Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2AB0E56F46011EFBCBA7AAB762E951A.roa
File: C2AB0E56F46011EFBCBA7AAB762E951A.roa (raw, json)
Hash identifier: 5vCF3DGO9EEJvUXK4osSJvc7l1Gv8I1nvYgwd69Zoo0=
Subject key identifier: 7A:AB:11:88:A8:ED:B9:00:A9:EC:1A:75:C0:35:7F:91:07:F2:95:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2AB0E56F46011EFBCBA7AAB762E951A.roa
Signing time: Wed 26 Feb 2025 16:43:09 +0000
ROA not before: Wed 26 Feb 2025 16:43:05 +0000
ROA not after: Thu 19 Feb 2026 16:43:05 +0000
asID: 984
IP address blocks: 156.231.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79098 (0x134fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:43:05 2025 GMT
Not After : Feb 19 16:43:05 2026 GMT
Subject: CN=67bf449d-a862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:31:2b:34:65:2a:8c:f1:05:d2:3c:07:76:
f5:fb:f5:75:e6:13:7c:74:44:a9:29:ae:15:1b:55:
fd:95:30:9f:6f:2c:34:8d:bc:19:ea:f1:6e:3c:1c:
b9:7b:c4:1c:d3:42:c2:e2:6f:eb:f0:d2:1d:6e:e9:
00:61:92:6b:ad:f5:ca:82:f3:ec:d7:e0:97:9e:bc:
dc:8c:10:5a:c6:ba:a8:6f:8c:51:ab:d1:5a:a5:05:
92:f7:4c:f3:64:f8:a6:9e:e9:33:5c:39:4f:af:81:
75:b6:29:be:06:ef:36:6a:14:d0:3a:5d:c6:5a:ab:
60:cb:db:28:5e:1b:f9:63:39:14:9d:20:03:94:12:
2a:b8:16:b2:e6:70:f5:0a:36:62:e4:5d:79:7a:24:
65:06:2c:b5:e1:25:d2:4f:c4:8b:98:7c:73:f4:0b:
7d:f5:e6:37:c0:e4:d6:18:47:4d:c4:67:d0:b0:cf:
e2:73:17:ab:0d:b0:19:6c:bd:d8:3c:16:7d:11:0a:
ab:b9:11:de:ad:33:77:50:9f:91:64:5d:f1:13:8f:
bf:6e:f8:62:cf:3b:88:e4:ed:aa:a5:09:55:ed:49:
b8:e5:12:88:5f:af:44:65:c8:01:dd:67:45:25:d5:
b2:81:7b:34:c6:be:37:d0:4d:79:db:3e:22:4e:ee:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AB:11:88:A8:ED:B9:00:A9:EC:1A:75:C0:35:7F:91:07:F2:95:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2AB0E56F46011EFBCBA7AAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7c:87:6a:0a:4b:02:bd:c3:ff:be:f2:14:db:f7:73:14:79:
f1:ac:79:74:67:34:7f:35:e0:32:ba:2e:dd:86:dc:e6:8d:64:
69:5b:55:6d:8d:5c:5d:b1:75:74:45:b3:ce:80:44:76:ce:d6:
aa:9c:23:70:da:53:b0:29:b8:b8:0f:5d:11:57:c4:fb:81:01:
67:b3:a8:06:d5:89:c0:03:8c:fc:8b:70:36:e4:1a:4a:8f:d7:
ad:fd:1d:41:37:f3:36:d5:84:c6:19:29:6f:66:d8:43:4c:3b:
01:b2:9a:9c:41:8d:c4:b0:7f:cd:53:e0:a8:b6:bf:cd:cc:60:
a9:10:5c:f4:50:c7:9c:70:16:6e:c4:2f:ca:ab:82:23:02:ae:
33:bb:56:46:52:8b:95:47:a3:a0:b3:c2:dd:f7:c8:70:05:6b:
5a:02:b2:9a:40:bf:17:b4:ec:5d:cf:85:ce:3e:e5:ca:92:af:
bb:78:ff:98:9e:49:0b:05:00:19:1f:31:8c:a9:2d:99:79:e8:
dc:d8:e7:0c:80:24:7c:72:57:d2:ca:4e:e8:3f:98:85:f9:7b:
ae:e0:43:c4:6d:5f:97:8b:7b:6d:c2:43:39:24:cf:53:32:70:
da:92:df:ec:3c:bf:27:4d:9f:9f:14:02:40:97:49:61:e4:48:
40:20:cb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:57 2025 by rpki-client