Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9DAD462F34411EFB190168E762E951A.roa
File: C9DAD462F34411EFB190168E762E951A.roa (raw, json)
Hash identifier: 4bkjgohFJn1XXePsvERI+YJr8seRXNwcMFT3JXTnW1Y=
Subject key identifier: AF:73:30:08:DB:E9:07:95:B9:BA:DC:7B:B9:E6:01:0D:7A:C0:E2:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9DAD462F34411EFB190168E762E951A.roa
Signing time: Tue 25 Feb 2025 06:50:24 +0000
ROA not before: Tue 25 Feb 2025 06:50:20 +0000
ROA not after: Sat 19 Feb 2028 06:50:20 +0000
asID: 17561
IP address blocks: 156.249.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77200 (0x12d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 06:50:20 2025 GMT
Not After : Feb 19 06:50:20 2028 GMT
Subject: CN=67bd6830-9937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:1d:72:68:4a:29:a1:2b:22:e3:64:dc:ff:
4f:1b:b0:38:b6:b4:0a:2d:99:95:0d:7e:47:09:45:
d3:ac:e1:ab:34:e1:80:43:d6:f1:d5:5f:4f:34:b1:
de:68:96:00:eb:40:2b:5a:74:17:79:d8:f2:10:f2:
27:c9:bb:cb:1c:5f:4c:df:0c:05:c5:1c:ed:c5:5c:
e3:26:73:7d:9b:f7:d9:aa:e5:3b:b6:11:37:9d:85:
f8:e9:3d:65:08:6b:5b:04:72:34:5b:d3:cf:f3:6c:
fe:d9:87:f6:9e:a4:c9:c4:65:13:2d:6e:2d:7c:45:
4b:f0:a2:8a:92:33:63:bb:39:e5:ad:a4:91:8b:bb:
c4:77:14:61:2f:42:f2:1b:a7:c1:47:ef:48:a7:7a:
6b:6a:3e:fd:bf:f8:8d:80:07:0f:16:e8:c0:5e:18:
54:c0:05:af:d5:30:72:32:46:68:2a:b0:82:14:aa:
0e:ce:66:3e:cc:bd:58:29:e7:6f:b5:07:06:f3:c9:
75:f3:e1:14:87:20:ce:1f:1d:74:be:ca:c3:9f:15:
11:5a:e6:01:46:8b:41:4a:e3:70:47:eb:c3:73:63:
3d:d1:ce:bf:4d:f4:fb:69:03:86:93:63:5d:95:ac:
e4:cf:c5:fa:08:42:c1:69:7c:99:86:55:51:2e:f5:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:73:30:08:DB:E9:07:95:B9:BA:DC:7B:B9:E6:01:0D:7A:C0:E2:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9DAD462F34411EFB190168E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f6:bb:5a:0e:75:69:4b:d1:ce:2a:8d:02:fc:5b:6c:bd:d1:
8a:ff:fa:16:31:5f:c1:a9:10:a6:75:9b:03:2b:c9:64:4a:85:
cd:c2:e7:29:d7:9e:72:38:92:a8:38:f9:0b:6a:5a:ec:af:77:
a9:a4:12:89:2f:d5:38:b6:58:b7:bd:a0:26:7c:64:dd:b1:62:
30:2a:34:21:ab:5a:b0:08:e3:84:b3:34:3a:1b:b1:93:e2:84:
f3:df:74:1f:6f:bb:5e:d7:67:11:4d:d5:96:d5:07:d2:ac:db:
b3:6a:d4:dc:46:ef:04:b1:1c:09:d5:d5:2a:ff:dd:20:13:ec:
80:1a:ce:51:a7:3b:63:f0:52:8c:08:50:b9:0c:3f:74:e6:08:
ee:d4:95:84:51:8b:ee:a1:18:24:04:f0:09:7f:62:cf:a4:e9:
92:84:e9:75:d7:1a:91:b3:48:da:61:70:3c:28:f9:80:b3:04:
e0:18:5d:5b:39:a9:fe:d7:8c:ba:b1:6f:1b:25:85:0c:d3:ec:
f6:cc:77:6c:83:37:06:5c:2d:71:2a:24:c8:5b:a9:00:6a:cd:
3f:77:ab:be:22:0e:3f:45:fe:0a:d5:d5:4d:ff:4a:af:db:1a:
98:fe:7e:91:e3:d5:e5:4e:93:77:3b:62:17:75:83:8d:f2:ba:
1f:c1:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:36 2025 by rpki-client