Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E80AA840F42011EF873BA669762E951A.roa
File: E80AA840F42011EF873BA669762E951A.roa (raw, json)
Hash identifier: 0T2lkYqKmfm3xr6wmlJEJNn5L+qS4YqKRgZIoBojhUg=
Subject key identifier: 8E:85:59:85:4A:3A:37:74:6F:3D:96:36:3D:86:6A:2D:1B:40:3A:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013048
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E80AA840F42011EF873BA669762E951A.roa
Signing time: Wed 26 Feb 2025 09:06:04 +0000
ROA not before: Wed 26 Feb 2025 09:06:00 +0000
ROA not after: Thu 19 Feb 2026 09:06:00 +0000
asID: 984
IP address blocks: 156.252.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77896 (0x13048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:06:00 2025 GMT
Not After : Feb 19 09:06:00 2026 GMT
Subject: CN=67bed97c-69c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:c8:89:02:38:16:18:a0:f5:71:bc:2a:be:
74:9d:b5:0e:95:25:12:4c:76:db:40:f3:1e:53:d9:
b9:17:af:6a:ed:90:79:81:7e:92:49:56:3e:84:ef:
fa:3b:c9:d6:03:0c:2c:5d:66:fd:47:7c:40:fc:5e:
6c:c1:e0:41:fe:00:6d:bc:cf:27:e9:8f:65:7e:ca:
0e:de:fe:c9:fd:a5:a9:c4:e5:d7:58:1a:76:d0:72:
2e:59:75:09:1e:ea:05:44:69:e8:52:41:07:af:bf:
d8:f9:e1:1f:0f:68:77:ae:ac:a2:8c:32:40:df:f5:
26:47:f6:5d:54:a1:2a:96:d2:97:f6:cc:cf:45:39:
f4:fd:94:39:72:25:7f:0e:85:29:2d:46:c6:31:f7:
bc:ce:6e:96:a2:7a:b9:c3:53:6e:f8:9e:4e:63:b0:
64:12:d4:4e:91:1e:36:81:c2:99:b1:b7:50:78:a4:
5a:11:0d:d5:7d:5b:23:9d:18:1a:2b:b4:93:05:dc:
cc:12:81:28:8c:6f:ec:68:c1:05:b8:ff:2b:c4:73:
8a:25:83:cf:56:49:85:28:eb:0a:85:ff:f1:8f:82:
8b:d0:20:2f:05:d3:18:7b:d7:6b:0b:a0:4f:91:ae:
e5:16:f9:47:9b:c1:d1:1b:46:60:07:c6:a8:4e:0f:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:59:85:4A:3A:37:74:6F:3D:96:36:3D:86:6A:2D:1B:40:3A:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E80AA840F42011EF873BA669762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:2b:f2:b0:2c:e7:a8:e8:d3:80:3e:6f:eb:1d:eb:9f:53:c6:
d2:44:77:6c:14:7b:a2:51:ac:ec:a7:66:1b:f1:c3:5b:e3:16:
90:4f:f2:eb:96:07:74:92:56:21:2d:a9:87:b1:7b:db:27:7a:
0c:f0:88:08:fc:04:4a:b3:dc:d0:6f:51:d9:d9:ab:67:13:22:
8a:e9:9a:e9:28:1e:f2:be:54:11:c7:66:41:8f:0c:f1:4a:d5:
59:02:c3:3b:19:5b:6d:a2:28:18:da:24:39:6b:1a:d5:c1:20:
7f:03:cf:36:fc:dc:98:e1:fa:dc:9f:79:31:f6:c5:b7:83:09:
ab:19:22:36:c7:72:06:f2:3f:72:8c:8a:ae:9c:4a:c9:ae:0a:
3b:dd:47:88:9d:da:9b:98:b8:bc:72:3f:a5:c9:4a:b2:81:44:
70:17:2a:1d:f8:c3:56:0d:cd:fb:e6:d4:86:bb:88:fa:e9:ea:
70:6e:b9:b1:06:2c:bc:c3:a5:d9:57:57:06:6c:09:03:77:67:
a6:14:f2:0b:c8:b5:42:72:34:7a:41:92:2d:d4:e5:ea:01:ee:
28:df:6b:96:78:32:9f:f7:1c:f6:7d:1a:11:66:27:9c:21:c0:
f5:a2:2a:bd:b6:8a:94:47:34:d8:75:be:00:7f:09:95:a4:2b:
e8:14:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:43 2025 by rpki-client