Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF6C0A30E54111EF908829AF762E951A.roa
File: AF6C0A30E54111EF908829AF762E951A.roa (raw, json)
Hash identifier: FWdSHEc2bt+oOy6ox3l0g/II8Oy5XIEh30Zgntc5hp0=
Subject key identifier: D8:BD:33:42:8A:FE:9B:B1:8C:C0:06:15:44:62:EB:2D:9B:E2:B2:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF6C0A30E54111EF908829AF762E951A.roa
Signing time: Fri 07 Feb 2025 10:52:55 +0000
ROA not before: Fri 07 Feb 2025 10:52:51 +0000
ROA not after: Mon 13 Dec 2027 10:52:51 +0000
asID: 17561
IP address blocks: 156.230.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72991 (0x11d1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 10:52:51 2025 GMT
Not After : Dec 13 10:52:51 2027 GMT
Subject: CN=67a5e607-f76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:3f:14:8f:cd:fc:48:45:4c:ac:c1:4f:94:
f2:86:81:a1:bb:7e:ef:83:f8:b0:be:ed:0c:8a:d5:
de:29:d5:93:54:a2:a4:0c:2a:52:e3:9e:98:0e:19:
43:43:ab:fe:a4:ca:9b:6d:02:48:be:94:f0:ce:be:
bb:b6:b2:c7:e2:ec:0c:c5:bc:ca:de:d9:e7:58:d6:
d4:40:7f:b5:85:c8:9f:b2:dd:4a:39:f2:26:b6:04:
45:c1:57:7d:60:8c:cd:bb:17:78:c1:7f:b5:8e:dd:
a3:32:be:23:25:c4:80:e2:28:7d:13:18:1b:85:39:
49:2a:b8:16:f3:e4:ca:34:11:87:c7:3f:63:b6:38:
df:1c:e0:c1:5a:cd:28:8f:4b:ec:41:4b:30:db:f0:
2e:8c:77:15:13:93:36:20:75:47:87:58:0b:66:7a:
13:bd:34:a7:4a:34:22:66:31:b4:6e:1a:de:ba:60:
6b:11:39:9e:7c:ec:74:23:69:53:87:b1:6e:98:66:
bc:ec:3c:7a:fd:bd:58:b3:73:ae:2c:f1:18:83:cb:
fe:5e:80:ab:b6:7d:c4:84:f2:31:35:d9:55:db:9e:
9d:4e:44:05:75:48:eb:0a:31:ae:58:40:81:84:07:
b9:a2:b3:81:33:73:4f:d1:a9:a7:35:6b:bb:de:3e:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BD:33:42:8A:FE:9B:B1:8C:C0:06:15:44:62:EB:2D:9B:E2:B2:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF6C0A30E54111EF908829AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.167.0/24
Signature Algorithm: sha256WithRSAEncryption
85:dc:ce:1a:16:47:31:ad:b4:10:c0:82:2f:42:fc:e3:79:ce:
2c:3b:f5:a6:a2:60:92:91:d2:d2:53:7e:80:51:e3:ec:e4:5f:
68:8e:d7:92:c2:6d:3c:7a:3f:d8:58:3d:5b:ef:34:1b:55:13:
06:16:cd:d5:30:a7:cc:42:9c:1e:ea:dc:b2:ba:69:8b:77:77:
ff:cd:0f:e5:18:b6:c0:30:d9:25:8e:b8:a3:d9:69:4f:99:61:
0a:0c:28:90:73:52:46:17:05:5d:ce:5c:72:dd:b3:61:03:a0:
71:82:9d:9c:86:b8:ed:fe:b2:77:72:93:e1:71:7b:aa:03:71:
69:9d:66:d9:be:50:e7:f9:c7:00:c5:6c:e0:b7:8a:07:70:c7:
df:ef:4e:5a:0c:97:0c:9e:99:ed:79:be:8c:ac:bb:67:61:d9:
df:39:91:70:67:db:cb:ae:91:8e:7f:96:ae:a0:25:59:6e:02:
b8:fe:3f:a5:94:3c:38:b7:b4:04:f1:6e:eb:e2:50:b0:77:60:
fd:f2:2d:0f:e6:f4:9f:b7:63:25:3e:03:5a:1c:86:b2:89:7f:
18:51:c3:9a:14:dd:a5:78:df:12:a6:d3:f3:84:65:fd:8b:fe:
01:62:db:51:ef:fb:82:e7:68:f1:dc:e6:39:3e:e2:e7:e5:46:
49:15:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:44 2025 by rpki-client