Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23111D4FFEA11EFAE6FD56A762E951A.roa
File: B23111D4FFEA11EFAE6FD56A762E951A.roa (raw, json)
Hash identifier: nm400DxCn0as5ZoU4wK8/xZnHtqCn6de5d6AMUzD6+w=
Subject key identifier: 2B:1C:42:49:6D:40:FF:E3:DF:41:80:27:27:B1:26:AE:2B:A5:1A:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23111D4FFEA11EFAE6FD56A762E951A.roa
Signing time: Thu 13 Mar 2025 09:08:15 +0000
ROA not before: Thu 13 Mar 2025 09:08:11 +0000
ROA not after: Thu 12 Jun 2025 09:08:11 +0000
asID: 398478
IP address blocks: 156.236.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83374 (0x145ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 09:08:11 2025 GMT
Not After : Jun 12 09:08:11 2025 GMT
Subject: CN=67d2a07f-e58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:b6:f6:e5:47:95:93:a9:12:9e:98:38:d5:
cd:6d:c3:32:d2:f0:ad:80:64:98:1f:ee:79:9d:9b:
78:1f:d4:6d:7c:0a:36:ea:47:7b:e2:e2:8e:5c:11:
b4:ed:7f:0a:f7:0f:23:11:1c:f8:3e:a6:90:7d:6e:
42:63:7f:56:21:3d:5e:0e:71:fb:2e:3e:32:ab:b5:
20:72:bc:79:64:be:6a:5f:ae:ac:11:77:8a:2f:68:
ad:50:98:f7:d9:41:a5:ef:c0:ac:68:15:83:b9:19:
fb:da:54:5e:01:a1:a0:09:b9:4b:2f:a5:33:1f:e3:
c8:b2:cb:65:62:ec:7c:3c:db:b3:34:04:87:55:46:
9e:e0:9c:40:a8:dc:d1:86:bd:c1:a2:49:29:0b:1e:
b7:5d:2c:aa:e0:27:83:70:95:3e:a2:c7:35:5a:17:
f6:bb:fe:93:1d:67:5c:15:70:03:e2:7a:e9:d6:20:
c6:e0:e3:8d:16:5e:27:24:b7:41:b7:ad:d3:e8:d1:
20:14:a7:f8:c3:12:7e:94:9a:25:1a:43:1a:a6:c6:
f7:be:14:7f:b5:5e:91:cb:8c:74:65:7b:c9:07:5c:
61:61:10:73:ee:e4:03:b2:66:9a:f4:0b:b3:e9:85:
46:e8:92:87:75:7c:f3:71:fe:12:1c:83:0d:48:3c:
c7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1C:42:49:6D:40:FF:E3:DF:41:80:27:27:B1:26:AE:2B:A5:1A:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23111D4FFEA11EFAE6FD56A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
09:6d:4d:4a:73:ef:26:63:61:e3:b2:47:d6:45:eb:a8:50:9c:
6b:5a:b6:72:f1:17:27:35:86:85:d7:a4:ca:4b:42:9c:76:6a:
5e:e3:89:15:d7:9d:5a:6c:fa:ca:5a:1b:96:7f:89:ce:82:93:
dc:d6:31:4b:60:12:53:0f:2d:8e:9d:6c:75:96:0e:ad:9e:b7:
64:e0:a8:98:e8:39:de:49:31:52:7d:d2:97:66:90:2f:42:50:
b7:87:49:75:7b:3d:f0:1c:9a:77:b2:9a:39:38:a2:06:60:a0:
a8:9c:39:9b:01:2d:8b:8d:e6:49:c9:c7:b4:27:0b:6e:5c:d2:
e4:90:b9:0a:46:c6:25:fe:80:01:c2:35:4e:44:12:03:da:23:
37:92:c6:c2:68:63:7a:8b:bc:bb:da:ea:48:07:cd:15:e6:49:
9a:8e:f3:93:66:12:d7:e9:05:2c:07:84:5e:28:77:80:b6:1a:
c1:25:d0:bb:b7:f1:f7:74:27:88:64:a5:da:8f:9c:a9:a1:04:
64:ba:0c:00:54:b9:ff:3e:c4:44:a5:59:1e:59:44:34:54:7b:
ba:9d:e2:9d:3e:8d:c5:f4:15:18:91:1c:ee:4e:b3:a3:b7:23:
2a:49:67:0c:5d:29:9e:3a:65:ba:39:7b:3b:f8:d7:dd:ea:5b:
ee:83:6c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:30 2025 by rpki-client