Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB53BBE6E54611EFAC41C74F762E951A.roa
File: AB53BBE6E54611EFAC41C74F762E951A.roa (raw, json)
Hash identifier: 6OZiMv7pU3UjvNG+MkQ+kT9d4aYexJhxieIaH/ZIXkw=
Subject key identifier: 68:09:24:D2:2B:53:6B:2C:28:19:77:79:0D:69:24:B0:EE:01:19:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB53BBE6E54611EFAC41C74F762E951A.roa
Signing time: Fri 07 Feb 2025 11:28:36 +0000
ROA not before: Fri 07 Feb 2025 11:28:31 +0000
ROA not after: Mon 13 Dec 2027 11:28:31 +0000
asID: 17561
IP address blocks: 156.230.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73021 (0x11d3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 11:28:31 2025 GMT
Not After : Dec 13 11:28:31 2027 GMT
Subject: CN=67a5ee64-29b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:20:4c:44:b3:dc:ad:58:17:02:81:01:7c:
cf:ee:a8:53:3f:97:f9:2d:bc:6c:06:1c:0a:3c:a6:
93:a9:b2:e6:a0:8e:56:57:57:24:f3:b8:15:f2:38:
1c:b1:6b:5a:5f:32:74:45:6b:48:15:b3:11:b4:97:
94:46:0d:00:34:ff:50:02:50:12:ea:fe:e7:56:0a:
05:ba:eb:71:52:59:72:36:bc:d2:cc:a2:ee:83:52:
71:26:47:12:c0:eb:ea:2d:a6:9a:c1:8f:9e:86:68:
6b:39:bd:bf:0a:c8:62:1c:7a:df:2c:ff:ef:a1:5f:
3b:a4:5e:9c:af:41:75:ea:a4:5b:0c:e9:27:74:e2:
4d:23:43:93:19:58:d7:51:48:a4:47:ae:59:9a:63:
7e:87:e1:6d:40:46:23:fb:a5:ed:1e:a8:92:6f:b1:
37:90:ca:e9:84:3b:3a:71:d5:37:fa:70:73:ef:8e:
71:f7:5d:f9:78:e5:08:fb:e0:c0:f8:ec:6d:d3:c1:
58:b4:47:dd:3a:60:08:9a:b5:f0:49:c5:fb:77:77:
91:1e:8d:88:1f:34:19:45:83:6f:8b:32:be:8d:ca:
a6:7a:10:ae:08:c0:b8:cd:b0:d3:5b:97:2f:bd:1f:
c8:a0:ec:be:12:1b:1d:1b:e9:c3:45:e3:5e:c9:18:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:09:24:D2:2B:53:6B:2C:28:19:77:79:0D:69:24:B0:EE:01:19:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB53BBE6E54611EFAC41C74F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.182.0/24
Signature Algorithm: sha256WithRSAEncryption
04:35:4d:09:8a:40:5a:f4:5e:a5:1c:d5:3d:f8:ed:2a:79:b0:
77:aa:09:3c:df:5e:ad:3d:18:9d:2a:6e:6a:87:ea:61:3b:e3:
f8:ea:57:97:e9:53:da:0c:f9:72:8a:5f:d9:30:1f:ac:a6:29:
07:f4:30:ba:85:5d:28:e7:98:e8:1a:b8:f6:df:df:0d:5d:b7:
25:a1:25:3c:c7:26:50:48:41:cd:66:6f:c3:c9:71:81:16:1b:
d1:e1:a5:3b:ba:9d:6c:40:63:02:c7:b7:03:0b:c4:cb:28:fe:
5a:cb:3c:f9:15:7d:33:d6:b2:10:ba:85:88:07:b3:87:3f:a4:
51:07:82:05:98:a0:e2:16:58:35:36:a7:c3:ff:16:7a:ff:10:
d5:44:8a:b9:9e:b0:51:7e:13:a9:b4:62:9f:a3:00:7b:e2:04:
70:ab:7c:b3:cc:5e:d6:2b:14:f8:40:47:b3:da:d3:06:42:d2:
73:89:39:d8:56:26:c1:19:51:e4:b0:72:ee:f6:61:85:ea:c4:
9d:be:50:93:38:a0:15:6f:7c:f3:e6:72:78:37:d3:3c:96:2b:
1b:bf:6d:6d:35:83:60:a8:22:40:55:47:00:98:8b:d8:df:4c:
5f:48:b4:4f:aa:7d:c8:fa:37:ac:79:a2:ad:65:8f:f4:b2:25:
d7:4d:07:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:02 2025 by rpki-client