Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF04A366EABF11EF89413870762E951A.roa
File: BF04A366EABF11EF89413870762E951A.roa (raw, json)
Hash identifier: jkD7RinorD8HpiK/vVJ2vF6euikYuH7eGfyoeKK+8yk=
Subject key identifier: 8A:FD:C0:7B:D8:E5:0C:45:6D:D9:C9:C1:06:BC:9D:B9:00:36:19:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012279
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF04A366EABF11EF89413870762E951A.roa
Signing time: Fri 14 Feb 2025 10:37:54 +0000
ROA not before: Fri 14 Feb 2025 10:37:50 +0000
ROA not after: Mon 12 May 2025 10:37:50 +0000
asID: 135097
IP address blocks: 156.224.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74361 (0x12279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 14 10:37:50 2025 GMT
Not After : May 12 10:37:50 2025 GMT
Subject: CN=67af1d01-14f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:b8:61:7d:8e:0a:95:8b:aa:09:54:32:8c:
64:ae:ce:59:bd:f9:97:43:2b:1f:2f:22:1e:40:b4:
60:f2:a7:47:80:31:c3:76:ad:2d:78:89:f8:93:bc:
5a:4d:71:2d:30:cb:90:b3:7b:85:85:3f:93:16:04:
78:0c:ec:3f:47:82:47:b0:8a:b3:2b:cb:ec:80:c6:
82:89:fd:5d:d4:fa:d1:e5:a8:b0:32:20:e3:5a:2c:
3a:df:b8:47:ac:d0:40:11:fb:43:3c:d0:63:8d:2c:
2e:81:1e:f2:4d:b6:18:00:19:35:f7:84:f3:1a:3a:
cf:c8:49:e8:96:5b:4b:c2:07:09:de:7e:72:4f:da:
73:70:10:78:fe:f9:27:c3:26:0a:58:f3:2c:1a:5a:
95:94:27:40:6c:8b:c4:05:c8:7e:29:23:9f:27:22:
1e:63:4a:ea:4a:cb:66:e9:d4:17:58:2c:4d:f7:e7:
ae:ef:a5:5d:0e:8c:9a:7f:09:70:45:8e:2f:d8:06:
c4:db:4c:de:78:72:d1:f1:15:fb:9f:df:cb:8a:fa:
7e:34:60:07:bb:fb:b8:5e:55:45:4c:87:c3:ac:5b:
b3:71:11:71:0c:d3:20:78:69:d3:88:b5:08:5a:6f:
db:c5:97:c8:3f:82:c5:06:0f:1b:4d:0d:c1:88:39:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FD:C0:7B:D8:E5:0C:45:6D:D9:C9:C1:06:BC:9D:B9:00:36:19:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF04A366EABF11EF89413870762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.128.0/18
Signature Algorithm: sha256WithRSAEncryption
8e:33:b7:5d:d3:2e:82:50:36:d1:33:9b:0e:79:5d:4c:25:44:
ae:05:52:ce:cf:44:a7:4a:89:8a:4e:12:01:f1:ac:8c:af:f2:
4b:1c:e8:96:5a:eb:6b:64:43:20:76:12:e8:2b:e7:33:5b:14:
07:b7:a1:23:bd:34:6a:0f:fe:09:b1:06:4a:e6:b8:f5:70:44:
9d:03:a4:7f:c6:cd:75:f3:cd:1f:6a:56:0c:50:6f:46:e7:c2:
11:65:be:45:01:f6:0b:6e:04:1f:55:77:a6:d7:1a:7c:ff:8d:
b7:d7:35:a0:1a:11:04:4e:0e:af:28:d8:f5:8d:a0:38:99:18:
04:b9:54:41:93:98:be:51:9c:66:08:4a:e7:f3:76:31:f2:54:
9c:e4:2a:46:e7:f0:20:d1:70:1c:1f:5c:e2:00:53:19:92:26:
75:61:3e:bb:bc:a4:42:c7:3a:4f:38:d9:36:20:87:3d:11:d0:
20:a0:07:91:30:d9:d9:96:aa:db:68:64:0c:91:db:bb:27:94:
25:26:5d:8b:08:a9:4b:5a:74:1b:1a:99:d6:8f:b2:65:a9:f7:
92:43:f6:58:ee:40:9a:a3:4a:aa:a5:35:67:3d:65:5f:1f:ed:
19:18:a5:2d:5d:fb:63:1e:ba:77:54:b1:1d:98:20:d4:8d:7d:
e5:b4:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:42 2025 by rpki-client