Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B68C79EAF8D211EFADC11090762E951A.roa
File: B68C79EAF8D211EFADC11090762E951A.roa (raw, json)
Hash identifier: Wp5p7QoSjNKffqPAEaR24Hp3lHV/QZzlVZiWvedVWVk=
Subject key identifier: 06:1A:55:C3:9D:AC:A9:B6:77:9B:52:13:32:C0:3D:AE:2F:43:F3:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B68C79EAF8D211EFADC11090762E951A.roa
Signing time: Tue 04 Mar 2025 08:28:56 +0000
ROA not before: Tue 04 Mar 2025 08:28:52 +0000
ROA not after: Sun 11 May 2025 08:28:52 +0000
asID: 399989
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82643 (0x142d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 08:28:52 2025 GMT
Not After : May 11 08:28:52 2025 GMT
Subject: CN=67c6b9c8-2054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:e7:5a:b6:b8:48:a7:7e:93:09:af:8a:4f:
33:1a:f1:c4:31:e2:e2:07:8c:ee:1b:66:e2:19:08:
a8:55:d1:25:a8:16:35:31:b1:c1:7e:2b:7a:21:1c:
77:e7:44:0f:f1:4e:c1:95:1b:cb:08:de:7c:f5:4c:
5b:de:34:4b:37:e2:eb:f3:48:a7:05:84:2c:94:31:
ca:12:6e:e3:52:05:84:d2:34:ac:3c:9b:39:87:d0:
3b:e3:ee:94:e4:04:85:2e:43:a5:f2:94:99:61:10:
c5:f7:33:37:3c:02:fd:5b:f5:67:2f:f4:03:91:06:
89:be:35:40:9a:1e:d1:6a:3a:2e:72:2b:61:a5:34:
1b:5c:35:2e:42:de:32:22:96:d4:3b:f8:c4:99:72:
93:e2:90:c0:66:0c:31:53:ff:79:e7:76:98:77:da:
9f:97:73:66:42:10:7c:15:15:97:80:c3:eb:02:c3:
eb:36:86:c2:0c:f6:f1:ec:07:56:13:c0:b3:83:a7:
89:99:67:cc:3d:cd:0c:f7:cf:1a:78:ac:ab:29:40:
d6:2f:63:56:f5:74:22:81:8c:7c:d3:5a:46:02:3e:
57:91:f0:69:6a:9f:56:10:24:7c:e5:cd:11:27:f9:
a3:46:92:9e:ac:1f:37:3b:8a:4b:a5:73:46:77:76:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1A:55:C3:9D:AC:A9:B6:77:9B:52:13:32:C0:3D:AE:2F:43:F3:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B68C79EAF8D211EFADC11090762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:a3:0d:f1:6f:76:b4:c3:9f:d3:01:ef:cb:dc:ab:72:e2:e6:
8c:8f:b7:e5:c5:78:27:90:b9:d1:3e:3c:f0:a2:89:63:24:68:
45:35:5b:07:b3:b1:bf:2e:30:cd:91:31:3f:a1:7f:15:2a:8c:
13:49:c7:be:e0:fe:1f:1f:e0:39:9c:25:80:f8:19:00:b1:b8:
b0:94:82:e9:76:65:bd:e3:d1:87:5d:b0:fe:5a:8f:b8:c6:5f:
df:39:70:c6:fe:e2:1a:2b:a1:7f:f1:50:d1:41:f0:59:8c:79:
7c:eb:c4:63:72:22:f5:c5:94:17:98:21:c5:3d:16:18:9c:60:
3b:6a:6c:16:0b:7f:56:a0:ea:1f:8d:b4:76:48:b0:02:3a:ab:
be:38:33:35:57:82:b9:58:4f:e4:e8:10:4d:65:7b:f4:9b:ed:
83:c9:78:37:ba:d7:59:5a:4c:09:ba:51:bd:71:03:d7:2d:76:
d2:7c:d2:34:72:e6:16:b5:e5:07:90:c2:3b:0b:08:aa:11:14:
eb:bc:40:1d:cb:17:ac:3c:12:8e:dc:7f:92:60:0d:02:cc:3e:
27:5d:b4:59:f8:03:1b:1a:f6:c3:dc:10:a9:c7:e7:30:0a:12:
f3:8e:28:4b:a2:5a:a7:ce:23:34:8c:11:98:0b:4f:d9:2f:97:
45:8e:32:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:16 2025 by rpki-client