Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB6DF768F44911EFA366928B762E951A.roa
File: CB6DF768F44911EFA366928B762E951A.roa (raw, json)
Hash identifier: a2P2EOJBKMlQ6swTrNXnrzxWpbAcE+fUq4I4VEcZA5Y=
Subject key identifier: 8D:DD:B6:AF:DF:92:70:28:26:C0:C5:1C:7E:52:35:01:18:8C:BF:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013379
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB6DF768F44911EFA366928B762E951A.roa
Signing time: Wed 26 Feb 2025 13:58:45 +0000
ROA not before: Wed 26 Feb 2025 13:58:42 +0000
ROA not after: Thu 19 Feb 2026 13:58:42 +0000
asID: 984
IP address blocks: 156.231.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78713 (0x13379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:58:42 2025 GMT
Not After : Feb 19 13:58:42 2026 GMT
Subject: CN=67bf1e15-5fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:94:32:26:21:2a:e0:73:62:77:c8:ce:a9:
45:5e:07:55:a1:3c:e8:9d:c8:05:92:0e:fa:c1:a9:
74:9d:aa:18:d2:6b:4d:20:8b:8b:c4:65:84:a2:cf:
f1:f2:3e:fe:77:34:35:0b:74:9a:c4:1c:ca:86:3b:
6f:6e:4c:40:95:71:14:72:40:a3:35:b2:3c:6d:ee:
50:f4:45:e2:1c:c7:af:81:f4:7f:94:ce:06:5e:b9:
dd:2c:ee:3a:dd:da:40:90:cb:74:2b:be:9e:6e:d3:
58:e2:4b:b1:1f:3e:a8:f8:b9:ae:58:0c:c0:00:e9:
93:3b:ac:95:9d:67:a7:e3:f7:2e:3f:e9:d8:6e:38:
03:e6:3f:fa:70:80:7a:d5:e3:8b:90:eb:ee:ba:ef:
a2:47:fe:c5:46:ba:f0:c6:2b:6a:92:66:c3:7e:fc:
55:6b:3c:91:5f:e0:c3:68:26:8d:ee:4a:0f:7f:be:
d1:1c:cc:1e:ea:67:79:9d:19:f1:04:dd:80:e0:d7:
3c:40:b1:9a:fc:e0:84:a2:8f:41:00:2f:45:73:b4:
ab:d6:29:85:1e:02:87:62:5a:3d:11:a8:2d:ae:c1:
49:c1:9d:8f:44:ca:4c:10:8f:9c:43:8b:4d:60:fb:
9a:12:37:56:ce:aa:ff:d7:78:45:be:2a:77:75:2a:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DD:B6:AF:DF:92:70:28:26:C0:C5:1C:7E:52:35:01:18:8C:BF:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB6DF768F44911EFA366928B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.164.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8c:aa:68:ef:02:1a:c1:ee:96:76:f1:28:08:f1:54:ae:3b:
36:69:f0:2f:d3:7a:60:cf:fb:c0:e7:2d:57:dd:62:52:92:e6:
75:df:04:d9:3e:f9:01:83:60:8c:2a:e9:13:2a:ad:8c:22:ca:
1b:a8:f6:9d:08:90:05:72:7b:8d:24:b4:ec:78:d3:36:66:62:
cf:bf:ae:69:d8:dc:88:59:44:e0:e5:85:7e:21:72:1d:bb:04:
c7:e5:2c:8a:f2:c5:3b:80:07:ab:ff:e0:d8:f8:03:2d:ff:a8:
b4:09:5b:6b:6f:8c:f5:e8:c2:74:f0:bf:52:df:7f:89:e3:b0:
18:bd:8f:d5:69:60:89:5d:ca:15:fd:4d:dd:dc:5d:20:9d:45:
b8:4e:1a:8f:13:cc:44:e6:2a:0f:65:38:9e:9c:9d:77:1e:a1:
0f:9a:05:7c:d5:d7:74:c3:3e:6c:0a:cf:90:a3:68:67:ee:de:
b0:6c:60:cb:f3:7d:d8:f1:9c:c8:fb:54:4d:f7:f4:2c:81:e1:
ff:06:92:ef:35:73:c7:b0:da:8c:64:31:28:e0:11:a7:d6:93:
b3:b9:12:02:7d:7b:9a:57:45:ed:ae:54:6a:b3:28:6a:41:03:
ad:ea:72:d9:01:21:75:80:0f:64:68:dd:6c:dc:c9:8d:94:4f:
15:55:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:10 2025 by rpki-client