Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07CA82603DB11F0963391BB762E951A.roa
File: C07CA82603DB11F0963391BB762E951A.roa (raw, json)
Hash identifier: gmb4PivkXPNOMd8WX+b6B5MGcszKFThruMT+oY4VbU8=
Subject key identifier: F1:65:E5:D3:8A:5B:BC:C7:A3:C9:5F:24:38:F1:94:99:CD:CF:23:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014687
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07CA82603DB11F0963391BB762E951A.roa
Signing time: Tue 18 Mar 2025 09:31:21 +0000
ROA not before: Tue 18 Mar 2025 09:31:17 +0000
ROA not after: Mon 21 Apr 2025 09:31:17 +0000
asID: 142382
IP address blocks: 156.230.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83591 (0x14687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 09:31:17 2025 GMT
Not After : Apr 21 09:31:17 2025 GMT
Subject: CN=67d93d69-07bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8b:86:21:be:31:5e:fd:f7:a8:34:39:8d:54:
f0:d9:4b:e2:11:56:f6:41:2a:04:0a:42:0d:4a:9c:
43:31:b5:0c:33:ae:f4:25:30:a7:96:11:64:d5:8e:
8d:cb:8a:af:90:32:aa:8b:93:e6:a0:30:45:4a:c9:
4c:32:ab:c2:f9:95:89:d6:df:7b:f7:42:fb:47:bb:
6b:b8:36:c9:22:5b:89:aa:63:0f:01:5e:c1:90:a6:
cb:11:57:7e:f7:8d:18:33:8a:40:78:60:41:6d:ff:
50:13:56:ed:8b:57:98:9c:7f:dc:17:44:5a:48:1b:
5b:e7:6e:5a:06:2c:07:34:28:80:1e:f0:9c:a8:57:
6d:25:2d:d3:c2:04:5a:97:92:1c:fa:63:4a:3d:9c:
91:94:eb:a7:75:73:27:08:e1:41:1d:d0:fa:04:a5:
a3:e8:30:44:45:2e:33:5a:9a:7d:34:bd:59:61:76:
e4:7f:3b:f4:83:5d:c6:44:8b:f7:e4:eb:0f:1c:b3:
0e:37:cd:30:43:34:45:b8:c6:ed:c1:09:d4:4c:c8:
3e:73:88:b0:29:f9:7d:21:22:82:42:6a:70:0a:30:
da:4b:88:ea:8a:9c:8a:fd:7a:e8:63:7b:d1:2a:42:
5f:b2:e9:d6:f2:ac:1e:30:cd:38:b7:0f:af:24:29:
8a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:65:E5:D3:8A:5B:BC:C7:A3:C9:5F:24:38:F1:94:99:CD:CF:23:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07CA82603DB11F0963391BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:99:74:5c:60:f9:41:dc:8a:f1:58:41:dc:36:14:d0:61:8a:
6f:8a:40:15:04:d5:b4:84:36:7e:c1:1c:47:a6:6d:db:a1:f5:
c0:c7:d1:c1:73:e1:f7:26:21:07:48:c4:6c:70:e7:dc:a4:53:
30:54:f2:91:73:ed:00:be:0d:26:e7:00:5f:01:ca:04:b5:f9:
01:d1:2c:8f:5f:82:6c:9a:9a:c9:76:dd:e3:bd:d4:b5:ab:cb:
1b:48:50:4c:ed:7c:64:b5:43:b0:02:e1:51:df:1d:1b:69:4a:
51:fe:ee:1e:35:49:2b:04:9e:d4:f5:3b:79:d6:28:58:d1:49:
f4:63:b3:a1:35:25:7f:4d:3c:92:9d:f1:d6:f8:3d:65:13:7e:
d8:34:dc:98:0d:ed:48:44:57:0e:36:4c:75:f1:b1:e6:b0:d2:
ec:8c:f0:9a:d9:59:1a:71:e4:52:43:70:dd:04:7d:47:50:11:
f2:f9:80:b6:2a:c1:7b:76:f4:32:c1:9f:9f:74:20:6a:c2:1c:
42:43:01:ac:58:82:ed:17:63:90:54:49:d0:f5:8e:75:33:9c:
86:05:0c:2f:5c:74:b8:dd:fa:ea:fd:fc:1e:82:cb:06:d9:6e:
82:ee:22:a5:b2:b6:62:20:44:78:d6:e8:df:eb:61:04:ff:c1:
da:ff:29:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:05 2025 by rpki-client