Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5C59A70057511F08024F699762E951A.roa
File: E5C59A70057511F08024F699762E951A.roa (raw, json)
Hash identifier: /a0lE02gfEFwBaddz1EQ+2EpWhuYXD8LemQ3FynGOFc=
Subject key identifier: A5:BE:EE:3D:C9:86:90:80:64:5B:E8:5B:60:54:BD:DA:26:4D:5B:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01471E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5C59A70057511F08024F699762E951A.roa
Signing time: Thu 20 Mar 2025 10:27:17 +0000
ROA not before: Thu 20 Mar 2025 10:27:13 +0000
ROA not after: Wed 09 Apr 2025 10:27:13 +0000
asID: 55020
IP address blocks: 156.241.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83742 (0x1471e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 10:27:13 2025 GMT
Not After : Apr 9 10:27:13 2025 GMT
Subject: CN=67dbed85-912e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:1c:f0:74:a5:34:80:ac:80:ff:b9:78:0a:
63:a1:f7:4d:79:85:bc:52:5c:a5:c4:e0:73:03:0a:
c5:0f:cf:c9:31:a0:9c:59:43:6d:25:30:1a:29:cc:
f2:b9:2f:d9:84:b7:62:4c:ef:4d:2f:2d:0b:81:b1:
ca:cb:4d:75:04:78:73:4b:23:fd:f2:01:6c:33:de:
92:8a:15:4f:c2:db:5d:5e:1d:08:ca:49:c9:cc:cc:
70:7b:fc:9c:aa:97:d9:10:2c:a3:20:7a:ff:db:53:
36:3b:7d:94:11:6c:34:27:62:af:54:83:c9:48:82:
e1:c4:7a:22:a9:d9:03:61:a0:21:67:df:99:12:34:
24:94:bf:9b:5e:4f:a1:1f:fe:61:d4:de:84:f5:81:
0f:37:d0:6e:4e:83:99:cb:37:4a:cd:c0:77:a2:be:
ab:02:40:bc:3f:8d:cf:be:50:78:af:2e:6c:76:b5:
ff:6c:b8:f0:ac:7f:78:69:72:22:60:5c:5e:f1:f9:
e8:1b:87:10:61:46:63:c8:0e:94:10:81:41:f4:4c:
0e:fd:68:c3:7d:91:d0:91:55:3e:24:71:ea:12:1c:
4e:1c:bb:23:3e:55:fe:17:8f:8e:3b:8b:5a:0b:94:
39:11:f9:d1:31:3c:5d:70:24:1a:86:f9:dc:53:ce:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:EE:3D:C9:86:90:80:64:5B:E8:5B:60:54:BD:DA:26:4D:5B:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5C59A70057511F08024F699762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.139.0/24
Signature Algorithm: sha256WithRSAEncryption
33:6d:a6:f8:93:6a:e4:b7:98:a8:98:0a:01:43:1b:46:d2:ac:
23:c4:bc:e2:21:b6:d3:c3:dd:d7:6f:1b:3c:39:bc:3b:c8:9a:
41:15:b0:c5:a0:f3:9d:29:ab:23:54:31:d0:63:be:82:af:3e:
60:ac:4c:20:97:1a:7f:26:17:b2:2a:0f:ff:82:06:1e:59:35:
d9:b9:b4:89:b9:c2:94:73:d6:6f:d1:de:34:de:db:15:a6:b4:
ac:74:a0:f0:10:fe:b9:74:9f:ee:8f:f9:74:52:0e:e5:c5:a0:
3b:a0:20:99:91:cb:31:3d:83:58:13:2a:3c:b6:96:35:a5:1d:
c0:b7:2c:0b:29:6f:88:cf:a8:d7:f6:81:33:ad:43:dc:f7:a7:
83:da:8e:17:e5:9d:de:18:5f:b5:b1:fe:ab:3b:5c:ad:f8:e8:
ba:a7:a1:ff:21:da:ce:3c:06:18:d6:a5:c4:ee:39:08:54:62:
2c:e1:94:96:b4:f2:a7:89:27:6b:c5:c3:36:ae:88:24:28:ae:
9a:db:89:3c:f9:84:7c:7b:cf:96:45:62:86:33:90:29:18:c8:
df:7d:30:58:4c:29:cd:f8:40:d9:77:d3:8b:ed:14:99:0c:33:
c5:55:0c:a3:9e:40:87:ed:7a:14:f7:4a:68:38:a0:2f:43:56:
a9:7b:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:35 2025 by rpki-client