Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C987E94A0CBD11F0B637149E762E951A.roa
File: C987E94A0CBD11F0B637149E762E951A.roa (raw, json)
Hash identifier: glLGgmGB8lhT6wwXR72tJwNdF+z44Dy9nHyoO1VtW28=
Subject key identifier: 57:8B:E0:51:65:E2:FC:FC:27:76:B8:88:F9:9E:17:B7:38:DB:D9:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C987E94A0CBD11F0B637149E762E951A.roa
Signing time: Sat 29 Mar 2025 16:49:32 +0000
ROA not before: Sat 29 Mar 2025 16:49:28 +0000
ROA not after: Sat 19 Apr 2025 16:49:28 +0000
asID: 5065
IP address blocks: 156.255.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84154 (0x148ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 16:49:28 2025 GMT
Not After : Apr 19 16:49:28 2025 GMT
Subject: CN=67e8249c-5b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:28:ce:d3:91:31:46:a5:1a:c4:76:6f:b9:
7e:12:b9:8e:87:ca:42:a6:c4:a2:70:4d:6b:ef:51:
1d:4d:2d:aa:56:37:10:a2:b3:b6:1c:93:02:4b:f5:
86:18:fb:47:3a:06:58:f3:20:0e:bb:4b:28:90:31:
e3:71:29:f3:5d:75:0a:bb:07:6a:13:46:db:cb:74:
5f:54:fc:61:32:41:11:db:d3:6a:bc:9a:ca:37:e2:
7b:ce:44:0d:bf:25:ac:b3:0b:9f:f5:4a:82:81:69:
e2:25:fd:be:d8:f3:46:48:9d:32:fd:7d:96:61:d2:
ae:b4:95:3c:bd:29:8b:e6:e4:5b:a6:4a:6b:bf:10:
85:52:86:89:8f:b6:66:7a:6e:93:05:6a:91:d2:65:
5a:8e:0c:5c:50:37:ac:46:23:76:75:bd:af:07:11:
39:de:6f:49:b5:e7:8a:79:be:56:8e:89:9f:2e:f2:
c0:99:df:7a:24:e1:af:de:de:4e:ec:6a:09:08:5f:
74:36:c1:c6:ac:af:57:04:2d:8b:4b:aa:dd:98:56:
2b:bc:5b:33:b3:c1:77:c3:1f:eb:4e:2e:ff:4e:cc:
eb:e2:6b:7e:11:fc:e7:cd:02:de:35:43:ac:de:27:
21:23:cf:32:95:82:49:2e:41:e2:41:ff:3b:f4:a0:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8B:E0:51:65:E2:FC:FC:27:76:B8:88:F9:9E:17:B7:38:DB:D9:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C987E94A0CBD11F0B637149E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:25:00:96:48:f3:05:66:2a:e2:94:cb:24:0a:a2:c6:54:4f:
f5:b9:52:17:75:a2:93:9d:61:0c:57:e3:c6:fd:2f:12:35:22:
af:36:b2:a8:8e:78:b4:0b:f9:af:28:d5:21:4e:e3:a7:52:5c:
71:c2:27:57:87:66:a7:d2:b7:ea:76:f2:93:e3:b1:5d:87:b2:
05:01:37:12:ae:06:72:8b:0a:a0:01:7d:4e:a1:f0:c7:3d:43:
f9:1d:a7:5d:d8:45:62:04:12:07:06:56:f1:2c:78:2c:c9:28:
21:d1:d7:88:19:15:7f:6e:eb:4b:2f:09:78:96:55:e0:54:69:
7e:ba:db:b4:ca:53:e1:84:15:59:fb:36:40:c3:c4:43:e8:d5:
d9:c7:ff:68:fd:92:e8:b6:66:df:e3:8b:8a:59:19:41:c7:cd:
01:72:dc:11:42:39:a4:53:48:cc:59:75:2e:d7:31:b6:50:0b:
b1:9e:cf:e3:b2:f7:38:d8:72:27:b7:bd:d8:60:20:56:94:29:
15:83:6c:4a:e8:33:13:cb:a5:33:83:e0:9c:94:16:3e:54:b4:
76:d9:1b:a5:36:88:2d:c2:32:e5:a9:42:81:13:8a:f9:fe:e7:
53:f3:6a:f8:27:f6:23:f9:38:36:87:50:4d:12:a3:e6:94:9a:
b9:40:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:02 2025 by rpki-client