Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6EC6BE2F45211EFB198E04B762E951A.roa
File: E6EC6BE2F45211EFB198E04B762E951A.roa (raw, json)
Hash identifier: 6KVJTRRGm6kBK51aTmQ24Mgt+aE7ixPsLCksk0BuXOQ=
Subject key identifier: 7D:2A:7F:63:41:77:75:7B:A1:58:12:F9:D8:CD:59:4F:7A:A6:E5:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013410
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6EC6BE2F45211EFB198E04B762E951A.roa
Signing time: Wed 26 Feb 2025 15:03:57 +0000
ROA not before: Wed 26 Feb 2025 15:03:53 +0000
ROA not after: Thu 19 Feb 2026 15:03:53 +0000
asID: 984
IP address blocks: 156.252.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78864 (0x13410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:03:53 2025 GMT
Not After : Feb 19 15:03:53 2026 GMT
Subject: CN=67bf2d5d-d498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e9:b9:e8:33:06:1e:ac:df:5a:d1:b4:11:3a:
c1:ee:f2:07:2e:e9:51:e3:27:d0:cb:00:d1:fa:d0:
30:44:bb:e5:f7:78:51:f1:17:41:ed:40:17:04:e9:
3d:d0:f7:0e:f2:ac:e8:6a:02:2e:d4:16:e4:88:ae:
5b:a7:a2:09:87:df:23:6c:e5:c9:2a:94:0d:0c:cb:
6d:55:03:d8:4f:54:77:59:86:02:2c:48:84:09:8e:
fb:b1:17:f4:08:b5:85:03:a1:cf:bf:d0:89:0d:10:
99:5c:5a:33:ef:e4:4e:64:94:15:66:b3:10:01:df:
a4:48:46:1d:da:cc:6f:9a:78:cd:66:1c:24:cd:ba:
d5:a7:59:b7:a5:54:97:16:50:d6:50:85:9b:e9:00:
14:ca:23:c5:40:cf:c6:ed:48:cb:36:a5:26:65:c6:
b3:85:7c:c6:70:d7:be:dd:26:e4:cb:e4:a2:54:c1:
e8:cc:57:17:55:f2:89:48:23:14:38:b1:16:e9:59:
ba:8a:20:76:44:cf:71:6c:60:e6:fa:d9:a6:62:07:
52:89:9b:7f:79:74:29:85:e5:a0:72:9c:46:ee:3d:
66:66:01:79:9d:7b:4d:87:ae:d4:b5:d6:c4:cc:d0:
c8:6f:2d:1e:38:6e:2d:ec:48:9e:6a:7e:06:e9:cd:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2A:7F:63:41:77:75:7B:A1:58:12:F9:D8:CD:59:4F:7A:A6:E5:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6EC6BE2F45211EFB198E04B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.205.0/24
Signature Algorithm: sha256WithRSAEncryption
09:31:4f:db:b6:4a:bb:23:19:eb:4e:c5:07:4a:d3:0b:c2:70:
53:2b:2c:0b:b5:15:1a:9c:b1:df:e8:49:66:3f:2c:8a:88:79:
d3:fb:d7:94:84:fb:dc:8f:76:45:a7:6c:0c:4f:6f:88:71:fd:
51:ed:e9:90:84:56:86:c1:8d:40:f3:ec:fd:93:f0:99:73:ba:
f3:ba:76:30:56:e4:2d:64:ad:c4:a1:47:ff:9a:22:31:a0:d1:
fe:0b:0b:02:5d:07:6a:25:4b:28:d0:18:8f:f4:a4:a9:e7:48:
2e:2f:0f:99:ba:d2:a2:4c:34:ed:15:bf:09:c7:9b:1c:97:0c:
8b:be:47:5a:3e:a6:c1:57:58:e1:e5:63:b3:65:c6:8a:33:3f:
1e:1e:5c:e6:3d:6c:88:90:bb:e3:36:cc:3c:7c:b5:2c:fe:24:
27:c7:95:73:86:41:ba:65:51:f4:d1:35:c7:f8:b8:15:97:f7:
00:07:e3:17:2a:d5:ec:d6:07:9e:ef:13:3c:58:0f:cc:da:91:
18:02:9a:ca:78:3a:a3:80:e4:3c:be:eb:4c:17:ea:83:3a:ed:
02:04:6f:43:65:f4:98:13:3d:73:e6:bd:a4:91:95:39:95:af:
5d:9a:6f:e9:30:6d:97:bc:15:1b:da:ce:d3:f6:2c:8f:75:bd:
3e:11:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:58 2025 by rpki-client