Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF9BD804F80911EF95FE36B4762E951A.roa
File: DF9BD804F80911EF95FE36B4762E951A.roa (raw, json)
Hash identifier: v9gcQc6k1KSe9X8qFWfXfqPeIjeAR3PmHQ/zYy3BrT0=
Subject key identifier: 90:0E:B1:0E:F1:F4:89:88:F2:20:17:57:43:AB:FA:3A:45:D6:11:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0140C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF9BD804F80911EF95FE36B4762E951A.roa
Signing time: Mon 03 Mar 2025 08:31:16 +0000
ROA not before: Mon 03 Mar 2025 08:31:12 +0000
ROA not after: Mon 21 Apr 2025 08:31:12 +0000
asID: 63139
IP address blocks: 156.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82121 (0x140c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 08:31:12 2025 GMT
Not After : Apr 21 08:31:12 2025 GMT
Subject: CN=67c568d4-4da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:a0:86:45:51:b7:e6:86:3f:e0:18:61:06:
27:f9:e0:06:9c:6f:14:63:ef:47:35:9f:89:48:ce:
e8:22:ab:12:8e:f3:b2:01:bd:3d:bc:95:3e:70:a0:
6d:48:62:45:eb:69:8a:82:fd:97:d1:ec:ea:ae:6a:
9d:03:8a:83:57:ef:03:ec:62:5b:f6:f5:08:eb:8b:
cc:6f:0d:6b:94:2b:ef:f9:d2:2c:0d:27:e2:1a:73:
42:a3:f8:51:86:d8:1f:b3:d6:c2:81:75:6a:fa:c8:
67:bd:52:b3:ee:68:bb:51:99:d7:f2:42:da:95:ca:
dd:3a:31:de:16:17:05:17:84:d6:cc:ed:c1:e4:e9:
4b:44:3d:1b:2e:42:58:62:3b:26:4b:39:70:8c:7b:
24:44:ce:3a:da:96:6c:0a:ec:21:d2:1c:0e:7a:8f:
e9:43:32:9e:dd:a4:9f:78:72:e9:e3:03:18:3d:e2:
d1:68:72:84:ed:2b:ff:82:e5:d2:9d:20:3b:42:67:
8c:df:39:e8:03:e4:59:a4:7d:1a:89:6a:a9:ae:53:
b2:d1:7e:98:bd:88:4f:91:8d:b1:24:ab:1c:38:a0:
63:d5:9f:31:02:2e:2e:5c:b8:dc:aa:0b:3d:56:82:
bb:c9:1f:ae:56:10:33:99:7e:bc:48:e0:44:2f:df:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0E:B1:0E:F1:F4:89:88:F2:20:17:57:43:AB:FA:3A:45:D6:11:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF9BD804F80911EF95FE36B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3b:6d:dd:ec:67:62:d0:85:56:dc:32:d0:8a:bf:e1:93:60:
d4:ad:b5:8d:d3:6e:25:48:7d:2c:08:6c:6b:5e:ff:50:2c:2e:
ba:6f:5f:8f:ff:90:a7:46:c9:5c:24:b6:67:89:39:72:5f:d0:
b5:d0:39:b0:9e:64:df:31:a9:60:48:2f:07:6d:77:c9:b0:e3:
1a:e6:b9:47:30:e1:6e:82:bf:95:78:46:ab:4b:41:15:13:39:
be:7d:da:cc:69:0d:72:0c:73:d7:80:62:eb:0d:52:65:b6:6a:
4a:6d:48:cc:d5:56:ae:71:a9:da:c6:71:be:8b:52:86:5b:fe:
24:84:9b:5c:ab:ce:7c:3c:4d:8d:db:06:48:9b:86:72:31:36:
62:1f:15:ef:72:12:62:32:28:55:e5:48:32:ce:f8:f3:0f:c4:
25:06:49:f4:b0:87:a5:9c:46:54:8a:98:40:17:68:df:9d:4a:
3c:e0:1d:b2:81:9d:ac:f8:52:3b:eb:d0:80:ee:7d:72:f3:d8:
c1:6a:14:4a:51:11:0d:66:7c:61:f3:11:39:f3:28:66:14:f2:
18:76:99:e1:c7:5a:52:03:a8:dc:2a:70:9c:50:c0:d6:5a:0c:
74:a2:98:73:b8:aa:37:c7:01:9d:94:b5:61:39:89:45:93:00:
67:c3:e7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:56 2025 by rpki-client