Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA8C20B6F38811EFB546D456762E951A.roa
File: CA8C20B6F38811EFB546D456762E951A.roa (raw, json)
Hash identifier: hN0cwQWvqGC4xQZHIL2KziCi+7BfivxcGxtlyVvY+Pw=
Subject key identifier: F1:15:8B:6E:03:74:DA:F3:F2:3A:B7:F1:C5:AD:0A:D0:C7:A3:5C:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA8C20B6F38811EFB546D456762E951A.roa
Signing time: Tue 25 Feb 2025 14:57:11 +0000
ROA not before: Tue 25 Feb 2025 14:57:07 +0000
ROA not after: Wed 26 Mar 2025 14:57:07 +0000
asID: 152705
IP address blocks: 156.245.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77384 (0x12e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 14:57:07 2025 GMT
Not After : Mar 26 14:57:07 2025 GMT
Subject: CN=67bdda47-f477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:30:f0:83:2d:e5:c0:04:c2:af:da:58:1c:
14:17:3b:5b:d8:24:7f:d5:4c:13:0e:22:05:43:b3:
74:a1:c8:56:70:84:8f:48:5b:91:37:9f:7e:f0:63:
3a:9b:35:67:8e:ac:fa:6c:b8:f4:40:8a:ad:1f:35:
44:a4:5e:a8:76:18:b4:82:f0:ac:53:a0:f0:73:90:
6a:61:66:62:dd:56:a0:76:4f:e8:c3:d7:3c:a9:47:
50:3c:2f:5d:01:97:26:5e:2f:b1:09:7f:21:fe:8a:
5b:da:f9:a0:ee:94:ec:28:48:46:41:15:fe:fa:4e:
bd:b8:ae:8c:ea:b1:86:ee:28:cb:28:64:0e:c9:fb:
1c:c7:a7:97:57:47:16:b3:fa:e3:b4:05:6c:8e:54:
5e:f8:30:0e:40:21:48:49:03:ed:0a:70:fe:b4:18:
02:7f:99:fc:c8:c4:35:05:4a:89:cb:aa:69:d3:32:
20:58:b7:a3:e3:98:3c:3b:29:8b:66:86:e9:4b:bd:
02:0b:e2:fb:92:6c:4e:d6:4c:89:33:d8:1c:f3:19:
c1:bb:22:4c:16:cd:b5:bd:10:c9:07:ea:7d:f7:92:
5a:0c:04:bf:09:eb:92:94:56:9e:8e:47:40:6d:bb:
92:67:bc:9f:b9:63:ba:14:53:10:8a:12:f3:0a:90:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:15:8B:6E:03:74:DA:F3:F2:3A:B7:F1:C5:AD:0A:D0:C7:A3:5C:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA8C20B6F38811EFB546D456762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:20:cb:95:1f:05:0a:7b:90:43:02:ef:33:bd:7a:89:0e:e9:
e8:15:aa:a4:50:c3:29:d8:24:a5:af:b2:09:8b:89:95:1b:e3:
17:8d:99:64:92:02:83:19:8a:ef:ba:59:27:fd:c6:16:b6:6b:
7c:44:3f:75:2e:d1:87:00:9f:fa:ff:d7:9d:34:9d:ee:ef:6b:
e7:fe:3a:0d:80:fc:ac:df:f2:03:88:a9:95:59:45:be:cb:20:
a2:2b:5a:b8:26:a3:09:66:5d:17:f1:79:a8:29:0b:0f:db:dd:
05:67:c0:ca:74:28:7b:1e:fd:7b:8e:f7:8f:a4:ac:8b:ea:bd:
57:c3:05:87:4e:62:47:eb:81:76:4d:61:7c:9e:a7:04:be:25:
e3:ac:82:11:3d:8a:fb:2a:8f:15:5f:40:f8:5c:4c:f2:11:77:
46:18:96:52:0d:3a:8b:9a:f7:34:6a:15:be:a3:f4:d7:06:e4:
4e:04:d1:59:11:2f:b0:51:33:2e:e4:c3:fa:1d:22:0c:82:a7:
4d:20:bd:5c:4f:b9:16:09:71:0c:97:fc:df:d7:fa:74:51:ac:
53:65:a9:6b:62:ea:a6:f9:59:37:bb:90:71:af:4f:1f:ad:7a:
de:3d:94:cf:d2:d6:c9:8e:db:02:93:61:8d:80:75:70:37:6a:
56:09:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:12:48 2025 by rpki-client