Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFBABA30F5E311EF9728D295762E951A.roa
File: DFBABA30F5E311EF9728D295762E951A.roa (raw, json)
Hash identifier: UcMjjX2r9wfzKqvgj2zy557hMoM4LjhQpyjKKsvbeCI=
Subject key identifier: A6:D0:B5:CA:CC:7C:D5:66:38:14:AB:44:C0:6E:FE:38:C9:20:A8:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E7B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFBABA30F5E311EF9728D295762E951A.roa
Signing time: Fri 28 Feb 2025 14:54:13 +0000
ROA not before: Fri 28 Feb 2025 14:54:09 +0000
ROA not after: Sun 13 Apr 2025 14:54:09 +0000
asID: 138915
IP address blocks: 156.244.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81531 (0x13e7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 14:54:09 2025 GMT
Not After : Apr 13 14:54:09 2025 GMT
Subject: CN=67c1ce15-7c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:ce:18:8c:96:84:eb:37:98:18:79:40:b5:
c3:73:bf:66:a9:4a:56:15:3e:7a:cf:e6:cf:87:df:
ef:56:cb:d0:a7:2f:5e:44:b7:b4:1c:5e:e5:32:62:
8c:e3:4d:af:ad:d5:4d:84:c6:99:32:18:7c:83:cf:
06:6c:c8:37:28:16:e2:6b:b8:6d:79:d8:08:38:c5:
5c:0a:70:01:07:f0:47:fd:69:91:d4:b7:3f:dd:58:
b7:00:77:26:73:f9:74:e1:f0:94:22:e5:56:58:40:
b1:9c:d0:80:27:a3:7b:e7:42:c4:46:67:3e:3e:17:
21:d5:5a:6a:a4:01:95:29:3a:e2:41:a0:98:9c:f7:
af:7e:3b:91:cb:2a:95:05:4e:c6:5e:2d:f3:44:58:
a7:86:08:d6:c5:44:82:87:ac:cb:c7:5a:07:d1:fe:
93:a1:8c:fc:b5:df:48:6b:45:f9:19:35:ed:88:89:
85:b4:4a:88:4a:9c:c9:09:cc:3b:5f:11:30:c8:f7:
a9:b3:46:5a:dc:ac:b8:85:2d:88:84:2e:08:e8:6e:
f4:ff:f8:5c:58:48:67:c0:5c:ca:2c:83:70:7d:46:
5a:66:58:33:d9:7d:c1:80:56:6f:d6:e6:aa:7b:3e:
46:3f:e2:81:79:e4:f7:e5:2b:d2:3d:90:d0:e2:90:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D0:B5:CA:CC:7C:D5:66:38:14:AB:44:C0:6E:FE:38:C9:20:A8:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFBABA30F5E311EF9728D295762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9c:14:60:7f:64:a7:32:b1:f2:8e:a9:1b:c0:e0:b7:56:70:
bc:5d:cc:6a:4a:96:b7:2f:3f:bd:4e:3f:52:b3:33:b9:bd:74:
9f:7f:94:90:b5:03:43:25:c9:bc:f8:0c:c4:d2:05:f2:96:79:
67:65:45:1b:4f:ce:96:6c:6c:f4:03:79:fb:aa:a7:9b:8e:c3:
77:82:dd:58:e1:76:b8:9a:fc:84:57:26:62:eb:16:ab:86:c3:
5b:9f:06:f5:fc:2f:5e:ce:a8:83:32:3d:e0:d4:49:df:46:73:
e6:46:ee:37:dd:f0:56:5b:6a:c4:6d:26:99:62:7a:59:65:ed:
e9:92:82:2d:73:b2:ab:a0:39:69:69:71:8e:99:44:9b:0a:ae:
58:6e:8b:f0:6e:05:5c:b8:a9:b2:10:1f:6b:b5:9f:2b:8f:9a:
b5:49:e4:ea:f0:ec:c3:98:0c:3f:b7:1c:6f:2e:58:da:95:0d:
11:d6:2f:91:4c:be:ba:24:24:18:43:77:f3:05:03:ae:a1:74:
16:4e:71:b1:54:44:fc:d7:8c:eb:3c:69:98:51:cb:76:9d:aa:
80:e5:12:7c:d7:9d:5b:4b:8b:83:82:e4:40:68:13:fd:9d:a4:
92:54:58:fe:41:e5:3a:73:25:cb:21:50:69:60:1d:d0:8f:15:
4b:78:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:11 2025 by rpki-client