Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1AADFB2F47011EFBFB2339B762E951A.roa
File: C1AADFB2F47011EFBFB2339B762E951A.roa (raw, json)
Hash identifier: CNTetpKDVA7te/hTdgK9DueJMpPwYy+2u6CTKAkDXx8=
Subject key identifier: D8:83:CA:A9:6E:B8:BF:2A:5E:3D:6C:05:48:CE:3C:D9:0E:9E:D7:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01367F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1AADFB2F47011EFBFB2339B762E951A.roa
Signing time: Wed 26 Feb 2025 18:37:39 +0000
ROA not before: Wed 26 Feb 2025 18:37:36 +0000
ROA not after: Sat 19 Feb 2028 18:37:36 +0000
asID: 17561
IP address blocks: 156.233.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79487 (0x1367f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:37:36 2025 GMT
Not After : Feb 19 18:37:36 2028 GMT
Subject: CN=67bf5f73-a9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:d8:f8:5b:b3:6d:3e:62:d1:d7:94:ed:2b:
8a:1d:c0:af:ae:31:aa:14:3d:8a:94:e4:54:e8:f6:
54:d8:75:e7:cd:a9:e9:d1:d2:6d:3a:22:7b:25:c8:
b8:a5:44:24:a4:3d:27:98:5e:d5:9b:43:9d:eb:cf:
2c:81:4e:bb:9c:1e:4f:2a:4b:a3:4e:59:16:31:f6:
57:e8:8d:06:bc:f3:e9:60:33:ae:64:18:49:ce:28:
6f:91:ce:5a:0f:72:06:d1:12:56:eb:1c:b9:90:99:
4d:48:ae:e7:23:1a:de:ab:a8:c6:00:49:fe:0f:b6:
36:92:fb:98:56:ca:c0:8c:d6:b1:cd:35:72:a0:8c:
fa:c4:ce:bf:85:21:2b:ef:54:0c:64:26:b3:38:b0:
9f:ce:df:b8:a4:9d:ff:06:98:ea:be:8c:65:2d:f9:
e2:36:67:4b:f0:63:2b:10:df:11:f4:08:bc:b2:12:
6b:a1:bf:23:ba:ff:d3:f3:d1:43:f6:73:fd:35:d1:
6e:e7:bc:01:f5:0c:08:27:04:f4:db:bc:25:59:15:
02:c0:12:31:97:86:7b:98:a2:bd:69:6a:23:6d:4b:
0e:72:5e:fb:de:d9:1a:55:35:3b:ba:bc:c3:49:c7:
98:00:8a:c5:ed:a9:08:fd:02:63:1e:04:7a:29:c8:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:83:CA:A9:6E:B8:BF:2A:5E:3D:6C:05:48:CE:3C:D9:0E:9E:D7:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1AADFB2F47011EFBFB2339B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/24
Signature Algorithm: sha256WithRSAEncryption
45:67:87:53:31:aa:b9:33:35:39:bd:fa:99:6c:08:21:30:0e:
51:95:5c:1f:83:77:6a:bf:29:7a:e7:22:93:16:f0:86:af:ea:
ac:08:5f:8a:5c:ca:fd:51:9b:6e:df:5b:f6:c2:09:b3:cf:66:
89:99:e5:0b:93:cb:ed:40:59:b9:be:5b:23:42:fd:95:04:ff:
2c:74:28:18:fd:16:a1:5a:9c:f7:c7:78:dc:d1:88:e9:b4:f0:
5d:27:4e:e4:22:c2:ea:b5:77:c2:4e:2e:95:0f:f0:68:6e:5b:
51:77:47:cc:a2:42:e4:f2:84:6a:91:8e:70:f1:f2:f0:52:0b:
3b:8c:fe:2a:1f:62:ab:3b:93:02:28:3d:97:e3:6a:90:a3:27:
29:22:4a:50:b8:f1:67:98:df:b4:84:db:6c:20:89:af:c1:7d:
6c:82:9c:9c:60:8a:ab:0b:28:e4:68:cb:88:b8:9b:b0:bd:ad:
3c:1c:71:34:35:62:e4:aa:fe:2e:03:3f:87:31:7e:d4:fe:ca:
fa:5d:2a:69:14:43:b5:58:9e:09:e9:4e:b8:d8:81:7a:8c:86:
28:b1:2c:17:6d:5a:a0:de:75:4a:c5:bd:52:fb:3f:7c:48:90:
27:98:53:a1:2d:64:09:51:a2:93:a4:6b:72:b9:65:38:e8:8e:
e7:1d:5d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:30 2025 by rpki-client