Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4140B88F46D11EF91FD4184762E951A.roa
File: B4140B88F46D11EF91FD4184762E951A.roa (raw, json)
Hash identifier: fKez4IwhJz+V1P0XhPQLH0a01JAxN9nr6ldmGxBkHcc=
Subject key identifier: 8A:BC:EF:87:E6:40:06:75:5C:07:A4:F3:C0:D0:A2:E6:24:CE:26:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01363A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4140B88F46D11EF91FD4184762E951A.roa
Signing time: Wed 26 Feb 2025 18:15:48 +0000
ROA not before: Wed 26 Feb 2025 18:15:44 +0000
ROA not after: Sat 19 Feb 2028 18:15:44 +0000
asID: 17561
IP address blocks: 156.233.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79418 (0x1363a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:15:44 2025 GMT
Not After : Feb 19 18:15:44 2028 GMT
Subject: CN=67bf5a54-d635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:31:b9:2f:cc:f7:0b:18:a0:b4:7a:ea:b2:
5e:27:60:60:8a:38:0b:25:d5:95:d9:9d:93:73:53:
1b:f9:cf:1c:53:60:8e:b8:6e:d8:f9:cb:1b:3e:16:
0b:79:6f:2f:48:c3:81:3a:f3:92:f1:d1:a0:60:3b:
ad:40:33:f4:4b:a3:91:45:b1:99:75:f3:56:38:be:
ea:3b:1d:20:b5:3e:63:b5:e2:a4:6a:e2:7e:fd:ea:
10:3d:85:1a:26:54:de:b2:fd:b3:0b:a9:dc:dd:86:
9b:32:40:49:8c:9e:fc:e4:a3:d4:72:41:49:7a:30:
5c:3e:f8:c3:8f:99:1d:14:61:dc:00:25:e0:91:c8:
06:5d:16:fb:79:4f:52:b5:f6:e8:7e:25:46:6b:ca:
ef:df:bd:a4:df:66:5a:1f:03:87:40:8a:4a:b2:09:
ec:ea:43:7a:93:71:f8:56:6c:51:e1:d2:d0:b3:e2:
dc:86:b0:55:e9:3a:10:ab:e3:e8:04:20:ef:81:22:
6f:8c:d7:fd:69:f9:14:ef:56:69:61:72:06:03:f0:
39:8a:c1:9f:dd:f6:c6:da:51:fe:06:42:22:80:d9:
05:f0:0a:a7:68:b7:91:d6:c0:6f:36:8d:66:28:04:
58:e8:eb:17:55:ec:46:eb:b8:ed:d9:c7:3f:56:25:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BC:EF:87:E6:40:06:75:5C:07:A4:F3:C0:D0:A2:E6:24:CE:26:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4140B88F46D11EF91FD4184762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:57:5b:89:c1:bd:96:84:52:45:76:11:9e:06:dc:9c:58:cf:
17:35:95:80:68:b2:6e:69:93:54:89:2e:e9:d4:41:34:46:53:
47:05:f4:0c:d5:6e:9a:56:d5:a5:8c:70:d0:09:14:bb:40:d9:
53:a7:14:bf:62:b3:52:92:d4:49:d2:7c:2a:01:35:5a:a5:a4:
35:e2:ad:dc:52:22:00:fc:d7:66:6d:9d:96:48:d4:20:92:31:
6a:ad:72:b2:fe:89:e5:e0:30:6e:dd:b1:40:0a:b8:a8:5e:93:
c8:8c:6b:90:e3:60:a4:8f:c9:90:13:db:04:68:82:33:a7:12:
ba:12:12:54:d2:5a:ca:26:fd:56:ba:f2:81:2e:b5:d0:fb:46:
56:60:ce:89:3e:7c:f5:98:76:c3:ae:65:f2:79:44:e9:a1:6d:
7e:fb:db:c3:d3:db:4e:b6:04:95:57:fa:82:20:46:46:29:be:
db:33:f7:47:7a:56:e2:45:08:0d:4d:5f:94:17:3d:5d:73:b2:
e5:03:22:05:f3:be:ef:10:39:76:b2:5d:18:a5:2f:6c:74:3c:
3f:71:e2:9f:de:be:e9:fb:34:9b:73:03:96:bd:2f:a1:02:54:
26:1e:cb:b2:fa:8f:79:24:3d:57:6d:ec:a0:62:ca:21:34:21:
40:5e:e5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:30 2025 by rpki-client