Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA63088CF43011EFB05D105A762E951A.roa
File: BA63088CF43011EFB05D105A762E951A.roa (raw, json)
Hash identifier: aOMjGOGrE8Mxqrw/T5m/5K7UsEsraKCIZDojM6IUioo=
Subject key identifier: 65:25:B1:7B:9A:EC:2C:CA:80:87:FC:40:20:B7:CE:5D:DB:D3:D3:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013186
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA63088CF43011EFB05D105A762E951A.roa
Signing time: Wed 26 Feb 2025 10:59:19 +0000
ROA not before: Wed 26 Feb 2025 10:59:16 +0000
ROA not after: Thu 19 Feb 2026 10:59:16 +0000
asID: 984
IP address blocks: 156.230.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78214 (0x13186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:59:16 2025 GMT
Not After : Feb 19 10:59:16 2026 GMT
Subject: CN=67bef407-9274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:bd:2c:d9:28:46:fb:ac:ef:2e:f4:ab:a4:
a9:3c:f9:c7:b3:6d:06:62:9a:b6:6d:c2:7a:c1:a5:
28:08:47:1b:de:b8:3a:93:c3:d8:d1:01:52:bf:0a:
c6:80:29:32:9a:38:3d:27:49:cb:b9:c1:52:b2:c3:
ee:0e:3d:58:d1:c4:6f:96:d5:12:59:0a:32:db:53:
e6:2e:63:e3:14:d7:6d:16:30:cb:d9:61:60:03:c1:
56:ab:a7:1a:77:67:95:71:0d:01:27:3f:98:f3:22:
24:a1:65:aa:64:3b:bf:7e:d6:28:57:f8:64:1f:63:
8c:6e:f9:4e:7d:df:86:94:30:60:fc:a2:f4:ef:3b:
97:96:7c:59:09:90:aa:f8:1a:08:b0:ed:1a:f6:62:
44:91:51:6f:42:2b:12:28:5d:d2:5b:e0:bb:db:6b:
87:9c:00:d7:27:08:60:79:f0:8d:0e:b7:47:75:d8:
8d:78:f3:d9:38:3d:06:79:90:4a:69:71:19:ae:7f:
e4:4e:43:b8:7c:4a:43:4d:3f:cd:a8:71:ed:3a:65:
83:b2:5c:d2:aa:b1:82:eb:cd:e1:d4:24:38:99:50:
ac:73:46:b1:68:10:be:5d:22:a1:a9:8a:96:6a:25:
f7:c8:0a:0f:98:77:54:63:1c:e4:db:b0:45:94:a5:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:B1:7B:9A:EC:2C:CA:80:87:FC:40:20:B7:CE:5D:DB:D3:D3:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA63088CF43011EFB05D105A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.182.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a6:d0:ae:56:67:d7:00:ef:b5:3c:b9:74:ea:00:d9:65:78:
6f:0c:45:3f:13:fc:df:aa:51:79:5a:f2:c2:8b:2c:da:76:b8:
92:0f:b5:98:4a:7c:ab:24:a2:bb:c4:2a:29:14:68:18:18:6a:
99:d0:a4:a1:e4:67:10:d6:79:ed:d6:5e:05:fe:19:27:f8:57:
75:52:f3:d1:a4:a1:f4:67:9e:cc:e3:0c:c7:d6:10:74:dc:4f:
76:d2:d0:38:b9:6a:e9:82:a0:e7:8c:52:a8:16:c2:8f:8c:73:
4d:8a:8e:cc:cd:b4:d2:60:b9:39:4e:11:ef:ad:66:68:e3:9a:
b5:1b:1e:01:4c:cb:de:a2:44:87:72:0d:b0:09:3b:db:0d:9a:
b6:60:fb:51:1b:2a:64:6e:3b:a4:63:b2:30:3f:7a:47:b0:eb:
78:ac:5f:1a:78:b8:94:2d:9b:ee:17:92:63:17:08:7c:a2:d6:
1c:ae:d7:3d:7f:6d:07:bc:8a:1e:fd:74:5d:fb:4a:a1:95:4e:
da:21:63:ef:4a:4a:49:32:10:77:ee:56:c6:c4:8e:94:03:d5:
95:b2:5c:da:2a:6c:d7:54:7a:47:cd:c7:b6:7c:61:05:9f:45:
03:b5:40:f9:26:3e:5d:8d:d1:bd:54:12:38:f2:99:36:61:98:
a2:31:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:28 2025 by rpki-client