Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5DBA13EF4AC11EF800D1CB9762E951A.roa
File: C5DBA13EF4AC11EF800D1CB9762E951A.roa (raw, json)
Hash identifier: nZOVGADNg4NFrmkGCq9rIjTVNNXL39OP2D5k4AsVbQs=
Subject key identifier: AC:EE:F7:7F:8B:31:AA:A7:6B:E0:8B:B4:76:AC:11:3A:E7:6C:46:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013899
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5DBA13EF4AC11EF800D1CB9762E951A.roa
Signing time: Thu 27 Feb 2025 01:47:16 +0000
ROA not before: Thu 27 Feb 2025 01:47:12 +0000
ROA not after: Thu 19 Feb 2026 01:47:12 +0000
asID: 984
IP address blocks: 156.236.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80025 (0x13899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 01:47:12 2025 GMT
Not After : Feb 19 01:47:12 2026 GMT
Subject: CN=67bfc424-4c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:13:51:bb:76:51:77:72:19:2b:25:96:f6:
10:c0:18:ad:84:2e:36:0c:5c:4b:59:9f:3f:08:bc:
5f:bf:db:1b:1d:92:44:de:8b:5e:0d:ba:41:d6:c9:
40:d1:cf:5d:4c:5c:d1:89:ff:d1:c8:6e:f8:e4:cd:
f1:23:c6:b4:20:53:72:18:e4:89:c8:c5:6c:e4:5e:
0d:1d:11:6b:b8:8b:91:83:01:1e:25:66:d9:b3:9e:
1a:6d:a1:05:ed:b7:d3:f5:a6:6c:3d:7f:c0:a9:3b:
9a:f7:90:b0:37:bd:37:7f:a6:c0:ab:6c:38:5f:18:
45:81:93:d2:fa:2b:f7:94:7c:fc:ec:55:e3:30:64:
22:2d:6e:dd:07:b4:72:71:46:69:e9:b0:e4:ad:b7:
06:07:f2:28:e9:d9:09:3a:3a:b0:1a:66:cf:bc:a6:
b2:b0:83:a7:b9:37:bf:2b:7d:f3:12:c2:7a:71:0a:
ab:0d:44:d8:04:8c:10:4d:ca:2f:a2:d5:69:cf:0b:
34:23:96:9f:ad:7f:ee:20:b6:6e:45:f9:a5:3b:f9:
0f:bb:90:b7:79:d8:2b:71:00:8c:f3:17:8b:4c:35:
c1:b8:dc:63:c9:5c:b6:6a:cb:a6:f3:eb:08:01:14:
96:1b:ee:1d:b1:ff:2b:d7:74:ee:17:d9:0d:b0:5e:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EE:F7:7F:8B:31:AA:A7:6B:E0:8B:B4:76:AC:11:3A:E7:6C:46:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5DBA13EF4AC11EF800D1CB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.6.0/24
Signature Algorithm: sha256WithRSAEncryption
36:0b:5f:20:56:9b:a0:f4:16:d2:f3:de:95:74:8e:1a:6f:ee:
98:29:aa:5f:00:de:c3:01:ba:36:2f:ae:e7:eb:c5:54:74:03:
ae:0d:5b:36:8c:b3:56:52:42:d4:bf:9a:dd:6e:1e:2c:83:2a:
bb:73:90:4d:9a:2b:61:8a:dc:df:c8:11:6b:71:e6:c4:c7:74:
7e:96:3f:48:1f:af:fe:cf:88:1c:de:2d:b1:99:3f:be:70:b0:
97:93:a8:12:3a:c3:61:0a:b1:44:9f:af:19:ed:77:7c:b2:6c:
40:4c:48:82:9e:81:33:33:3b:c1:a5:6e:24:06:76:a3:69:91:
da:25:3f:31:f1:ec:8c:9b:9b:52:bc:27:ad:f6:89:39:e5:1e:
81:35:3c:9e:e9:cc:05:bd:9f:b4:a8:26:aa:29:5b:a9:cb:ba:
1b:42:be:ca:2c:f4:fe:59:35:a6:cf:28:b8:3c:d3:23:41:9c:
fe:2a:4c:8b:c4:1d:5d:9b:b5:ff:f7:02:d6:62:5c:38:9e:da:
df:da:5d:66:d8:4b:5d:0c:5c:ca:1e:d1:38:b3:ca:ee:9b:f5:
92:06:b5:fa:5d:61:31:18:4c:03:24:a4:88:90:33:2c:a9:03:
d6:e5:69:87:4b:c4:b3:3e:5d:50:f2:9c:05:bc:29:21:fa:9b:
2b:36:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:57 2025 by rpki-client