Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0829F04E3A611EF97EC2460762E951A.roa
File: E0829F04E3A611EF97EC2460762E951A.roa (raw, json)
Hash identifier: AuoV9thWtV6vBOnKahpu07qlLTJicu6objLymEu69ig=
Subject key identifier: 87:4C:52:E3:B9:12:85:7A:13:2C:AC:01:18:1F:07:20:95:B9:5B:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011ADF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0829F04E3A611EF97EC2460762E951A.roa
Signing time: Wed 05 Feb 2025 09:52:14 +0000
ROA not before: Wed 05 Feb 2025 09:52:10 +0000
ROA not after: Sat 07 Feb 2026 09:52:10 +0000
asID: 400463
IP address blocks: 156.241.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 24 Feb 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72415 (0x11adf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 5 09:52:10 2025 GMT
Not After : Feb 7 09:52:10 2026 GMT
Subject: CN=67a334ce-e0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:4d:fb:4d:d4:fd:e8:70:3b:cb:41:6e:99:
cf:f1:8c:84:e5:cc:05:27:eb:4c:4c:36:33:86:e4:
1e:b0:8e:49:34:7e:3f:76:a8:1f:90:20:a9:ec:ff:
f9:9b:0a:2d:a0:b3:e3:f8:1a:54:d4:5c:19:2e:83:
a5:de:8e:e4:3c:f5:80:86:14:ca:e3:d2:6e:43:5c:
56:f2:96:28:dd:0b:08:c8:ad:b6:f9:77:6b:ca:36:
65:b7:fb:5b:30:43:81:7f:da:b9:65:97:f0:53:1b:
9f:1c:2b:8e:ae:e9:c4:4b:0b:41:96:ee:2e:1b:9a:
86:ae:ba:ed:00:f8:94:de:10:5c:a1:2a:26:a4:98:
06:0d:5c:3d:0e:0f:c4:57:d0:35:7c:58:3c:70:5b:
6c:72:f3:8b:7d:8f:e9:65:80:d8:1c:bc:0e:59:0c:
1c:6a:7a:14:b0:0a:db:00:94:e0:6a:6a:2a:3b:39:
a5:3c:99:3e:5e:48:d9:f1:0d:53:ed:59:75:2f:17:
7b:f0:07:c1:41:04:69:75:22:66:6f:de:c7:94:2c:
84:b2:2d:b7:50:78:7d:58:f0:70:98:81:ca:5a:7b:
1a:31:1d:9b:73:18:d8:3c:b9:f2:ca:4a:ec:00:38:
95:b0:e0:7a:55:30:72:c4:01:e7:cc:cc:3f:32:fc:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4C:52:E3:B9:12:85:7A:13:2C:AC:01:18:1F:07:20:95:B9:5B:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0829F04E3A611EF97EC2460762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a7:6c:d3:86:4a:66:20:7d:f7:ff:80:50:25:54:a2:41:14:30:
8f:dc:64:ff:2c:7f:3a:43:e7:e4:ce:cb:fa:50:58:93:75:04:
fd:e7:8a:5a:5c:b0:35:fc:a9:53:a7:48:c2:e4:02:7d:f0:38:
57:5f:e5:9f:88:83:ec:4d:a2:65:7d:77:7d:a8:f0:09:1c:7b:
df:33:94:fd:87:81:82:53:df:aa:7f:d0:42:4b:17:69:32:5f:
ce:63:71:47:5b:94:d6:b0:2d:b4:97:50:2a:ea:90:f3:13:b8:
55:ab:75:e5:62:d9:7a:da:2d:06:b5:80:2e:03:c9:fe:7d:f5:
2a:28:d4:20:d8:d4:39:e6:a2:e9:c5:19:9e:cd:cb:d6:56:a4:
0c:36:04:7a:cf:5a:93:54:eb:3b:bc:bc:8b:e1:81:85:03:31:
71:09:21:17:48:4f:18:b2:a2:2e:b9:90:27:7c:94:e1:66:75:
cb:ee:7a:87:4f:03:fc:3f:d6:03:81:20:01:48:3d:6d:ea:13:
26:9d:37:57:14:ff:ae:0d:03:99:d6:64:7c:4a:ea:d9:d2:c6:
70:5c:fd:e5:98:3d:3e:ca:a3:39:22:12:62:2a:ea:c4:f0:84:
00:a6:bc:b4:cd:24:df:ae:fb:5a:84:13:a0:1b:d7:77:c3:59:
11:14:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 03:51:20 2025 by rpki-client