Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3B5BC30F46E11EF9FC2FA8C762E951A.roa
File: B3B5BC30F46E11EF9FC2FA8C762E951A.roa (raw, json)
Hash identifier: ddf4MSshD6s4YSVsbZv3NC59CgdTp4U5LDus/CFYHAk=
Subject key identifier: F9:3F:7A:72:AE:C3:BA:AC:84:D5:D0:E2:79:04:83:80:FA:E0:C9:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013653
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3B5BC30F46E11EF9FC2FA8C762E951A.roa
Signing time: Wed 26 Feb 2025 18:22:57 +0000
ROA not before: Wed 26 Feb 2025 18:22:53 +0000
ROA not after: Thu 19 Feb 2026 18:22:53 +0000
asID: 984
IP address blocks: 156.245.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79443 (0x13653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:22:53 2025 GMT
Not After : Feb 19 18:22:53 2026 GMT
Subject: CN=67bf5c01-85f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:8a:16:7a:a0:e9:ee:6a:fd:23:e0:e2:dd:
77:42:e1:60:b4:bf:78:c0:17:e9:9b:a2:ee:45:ca:
50:5c:1b:3a:f8:2a:8f:54:f9:48:b1:d2:dd:27:70:
d7:ed:ef:0c:11:58:ac:c0:34:b5:0d:24:9f:a6:f6:
2e:51:c9:a3:ac:7c:1f:8d:d5:1c:be:a0:05:bd:32:
96:2e:48:31:62:20:73:4f:f1:60:11:6d:45:0b:11:
b4:15:67:02:be:4e:f2:d9:d6:2e:90:e3:2d:c0:bb:
b7:4b:3f:d2:8b:84:99:93:28:8f:cf:35:57:78:59:
96:a9:6e:07:e7:c3:33:42:ad:93:ff:1b:ef:69:33:
5d:3d:f3:74:1e:ee:10:0d:f6:60:0e:6f:65:cf:83:
38:fb:ed:17:35:31:17:62:c6:ba:ed:56:0e:5b:b0:
9a:98:c9:47:24:62:c9:89:91:05:3b:e0:f8:16:1f:
f7:85:35:d1:8d:c7:c6:88:28:3c:5f:83:96:8f:7e:
ec:cf:05:c5:77:df:6e:48:f9:ea:74:6f:05:d1:64:
e7:a5:79:c0:f0:40:a7:d1:18:10:b3:33:d5:1a:8b:
d9:18:2b:4c:21:1c:43:6f:f0:22:e4:e5:83:60:62:
12:75:07:c4:0a:8e:a4:ab:64:9b:51:92:21:23:32:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3F:7A:72:AE:C3:BA:AC:84:D5:D0:E2:79:04:83:80:FA:E0:C9:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3B5BC30F46E11EF9FC2FA8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:38:8f:6c:f3:ba:78:52:d3:c3:c5:b4:02:4d:df:4f:92:2b:
38:7e:f1:fc:b1:9a:cf:09:0b:c9:4c:a1:9c:1f:fb:97:b4:06:
e0:56:e3:3e:61:15:98:e2:a1:84:a8:63:a6:f7:0f:01:8f:db:
ed:6b:26:1e:46:c7:1a:da:42:1d:cb:5f:ca:23:44:ed:dd:fd:
4c:10:f7:e1:8f:ed:af:55:df:fc:75:97:98:4f:14:38:cd:65:
2b:ff:9c:03:e2:8b:07:8a:7f:e7:d8:75:17:f3:dd:e8:d6:f8:
c4:ee:7d:de:58:20:26:9d:87:07:d2:3e:02:cb:b6:8f:63:e2:
08:d4:c9:d9:11:85:c2:39:76:05:95:79:c4:45:af:fc:ca:c6:
52:ae:15:49:31:d9:87:b7:bd:ee:18:7d:e1:e7:20:90:ff:f4:
f2:58:b7:09:41:19:d1:2b:68:17:d2:b5:d3:28:01:c3:3d:ea:
12:56:42:b2:69:cf:e9:d1:6d:29:28:d0:36:2b:b9:11:a6:6b:
1e:59:54:7c:0b:cc:2d:5d:41:12:88:db:86:1d:9f:29:3a:91:
f6:44:d1:ab:a4:af:8f:86:61:9a:1a:d5:5b:66:1d:a4:aa:a5:
88:45:df:a1:4d:91:47:2a:72:6f:f0:01:8a:a5:9f:02:41:fb:
c9:fd:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:31 2025 by rpki-client