Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA893B20FB2E11EFB2735082762E951A.roa
File: AA893B20FB2E11EFB2735082762E951A.roa (raw, json)
Hash identifier: SxMUlD562Lw8kFfZUorYWYUKjvqaGYodqKxYnhVOuQg=
Subject key identifier: 4A:73:12:8A:F1:AA:9F:84:12:C9:44:78:C8:2F:83:52:CC:D5:7F:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA893B20FB2E11EFB2735082762E951A.roa
Signing time: Fri 07 Mar 2025 08:32:12 +0000
ROA not before: Fri 07 Mar 2025 08:32:08 +0000
ROA not after: Thu 29 Jan 2026 08:32:08 +0000
asID: 139811
IP address blocks: 156.240.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82914 (0x143e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 08:32:08 2025 GMT
Not After : Jan 29 08:32:08 2026 GMT
Subject: CN=67caaf0c-1867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:b6:ea:a5:e7:88:be:62:00:90:55:85:e8:
35:fd:64:a0:58:6d:52:85:60:9c:f5:df:1a:c4:41:
b6:04:91:52:46:e6:c2:1b:d0:9e:cd:a6:54:0c:37:
a6:f8:60:ab:52:e0:58:4d:5d:51:93:37:b6:d1:ad:
02:72:8a:77:18:a8:68:f7:10:ea:7d:b0:de:4d:1c:
c4:1d:db:72:ff:b6:1c:9c:74:d4:ea:2e:a6:e8:75:
1d:6b:58:99:ac:a3:85:96:8f:e0:e3:08:79:0a:6e:
9b:6c:31:27:30:59:b5:f1:a7:0b:59:84:a6:02:e3:
7b:a2:d7:bb:ca:b9:3c:0d:6f:bf:fe:71:81:98:4e:
6c:6a:d9:c7:f1:fa:40:20:ac:be:3f:d4:0c:5f:30:
9a:54:01:15:77:05:36:a2:95:44:5a:57:b3:95:28:
e6:49:34:6f:e8:99:0c:32:c7:8f:9e:a5:73:66:ec:
a0:5e:c3:4f:73:00:27:b5:45:6f:ed:f8:38:e9:a3:
7d:0b:db:44:3f:e1:62:2b:9e:c0:be:d2:79:92:1a:
c8:56:94:2c:3b:5b:da:4b:0c:60:b8:46:7e:db:83:
d8:18:aa:1e:6c:e5:27:04:98:12:0e:e4:2a:af:9d:
6c:9c:16:28:da:f1:b0:62:a6:66:da:8c:68:6b:e5:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:12:8A:F1:AA:9F:84:12:C9:44:78:C8:2F:83:52:CC:D5:7F:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA893B20FB2E11EFB2735082762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:77:bb:a7:df:87:14:de:5c:85:b3:db:51:92:67:81:c9:44:
e6:a2:de:6c:50:48:41:92:a0:60:ca:99:3c:09:a2:bd:1f:52:
55:d5:13:7e:da:9a:e3:35:d7:7f:c1:12:7f:77:3b:0c:b2:1e:
ea:c8:de:a5:fa:50:c7:4a:b1:bc:71:a6:c7:0f:58:25:2f:cd:
19:3c:80:60:ce:28:f6:aa:9c:83:71:fd:bc:8a:1a:45:e6:1b:
60:fe:0a:f6:b1:61:10:63:c3:75:1a:db:15:f1:07:86:0f:32:
8d:39:8c:87:28:29:20:c7:91:8f:ef:76:db:8f:bc:0f:6b:2a:
73:ca:24:96:5c:ed:b6:a6:88:0d:56:c5:eb:c8:fd:3e:fd:55:
67:6e:6f:c6:1c:83:c3:fc:ab:9a:3a:46:1c:43:68:25:53:2d:
08:1a:4d:a6:7f:27:68:5f:d1:50:4a:35:51:1b:51:d9:9b:3a:
b8:de:ee:84:b4:a9:78:b6:bc:f8:9b:fa:ba:cd:99:dd:65:44:
53:0e:bc:fc:21:2a:93:ca:d9:36:bb:cf:c6:83:64:b6:af:41:
dc:be:3c:fa:52:48:be:d2:b1:c0:23:05:0a:a1:c1:e4:ff:c4:
5b:42:4b:22:9a:ff:ad:3f:62:aa:c2:ca:f4:fc:9e:78:fa:a0:
9d:ce:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:07 2025 by rpki-client