Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE8FA0380CCE11F09661C185762E951A.roa
File: DE8FA0380CCE11F09661C185762E951A.roa (raw, json)
Hash identifier: sfNLWqL8ZStlbaXR3d9yQq1IGIpdMHc3sm/pYAdJH+U=
Subject key identifier: 1E:5F:45:E6:90:D0:EE:FC:71:E3:40:8F:39:95:0A:95:95:94:27:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE8FA0380CCE11F09661C185762E951A.roa
Signing time: Sat 29 Mar 2025 18:51:48 +0000
ROA not before: Sat 29 Mar 2025 18:51:45 +0000
ROA not after: Thu 08 May 2025 18:51:45 +0000
asID: 213636
IP address blocks: 156.229.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84210 (0x148f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 18:51:45 2025 GMT
Not After : May 8 18:51:45 2025 GMT
Subject: CN=67e84144-15f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:ab:0c:5d:27:af:da:cf:fb:a7:64:ca:07:
b6:46:dc:b0:47:83:e7:97:50:74:92:e0:c9:60:59:
b2:6f:06:25:e4:8c:1a:a2:87:ae:96:02:b1:ee:74:
f5:1e:4e:6b:eb:b2:da:74:05:8e:e0:a3:fc:ed:94:
d9:af:ff:ca:7f:d7:8f:6f:94:f7:58:16:ab:4d:cf:
5f:db:b3:80:fb:3c:43:96:6d:70:e8:3b:9d:25:b8:
0f:c6:de:2c:5d:7d:b3:95:a0:fb:0b:7c:3c:c1:dd:
28:89:be:4d:e7:db:16:52:72:a2:24:f0:f1:75:d5:
05:44:32:da:6c:06:1e:4d:47:6a:c8:4a:a8:93:18:
fc:19:d8:fe:1b:d4:f2:c4:0d:b9:70:cd:54:e3:31:
03:ae:22:13:b6:f0:14:84:ab:f5:af:a9:8c:c9:01:
2f:ed:77:d2:b8:f7:78:ad:2d:4e:19:33:64:2d:79:
b9:53:67:fe:cb:2a:a3:ac:c9:61:ee:73:16:ea:4d:
34:2a:cd:36:50:3c:f8:1e:b7:ca:16:4a:5d:06:5d:
20:09:fe:35:67:b8:bc:c2:ea:04:94:eb:47:e4:8c:
20:0d:da:3a:c0:6a:a5:4e:1b:be:af:74:ca:ea:2f:
67:66:a1:18:88:ff:d1:4a:3f:bb:27:46:d4:d2:a1:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5F:45:E6:90:D0:EE:FC:71:E3:40:8F:39:95:0A:95:95:94:27:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE8FA0380CCE11F09661C185762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:71:7f:7e:4f:bc:80:c9:91:7f:b3:c4:c8:87:00:a3:45:37:
2b:e9:54:b2:41:49:ca:68:d5:6c:41:e0:c7:f2:ed:5b:0b:8b:
8d:aa:f1:c3:1e:1f:ed:93:f4:8f:5c:3b:76:e5:74:14:cf:a7:
69:ee:58:2e:9a:64:30:09:0c:35:e9:e4:fc:3d:1e:d0:e8:0a:
04:03:ee:08:40:3d:83:a4:d7:9a:53:e8:39:1e:a0:b7:fd:1a:
0a:e9:f0:17:6f:98:77:01:b2:e7:e2:66:69:92:63:98:d8:c0:
9f:4d:ac:c2:ce:6b:c1:bc:45:8b:20:38:68:b8:be:3c:b7:fd:
1f:3a:35:12:3c:24:9d:d1:f5:61:9d:96:94:58:93:65:c7:c4:
ae:d0:ef:63:fc:ef:4f:8e:85:e8:ce:bb:b4:1b:9d:c1:a8:10:
57:3a:d4:cf:21:10:77:54:ef:78:3c:b5:4a:2e:e8:b1:60:49:
83:1d:ff:6a:1e:3b:1e:fc:4d:26:20:1d:80:57:6a:df:9e:0a:
61:a0:5f:68:64:26:31:ce:4a:ee:75:5b:af:f8:b0:f6:02:56:
7d:8e:e4:f4:08:9d:b3:54:18:bf:fa:1e:51:8c:59:fc:5e:5a:
83:f5:e6:94:ae:42:1f:74:95:f9:27:8f:86:00:4e:8d:69:d2:
51:bd:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:59 2025 by rpki-client