Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE05220F42E11EF9CB99F4B762E951A.roa
File: BBE05220F42E11EF9CB99F4B762E951A.roa (raw, json)
Hash identifier: gJx1CijWo/8axhEwMuDBMxdrfcdSDG3SfJmYMA/dEhM=
Subject key identifier: 3C:71:E7:EF:68:61:FF:5A:47:E9:19:6B:88:35:C2:92:8E:39:CA:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013158
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE05220F42E11EF9CB99F4B762E951A.roa
Signing time: Wed 26 Feb 2025 10:45:03 +0000
ROA not before: Wed 26 Feb 2025 10:44:59 +0000
ROA not after: Thu 19 Feb 2026 10:44:59 +0000
asID: 984
IP address blocks: 156.230.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78168 (0x13158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:44:59 2025 GMT
Not After : Feb 19 10:44:59 2026 GMT
Subject: CN=67bef0af-ed15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:1f:8b:35:fd:7f:7f:6b:97:fa:94:f4:4e:
18:01:1d:f3:d2:3f:4e:6a:8f:c3:7f:31:2d:16:e9:
72:df:dc:40:48:0f:74:c7:df:d0:34:96:fa:95:fe:
90:54:3b:06:b3:6a:ad:de:a0:6b:ed:de:08:e2:4d:
5c:51:68:6c:de:c8:7c:9a:2d:c0:04:4e:4e:2b:40:
d6:4a:4b:5e:de:da:86:fa:f8:00:3b:ab:46:75:2b:
63:9d:d8:1f:39:d4:dc:d4:bf:82:00:1d:29:9f:97:
95:9b:fa:23:b1:bf:75:7a:24:7b:11:e5:b9:4c:86:
f9:da:50:66:5f:74:a7:0a:f6:65:bb:6a:0a:ff:b4:
da:73:1d:29:b7:47:8e:02:0b:be:bc:a2:5a:58:d9:
3e:7f:7e:fe:c0:e7:79:34:e1:3e:32:85:75:24:6c:
59:82:c6:a6:14:db:9d:59:bb:47:4d:27:2e:36:a7:
86:7a:61:06:db:50:0f:3a:be:da:c2:d0:e5:e0:08:
82:1f:12:29:54:cd:a0:7e:b4:3a:c1:cd:8d:7d:06:
6e:2d:60:bc:93:8b:9a:34:d2:94:31:e4:63:e4:22:
47:9e:90:c9:e0:54:cb:a7:89:86:41:54:c8:7a:92:
b7:0e:ec:a5:86:6b:8b:85:b3:c5:c9:2d:c7:75:f8:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:71:E7:EF:68:61:FF:5A:47:E9:19:6B:88:35:C2:92:8E:39:CA:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE05220F42E11EF9CB99F4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.167.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d7:c3:40:25:51:b3:aa:60:28:48:be:aa:30:7b:1c:e4:80:
43:ee:2d:75:22:34:70:d1:35:98:89:d5:f0:6d:66:e8:aa:2f:
5c:4c:f5:c0:b0:f5:3b:23:cd:44:3b:33:fc:fc:86:9f:e8:40:
92:31:e4:c4:15:29:5a:da:59:8b:8b:a7:03:97:b3:2f:8b:7b:
a2:97:54:e5:d4:0e:95:8d:0e:a0:fa:55:d2:5f:a9:12:76:30:
da:d1:b4:6c:e6:f8:a4:39:8d:da:98:03:6b:a4:af:24:51:4d:
f6:10:77:5b:ee:b7:fe:e4:10:e3:82:0b:b4:59:a1:f8:04:35:
3e:0e:3b:db:ea:b4:68:1a:ab:6f:fd:32:d0:a0:76:28:b6:ab:
56:e0:68:ee:70:0b:b3:57:a8:3e:27:d8:6f:35:f4:22:52:60:
85:92:d6:78:c6:36:d7:8a:67:d7:46:56:9c:55:88:b3:bb:97:
70:73:8b:38:cf:24:8a:a7:cc:2a:a4:86:05:81:e3:a4:2a:7c:
34:83:dc:ae:3e:92:34:70:1d:2f:23:ca:8e:e8:23:78:22:e9:
8f:b6:32:cf:e1:cc:f2:2a:80:cb:28:89:c9:cc:0d:d6:dd:d8:
f5:ab:c6:85:cd:2f:55:f9:01:d8:a4:53:0a:7e:07:84:09:5b:
97:b9:a4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:52 2025 by rpki-client