Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1BB6E56018311F0AE1E71B0762E951A.roa
File: D1BB6E56018311F0AE1E71B0762E951A.roa (raw, json)
Hash identifier: dKY+lXERYLTV/PMxWvCq7N8JeMrA4cqVd5VgvFTidaA=
Subject key identifier: 4E:BB:ED:5D:53:72:B6:D7:71:C5:8A:F1:FF:D2:E1:08:59:74:94:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014640
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1BB6E56018311F0AE1E71B0762E951A.roa
Signing time: Sat 15 Mar 2025 09:56:52 +0000
ROA not before: Sat 15 Mar 2025 09:56:48 +0000
ROA not after: Mon 21 Apr 2025 09:56:48 +0000
asID: 212238
IP address blocks: 156.226.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83520 (0x14640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 15 09:56:48 2025 GMT
Not After : Apr 21 09:56:48 2025 GMT
Subject: CN=67d54ee4-bdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:a1:47:c3:43:fe:cc:4c:4e:b2:9d:21:9d:
76:93:8c:28:38:1e:36:e9:11:ae:4c:25:10:d6:db:
e7:1b:38:7b:58:6c:f2:b8:9a:93:a3:10:3d:ec:82:
e7:fc:d5:53:66:14:c5:93:4d:04:47:8e:77:dd:04:
7b:0c:28:2c:96:a3:58:b4:6d:da:f3:c4:17:d6:9f:
ac:04:96:51:92:56:ad:4f:e1:e2:a5:c7:4f:91:33:
07:8e:79:d7:65:4a:80:db:01:2c:ff:b7:0d:2c:20:
b6:49:0f:47:92:d3:25:7f:07:4f:57:5d:77:05:3e:
9a:2a:2a:a4:e6:01:40:4f:2a:d4:be:ea:75:fd:ee:
aa:1e:18:38:91:26:6d:27:6d:cb:e7:b2:ff:4e:03:
5e:d1:6a:b0:ee:3e:99:56:a4:5e:14:19:05:86:b9:
6d:1e:56:15:e5:96:a7:b8:11:a0:26:82:f5:3a:4b:
27:da:68:4a:83:3b:9b:b1:c3:b2:0c:e5:92:ea:f3:
5d:17:0e:cb:9f:6a:b5:70:18:6e:90:d7:2d:cb:72:
92:86:89:55:e0:85:a7:60:47:23:e8:af:42:03:49:
46:b2:72:11:f8:c2:4a:b6:9f:27:e5:0c:ee:f4:76:
36:9e:31:93:87:2a:e8:88:28:e3:9f:13:5f:94:2d:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:ED:5D:53:72:B6:D7:71:C5:8A:F1:FF:D2:E1:08:59:74:94:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1BB6E56018311F0AE1E71B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:ee:ce:fe:01:40:3e:f7:be:af:dd:77:fd:e1:dc:86:05:14:
85:82:33:3e:45:46:c7:1d:f7:64:b6:39:bf:c4:b1:8c:88:16:
f9:f7:96:6f:e6:25:46:3b:db:4a:c4:a5:c8:fc:ef:d4:98:99:
dd:29:6d:ce:0b:c3:db:fa:87:69:26:b2:5d:7b:22:54:b4:fa:
a3:b3:84:87:ac:ff:0f:e5:4d:73:9c:7d:85:77:6a:08:6c:c6:
c8:ec:14:31:b2:35:29:8f:cb:7e:4e:ce:92:17:23:2b:ba:57:
68:9d:58:9e:a1:75:03:f1:09:04:91:e7:3b:3c:f4:f7:e2:e5:
21:8b:0a:ef:cf:ce:e7:55:45:5c:44:e5:4e:cd:07:37:d1:12:
bc:08:99:aa:c3:02:b4:0b:a3:92:be:93:e2:af:90:ed:4d:f5:
87:f8:95:d6:bd:1e:3d:b9:6b:77:4f:5f:77:3c:c5:f0:52:e2:
85:fa:e0:3c:fa:e7:68:e9:d4:9c:56:7a:39:12:8d:89:99:58:
31:6f:e6:b9:75:6d:a2:b4:52:b2:0b:ac:00:e1:10:f8:5c:eb:
46:57:f2:b7:b1:ac:fc:69:d8:af:4d:62:e4:1f:83:4d:05:8f:
6e:a4:8e:b8:33:98:32:6e:db:87:83:b1:3c:6b:5b:8b:17:88:
42:fb:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:55 2025 by rpki-client