Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB084662F46011EFB2ED91AB762E951A.roa
File: DB084662F46011EFB2ED91AB762E951A.roa (raw, json)
Hash identifier: JAZ+lqhCvBL9VeCC2G9nUEll8PfQMfReXbVQiAOYzQU=
Subject key identifier: 9C:3E:92:F6:C5:40:AD:D1:59:E0:D2:FD:BD:1D:08:63:62:0B:E8:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB084662F46011EFB2ED91AB762E951A.roa
Signing time: Wed 26 Feb 2025 16:43:50 +0000
ROA not before: Wed 26 Feb 2025 16:43:47 +0000
ROA not after: Thu 19 Feb 2026 16:43:47 +0000
asID: 984
IP address blocks: 156.252.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79102 (0x134fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:43:47 2025 GMT
Not After : Feb 19 16:43:47 2026 GMT
Subject: CN=67bf44c6-fb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:fc:8c:6f:84:a5:12:55:f1:b9:40:17:4f:
33:30:98:4b:6a:16:a4:41:cc:0e:b3:82:ca:e6:ae:
1e:8a:6d:8e:99:8a:f3:15:05:aa:18:e2:11:d2:70:
57:7b:90:73:5e:47:14:39:27:d1:82:de:9c:7b:49:
8d:39:69:3e:da:b0:28:81:7f:8c:6d:14:af:0c:5c:
98:6f:9b:7b:dd:9e:ae:d2:c9:67:0f:f2:cb:b4:68:
e9:85:4f:26:d3:18:6e:ae:65:80:4a:e9:82:fb:4c:
d5:89:24:3a:09:f5:c5:32:23:aa:77:3a:ee:e6:28:
9d:ed:a7:4c:44:27:1c:4f:db:b5:fd:23:52:df:bd:
bd:c7:5a:e0:b6:bc:7f:cb:74:3d:13:70:e6:20:5d:
2c:ec:3b:31:9b:1e:e6:56:54:66:2b:3f:0f:11:fb:
d3:36:9a:ad:72:31:15:24:77:e8:a2:5f:00:72:87:
63:bf:c2:f9:af:7f:a0:58:6b:e6:e4:29:cf:74:48:
e9:1d:8f:61:43:c0:75:41:2f:b5:c5:b2:e5:7d:82:
d7:62:b7:87:a2:21:f1:6e:d7:3d:a3:ff:db:8e:90:
41:c1:1c:19:02:c3:18:9a:65:59:96:68:87:94:a4:
44:33:03:58:59:07:28:78:1e:4b:8d:1f:ac:9f:73:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3E:92:F6:C5:40:AD:D1:59:E0:D2:FD:BD:1D:08:63:62:0B:E8:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB084662F46011EFB2ED91AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9e:c7:41:c5:74:79:b9:7c:97:f3:e9:50:23:31:a0:8c:dd:
cc:8a:01:0f:b3:2d:83:e5:82:d8:11:37:79:f1:79:c7:02:55:
40:ed:0b:75:b3:ae:25:3a:c1:db:60:66:14:36:17:b2:32:4b:
ed:01:df:29:b8:63:be:85:5f:64:ad:72:f5:d8:56:7f:cb:81:
af:e2:7e:80:c8:e4:e5:f8:87:4d:6c:c1:48:f1:07:7d:78:f0:
6c:8b:dd:a1:2b:a5:fd:e9:1b:72:1d:fe:b6:96:69:21:5f:93:
ea:8b:a4:72:4f:df:f4:37:b4:b2:41:ee:f7:12:1d:c1:93:25:
05:a4:71:fc:57:46:ca:93:e9:62:56:97:fb:c3:06:82:7b:9a:
8d:35:d9:96:15:5e:f1:fd:f1:23:8e:97:9e:8f:3c:93:c9:e9:
47:09:01:61:fa:14:20:0d:fe:83:6b:8b:d3:d7:d5:3a:1e:c0:
07:20:bc:48:22:52:58:d1:39:43:7b:d1:ed:f9:06:79:cf:11:
60:a2:26:e8:e1:bb:39:c3:3f:1d:db:90:60:ee:e5:79:6d:33:
f0:40:47:27:32:3f:a5:f0:e2:8e:49:d8:ab:15:47:2b:13:a7:
87:7c:98:7e:3e:5c:d7:35:e2:af:55:f7:1b:02:0f:f8:5c:1a:
08:d0:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:31 2025 by rpki-client