Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B730B67CF34B11EF8ACB21BB762E951A.roa
File: B730B67CF34B11EF8ACB21BB762E951A.roa (raw, json)
Hash identifier: 35XuFeeUQQXsbzxc5TRfXZMTCdU6cPn9AWItCzxch6Y=
Subject key identifier: 2B:24:6D:58:1D:E9:5E:9D:45:27:53:C8:4B:B0:01:CF:66:A7:D7:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B730B67CF34B11EF8ACB21BB762E951A.roa
Signing time: Tue 25 Feb 2025 07:39:59 +0000
ROA not before: Tue 25 Feb 2025 07:39:56 +0000
ROA not after: Sat 19 Feb 2028 07:39:56 +0000
asID: 17561
IP address blocks: 156.249.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77238 (0x12db6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 07:39:56 2025 GMT
Not After : Feb 19 07:39:56 2028 GMT
Subject: CN=67bd73cf-10da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:c4:dc:c0:70:1a:f1:b9:ec:09:c2:26:4f:
6f:5b:b9:4b:ae:35:b2:d3:75:ef:7f:f3:0c:ab:ce:
60:da:7a:92:e5:70:50:86:06:28:d9:05:c1:88:ca:
88:bb:a3:b5:1b:8a:9b:9d:9a:fd:fb:a8:63:42:35:
fe:ea:a8:43:1c:75:68:64:d1:1d:c6:74:ff:ec:6b:
82:ca:3f:d4:40:50:63:a0:7f:2d:e1:63:aa:a8:6e:
65:c4:6d:43:bc:1e:3d:60:cb:96:d0:cb:44:18:a2:
44:20:a0:77:c6:ef:7f:27:37:99:8e:56:02:0a:7c:
26:7a:6b:41:75:d7:f0:60:68:a3:84:77:c4:f1:16:
27:13:bf:f3:53:37:8c:f7:0c:6a:ed:6e:4b:7b:27:
84:dc:e6:91:6a:86:85:de:fd:78:c6:89:ba:39:50:
f2:49:f4:db:5c:87:50:b5:63:2f:65:21:e3:6c:86:
fd:d5:af:88:a5:48:b6:fe:9b:71:a2:a4:8a:56:c0:
e3:35:01:4c:01:87:6a:7e:ad:d3:34:16:a0:87:00:
8e:99:69:a4:ce:3c:fe:c8:c1:4a:50:ac:c0:85:df:
d7:5d:a2:06:26:ad:a3:a0:da:ab:0d:35:80:3b:a5:
b7:4a:da:f9:6f:e9:73:39:e4:69:aa:75:ac:04:7d:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:24:6D:58:1D:E9:5E:9D:45:27:53:C8:4B:B0:01:CF:66:A7:D7:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B730B67CF34B11EF8ACB21BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.231.0/24
Signature Algorithm: sha256WithRSAEncryption
34:02:7d:36:d7:23:e0:3f:db:13:ff:3e:83:09:a4:97:51:ac:
b7:bc:d6:bc:bf:09:9f:07:e4:8a:17:47:b4:7c:d1:3e:39:86:
35:4b:eb:dd:01:8a:44:cf:47:5c:3f:fb:a3:83:ba:f1:94:29:
83:47:fd:df:3c:a1:b6:f6:27:2e:66:9a:1b:3c:0a:69:f7:e4:
ab:c9:41:42:08:00:b4:bc:96:74:ec:d1:23:f0:2c:d3:3e:cc:
6c:4c:6b:90:11:6b:d1:8a:55:82:e7:6f:81:6b:a6:38:e6:e4:
10:a9:45:74:01:58:20:94:05:56:ef:65:ea:fb:a6:de:9b:79:
2f:47:bd:bc:ef:7a:65:f4:3d:45:cc:03:ae:56:d2:0b:b7:d4:
06:8d:6b:af:54:0d:01:69:90:51:81:ce:a7:c9:ec:19:2e:ec:
98:a1:9d:f3:2b:eb:10:fa:5f:c1:f8:d4:68:59:eb:ed:81:67:
f6:57:d6:09:af:4f:19:51:e3:eb:46:1c:35:ce:2d:f0:7f:86:
9a:40:41:b5:a0:ac:30:ce:d5:c4:46:a6:92:a0:04:b8:7a:db:
81:2b:a1:65:74:ba:f2:15:02:1e:fc:fd:f9:ed:fb:2d:06:c7:
b0:39:db:e9:a5:70:10:4f:db:a6:90:bb:cb:d5:12:77:3f:7e:
c4:51:a5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:06 2025 by rpki-client