Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC2E5894096211F09BCA3793762E951A.roa
File: DC2E5894096211F09BCA3793762E951A.roa (raw, json)
Hash identifier: k+crCiGNBTnOgmpgXWAMNxvIypNxfNDoaUscL1lHRU0=
Subject key identifier: 26:43:6F:C2:47:FF:55:DB:63:77:46:BA:B0:2D:A2:EC:8A:BD:44:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014809
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC2E5894096211F09BCA3793762E951A.roa
Signing time: Tue 25 Mar 2025 10:21:05 +0000
ROA not before: Tue 25 Mar 2025 10:21:01 +0000
ROA not after: Sat 17 May 2025 10:21:01 +0000
asID: 55320
IP address blocks: 156.244.23.0/24 maxlen: 24
156.244.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83977 (0x14809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 10:21:01 2025 GMT
Not After : May 17 10:21:01 2025 GMT
Subject: CN=67e28391-e9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:63:1b:c0:8b:25:2d:3e:ec:d6:2c:3d:8e:
df:06:84:67:9d:60:b0:a7:d3:12:de:70:64:0e:cc:
8b:9c:6a:dc:79:59:bd:81:c9:f8:be:0d:14:5f:65:
72:bd:51:76:c1:82:47:ff:ca:8d:7b:06:f1:8b:b9:
15:d0:bb:c1:f5:4c:e2:ca:83:83:0e:5f:c5:b5:c2:
19:1e:4b:d6:b9:89:31:6c:1d:f5:76:f8:92:42:2e:
0a:c4:00:b5:b8:11:0c:1f:23:12:47:ad:04:ce:25:
77:ec:18:59:4a:ea:81:cb:bd:76:1b:1f:69:50:e9:
d5:6d:5d:b1:ab:be:91:9b:4d:01:32:c9:f5:db:0e:
ed:cc:14:69:05:e6:77:4b:2f:25:61:05:fa:be:06:
07:32:bb:c0:e7:1b:81:07:2d:82:ec:54:72:ea:e0:
ea:8b:5c:8f:a1:29:90:4b:d7:7a:29:ec:9d:b7:14:
7e:ea:f7:cf:d1:14:25:68:7b:18:dc:4d:0e:b0:8b:
29:c8:36:86:ad:b3:e1:21:89:1f:2c:dd:b7:7c:57:
0e:ce:71:8d:be:90:61:0d:43:4d:62:7f:50:6f:dd:
83:c2:52:82:b5:7a:2a:01:47:ce:a8:a6:ea:28:08:
0f:3c:f4:7d:b6:dc:0e:a8:9e:7d:cf:af:f5:22:1f:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:43:6F:C2:47:FF:55:DB:63:77:46:BA:B0:2D:A2:EC:8A:BD:44:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC2E5894096211F09BCA3793762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0-156.244.24.255
Signature Algorithm: sha256WithRSAEncryption
43:1f:12:ee:7d:5a:45:6a:3d:1f:dc:a4:ce:42:24:d2:af:42:
a5:a4:d1:da:da:60:b2:2e:a1:83:12:97:dd:d3:ce:48:98:0e:
68:c6:32:4a:e3:fc:cb:3b:50:a2:9f:6d:06:2b:5b:11:22:de:
0e:0f:6f:ac:76:19:4d:0e:cc:e3:09:39:7f:f0:2c:28:8c:f2:
a4:bb:d4:50:14:bb:5e:0a:d5:68:39:38:e7:af:bc:e5:d5:45:
18:09:33:dc:6a:ec:8b:06:33:d8:45:cf:a3:45:8c:49:f7:5f:
6a:b2:9e:2f:9f:77:27:21:42:dd:92:b1:27:47:d7:f4:74:5f:
b4:29:bf:5b:64:91:0b:5d:aa:6c:25:4b:70:78:4e:9a:cc:0f:
64:6b:cb:87:85:f3:be:48:b3:b8:d9:27:5b:e4:f5:78:a0:be:
08:04:da:27:91:80:7e:fa:8a:bc:4a:b9:a9:ad:2c:9a:f8:06:
1d:da:21:d0:2e:db:bd:b4:d5:f1:20:6f:39:c5:19:e5:15:ea:
e5:8b:53:15:c3:5f:03:03:7e:32:d6:d1:11:9f:53:56:5e:dc:
18:17:9e:9a:0e:57:06:c1:16:87:80:37:24:2f:60:85:d6:43:
20:a3:e5:45:1e:bd:29:08:ae:76:c3:ea:55:14:c1:bd:05:6b:
22:d7:39:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:53 2025 by rpki-client