Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9306048D58D11EF85491F57762E951A.roa
File: B9306048D58D11EF85491F57762E951A.roa (raw, json)
Hash identifier: 509bpFhdQ39gsmuRHe58hbPyQNtdofyuwCUg1ng/VPQ=
Subject key identifier: 91:C5:82:C9:A2:96:CD:35:B4:78:5B:62:0C:0F:80:62:77:EE:67:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9306048D58D11EF85491F57762E951A.roa
Signing time: Sat 18 Jan 2025 11:16:55 +0000
ROA not before: Sat 18 Jan 2025 11:16:50 +0000
ROA not after: Thu 22 Jan 2026 11:16:50 +0000
asID: 63199
IP address blocks: 156.241.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68515 (0x10ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 18 11:16:50 2025 GMT
Not After : Jan 22 11:16:50 2026 GMT
Subject: CN=678b8da6-8674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4a:2b:b8:fc:ad:46:11:f0:a4:a5:e7:61:11:
85:f2:1e:07:27:4b:69:db:d5:89:8f:8d:e3:f9:71:
e7:6b:07:24:45:1d:c1:35:e3:69:62:0b:0c:f4:51:
7e:6e:27:c1:55:45:8c:70:a5:d8:1e:f2:2b:c1:86:
04:17:64:99:1c:ac:5d:0d:47:86:b5:53:25:bb:ad:
6e:a8:d0:bb:ab:33:9d:dd:94:cf:31:53:19:78:50:
49:c2:2f:2e:18:65:c6:45:ac:a8:70:81:c8:55:ad:
ed:6d:df:70:14:c8:e7:6a:f3:00:2f:9e:a8:1d:ee:
da:be:ae:3d:10:b6:cd:6c:0f:c9:bf:c0:31:86:11:
df:f5:8b:b2:0a:e5:3c:54:6b:e0:be:f8:e3:94:c8:
05:a3:fc:40:80:a2:e2:05:8f:6a:6d:4c:13:bd:d1:
55:e8:d0:26:d3:4c:16:b6:07:16:e9:4b:bb:34:14:
07:b2:1e:0f:2e:b6:dc:4a:55:bf:b1:ca:55:bf:c9:
ba:e2:32:06:33:dc:8c:55:64:14:43:bd:3f:46:7c:
4a:75:71:43:10:20:03:85:06:5a:ae:b9:22:50:ec:
41:f9:61:bf:e0:07:df:91:71:e1:08:68:84:25:10:
31:68:65:af:6e:49:77:b3:20:12:3b:fe:9b:67:14:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C5:82:C9:A2:96:CD:35:B4:78:5B:62:0C:0F:80:62:77:EE:67:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9306048D58D11EF85491F57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.1.0/24
Signature Algorithm: sha256WithRSAEncryption
16:af:52:bd:30:06:e8:e2:bb:8d:0e:65:bc:0b:fb:98:21:46:
36:8b:be:64:9d:4d:40:be:3c:25:07:2a:6a:3b:07:b7:0c:e2:
b4:05:60:ad:c6:72:47:d7:db:c2:a1:8d:4d:3b:c6:66:38:dd:
fa:9a:08:ad:9c:8b:43:ec:be:f4:01:33:1d:4a:b7:ae:be:99:
45:42:0b:ec:8f:14:12:86:bf:5c:a9:78:b7:e7:4d:a2:32:9f:
b2:aa:08:2f:c7:d8:d6:e5:34:32:aa:25:7f:98:31:97:8a:cd:
84:6f:6c:89:62:e7:bd:61:8e:7f:bb:d8:c3:4b:0f:c9:1e:27:
9e:1e:89:c3:03:a3:1f:ac:d5:c6:7e:12:83:c7:5a:29:e0:7a:
d1:79:cc:e8:83:29:87:cf:0d:44:9d:17:5e:5a:b8:b4:8b:a5:
a7:2d:93:87:3d:a8:a7:45:8d:00:3e:6b:c1:21:85:2d:c1:c7:
72:87:f2:0f:1e:bd:d4:5b:d9:63:17:1f:69:f7:2c:72:af:d4:
9c:88:42:2e:08:a9:4b:e1:68:53:8c:60:82:b3:51:fb:05:19:
0c:d7:fc:63:31:ae:16:2c:ea:d6:73:43:30:c1:5d:30:7c:ce:
76:3b:1f:db:ae:fe:63:51:72:f3:4d:c6:fd:01:cf:18:8e:0e:
1d:97:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:05 2025 by rpki-client