Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3890D18F43311EF95AA596F762E951A.roa
File: D3890D18F43311EF95AA596F762E951A.roa (raw, json)
Hash identifier: Fz7joUe1whiC/3KEx2hXfZ3EV88TZ7ScB+ah1ONC3GU=
Subject key identifier: E2:62:F6:02:25:2E:46:89:39:D4:B3:16:6C:48:4E:58:B9:CB:EB:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3890D18F43311EF95AA596F762E951A.roa
Signing time: Wed 26 Feb 2025 11:21:30 +0000
ROA not before: Wed 26 Feb 2025 11:21:26 +0000
ROA not after: Thu 19 Feb 2026 11:21:26 +0000
asID: 984
IP address blocks: 156.252.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78268 (0x131bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:21:26 2025 GMT
Not After : Feb 19 11:21:26 2026 GMT
Subject: CN=67bef93a-d96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e5:ad:fe:9f:45:f4:10:d1:84:e4:71:eb:3f:
5f:85:64:db:5b:cd:e6:6d:82:e0:48:29:41:a9:a6:
72:67:96:0a:3e:f7:37:a1:9d:f4:e1:32:0a:3c:af:
e6:a2:2a:5d:31:7d:7a:d9:89:dc:e3:01:7b:c6:96:
3d:a7:8f:9e:b9:01:63:ad:c0:17:bf:aa:d4:55:60:
30:b9:4e:80:75:c6:9d:61:5c:cb:27:99:45:4b:24:
3b:f4:bf:0b:d9:05:61:a7:46:b6:72:7d:98:6b:b2:
f7:58:4c:8d:6d:0b:32:eb:4e:63:88:3b:38:5f:4e:
1d:e2:60:7c:9a:20:7f:30:52:94:df:50:b4:bc:e9:
68:65:d4:c3:67:09:c1:ed:5a:98:ca:84:46:c9:0d:
ea:50:89:8d:28:05:6c:a3:d2:13:aa:db:4a:6f:12:
2a:2c:ce:9f:5a:05:11:7b:6d:21:07:cb:de:50:2e:
6b:fa:e7:30:56:82:b2:d1:9f:34:3a:95:4c:a3:d6:
eb:74:04:5b:9c:9f:e5:56:13:6b:17:c0:67:30:09:
65:1f:07:71:39:6e:4e:d2:73:99:04:61:64:03:06:
65:e6:9d:e0:07:4b:a3:31:4e:1e:c0:fc:43:ac:ae:
3c:96:6b:22:2a:e5:53:89:fd:7f:4f:bc:66:c6:94:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:62:F6:02:25:2E:46:89:39:D4:B3:16:6C:48:4E:58:B9:CB:EB:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3890D18F43311EF95AA596F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:8a:f6:1c:46:95:83:d8:7e:96:15:9b:20:10:1d:08:3a:f0:
c1:ed:25:4e:ed:fb:7e:fa:e7:12:b9:59:ac:1f:17:e1:d6:79:
44:62:27:ee:ce:ff:a1:e0:60:fa:2b:26:a2:65:22:d7:2a:74:
e8:3b:09:5d:23:53:59:77:29:d3:74:88:f3:01:6d:7e:c1:65:
b8:20:dc:05:3a:e1:0c:0c:83:6e:94:aa:26:69:f9:c8:fc:8c:
2d:68:72:88:d3:df:b5:13:13:e4:31:b1:14:b5:80:e4:bc:aa:
d5:be:20:c0:73:89:7f:c1:96:03:bd:0e:74:89:e0:fa:72:76:
61:05:d0:e5:79:62:eb:d3:e3:6c:0e:6f:a6:b9:f7:31:f9:be:
5a:03:99:36:85:7c:bb:63:91:96:55:9e:f0:96:fa:2e:9a:a6:
ae:b9:a7:48:5c:75:33:c9:d7:1e:4c:1e:96:6e:63:c2:be:36:
98:4e:fa:38:f2:5d:0c:53:fd:0b:62:00:1e:5b:64:d8:95:1d:
0e:6c:c4:43:d0:d9:a0:2b:e7:f2:fb:fb:9d:85:47:51:ab:c5:
1d:19:14:7a:fa:8f:7a:e3:2d:9d:16:5b:6e:e6:9b:2e:b8:0d:
e8:9a:ec:1f:ef:d9:1d:c4:f6:08:5e:6a:ae:e4:9b:f6:31:2b:
77:03:05:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:45 2025 by rpki-client