67:79:36:03:
a1:01:70:f0:a4:ac:46:ab:a3:eb:19:56:62:e0:f3:9d:bb:f1:
bd:15:7e:74:b0:52:ac:68:f3:6d:98:f4:d9:81:d0:4e:f3:72:
69:dd:1b:a7:4a:7c:cc:dc:01:88:3f:18:2d:ed:29:4e:e6:57:
65:01:1e:d6:a3:78:84:17:6f:dc:08:0a:5a:5e:69:4c:37:9f:
74:59:9f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:17 2025 by rpki-client