Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9326DE6F44A11EF9E9AF392762E951A.roa
File: E9326DE6F44A11EF9E9AF392762E951A.roa (raw, json)
Hash identifier: c4n2e7aPL1qpMRSqZcke6wqL6jJeR8aoCcLX5TRQfr4=
Subject key identifier: BF:13:CC:1E:4A:27:1D:F5:90:49:85:8C:E2:C2:21:E6:24:25:28:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013390
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9326DE6F44A11EF9E9AF392762E951A.roa
Signing time: Wed 26 Feb 2025 14:06:45 +0000
ROA not before: Wed 26 Feb 2025 14:06:41 +0000
ROA not after: Thu 19 Feb 2026 14:06:41 +0000
asID: 984
IP address blocks: 156.252.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78736 (0x13390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:06:41 2025 GMT
Not After : Feb 19 14:06:41 2026 GMT
Subject: CN=67bf1ff5-d34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:91:1f:05:da:6d:c5:ba:11:28:66:c4:f2:
21:74:73:50:b3:19:fd:46:7f:be:5d:22:af:23:e9:
f0:b6:a7:38:fd:d4:42:f9:2d:2b:3c:65:b0:9f:de:
4d:67:23:1b:dd:38:0b:dc:dc:5d:18:39:35:56:d0:
41:f0:7b:d1:3e:13:1c:b2:63:fb:95:c4:34:17:7e:
f6:c4:5b:1e:72:30:4f:dd:2c:b1:08:a2:86:77:dc:
64:59:9b:74:71:bd:37:24:ab:f1:06:f2:be:ab:0d:
08:b4:b0:01:30:e3:0d:fd:1b:07:3f:29:ff:1a:74:
dd:ca:62:03:5b:32:2d:cb:ea:40:4b:53:0d:38:0f:
13:ac:9c:bd:bb:5b:2b:8a:07:7d:dc:8b:c9:0c:9b:
02:e4:0f:05:f4:d9:d6:8d:8e:7a:30:5c:25:73:fc:
61:22:79:7e:69:a6:17:b6:57:32:37:72:6b:58:c0:
a8:3b:a5:44:da:6d:65:bc:48:d2:23:d3:09:9d:0e:
14:de:b9:5d:26:23:8a:c0:1c:7c:ae:20:13:35:43:
ac:0e:ef:3d:f6:14:53:e0:f9:65:76:44:bb:ea:f0:
b1:30:ec:60:61:e2:de:ee:43:51:55:33:7b:1a:d6:
6c:f1:32:bc:a8:09:50:ae:e9:69:51:4b:a2:d9:44:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:13:CC:1E:4A:27:1D:F5:90:49:85:8C:E2:C2:21:E6:24:25:28:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9326DE6F44A11EF9E9AF392762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.184.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4e:a0:e3:7f:0e:4f:23:27:ad:a5:12:3d:28:76:2b:c5:86:
e2:49:b0:cd:20:9d:72:2a:e9:98:cc:a9:80:fe:53:08:c3:db:
56:3f:6b:01:4f:de:b1:b7:bf:e9:72:06:77:8a:2a:40:6e:fa:
e6:b8:0a:92:95:74:fd:ce:7f:8e:9d:c1:28:00:3f:3e:cc:9c:
a2:38:56:0c:6c:8f:32:d6:38:52:4c:65:78:40:4d:08:79:45:
4c:63:af:82:e7:7b:ab:4c:60:e3:90:d0:7b:2f:73:c4:18:fc:
b9:95:a9:6e:84:a3:b3:70:4f:95:ff:84:ed:ea:ca:6c:16:81:
1c:9e:ba:4d:99:ab:22:4f:8a:b2:c8:ff:14:b8:24:bd:48:4b:
be:b7:5a:f9:43:4b:29:c2:ea:43:07:67:6f:1d:57:8b:e5:27:
a6:8f:9d:53:05:d2:bf:9a:5a:ea:a1:a9:48:1a:73:7f:d2:a9:
0c:39:c1:c1:30:d7:d5:69:ab:0d:96:60:47:0d:a7:d9:c7:b7:
ae:13:99:7a:f3:7e:b2:21:35:7b:34:86:af:8d:34:93:81:b1:
82:df:30:9a:bd:98:52:08:77:70:8f:dc:9f:e0:3a:76:7e:90:
c9:67:47:04:bf:60:b5:c1:74:fe:cc:e5:83:65:25:a6:2c:3e:
34:50:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:33 2025 by rpki-client