Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5344970F5D911EFBD667152762E951A.roa
File: B5344970F5D911EFBD667152762E951A.roa (raw, json)
Hash identifier: CZuPy1tPdDGm37szmLOyGunDkAJP9DEuzKoFs9OIuSE=
Subject key identifier: 70:D8:69:B6:31:5A:21:B1:9D:0B:71:5E:CF:F6:37:16:BF:59:A9:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DF8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5344970F5D911EFBD667152762E951A.roa
Signing time: Fri 28 Feb 2025 13:41:27 +0000
ROA not before: Fri 28 Feb 2025 13:41:23 +0000
ROA not after: Sun 13 Apr 2025 13:41:23 +0000
asID: 138915
IP address blocks: 156.244.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81400 (0x13df8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:41:23 2025 GMT
Not After : Apr 13 13:41:23 2025 GMT
Subject: CN=67c1bd07-acba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:0e:a4:d8:30:a9:95:2e:4f:b4:f5:f0:88:
c7:5b:2c:fb:a4:fe:bb:cc:e4:6a:b2:a6:ed:fc:f3:
c2:77:9d:1d:d1:0b:84:f8:2a:32:fc:35:6d:fa:8a:
be:95:62:8f:1e:c7:67:be:ed:51:19:3d:e1:07:12:
c0:81:1f:2c:d7:a4:2b:9b:74:0b:2e:d9:06:46:4f:
86:e4:20:26:7d:04:b5:4f:e3:3e:8f:ee:1c:5a:06:
28:40:a6:04:96:1b:4c:bd:f7:5a:64:fe:b4:49:db:
ba:aa:c7:8f:2e:4e:f6:f2:32:f0:cd:cd:c9:f8:e6:
41:a6:f7:72:12:72:bd:12:f3:d6:6d:98:99:26:ca:
b9:1b:57:a9:d7:fc:89:df:e1:a7:1c:59:12:78:fb:
66:e1:97:dc:72:a1:11:61:29:33:07:56:9f:f3:88:
92:87:cc:49:55:a2:61:ad:70:23:17:4c:0a:3a:bc:
8f:ef:e6:d6:f8:37:77:43:ea:2b:27:80:50:8b:ec:
65:e6:ed:58:1a:b3:5d:bb:4b:14:73:6b:dc:05:fb:
1d:fe:6e:0e:ab:0d:23:b7:b5:34:6f:b5:27:45:40:
52:34:26:3e:a3:2d:b5:ad:57:47:eb:26:a5:d0:4f:
8e:01:ca:87:1d:13:ed:35:d5:d6:c4:3d:41:76:3f:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D8:69:B6:31:5A:21:B1:9D:0B:71:5E:CF:F6:37:16:BF:59:A9:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5344970F5D911EFBD667152762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.45.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:fe:ff:18:ef:1f:0b:b0:81:4f:08:87:da:a7:9e:ea:0a:b8:
0a:01:1a:e1:d4:09:45:f7:9e:18:08:88:5f:41:d7:b4:e9:b5:
41:75:32:bc:30:01:23:cb:33:27:70:ab:e3:d3:b2:2e:da:ac:
6a:b6:00:64:70:8c:ab:7f:a8:c0:20:63:0b:44:35:c6:c7:35:
43:48:17:aa:91:5c:6d:b4:b4:41:b5:6f:d5:d5:20:99:5f:cb:
29:4f:ca:ab:d8:84:1f:5d:ca:1b:f6:24:ca:fe:3d:8f:0c:31:
5a:b3:5e:98:d3:13:cd:ed:20:8e:37:f7:30:4e:32:5f:7c:3e:
bb:6e:94:ac:11:d2:30:32:ab:0a:78:d2:c1:4c:50:80:7e:05:
2c:83:92:e9:2e:cb:b8:44:f0:42:66:62:d9:08:61:b6:25:b7:
64:89:0e:ab:20:60:d1:16:e0:fc:2c:fb:62:44:01:76:1e:34:
da:f3:8b:a3:dc:88:d3:69:d6:3e:0b:aa:af:bc:0f:c4:16:36:
e7:23:24:db:67:5b:1f:f2:a0:cc:0c:3d:6d:8b:97:5b:d2:27:
6c:0b:6a:08:14:bc:66:97:fc:e1:51:24:72:35:0c:5b:0b:60:
bc:99:5d:d1:75:eb:f8:35:89:44:40:6f:a7:01:c5:3a:8e:e1:
a5:ea:7b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:29:17 2025 by rpki-client