Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F11F23DCF44511EF9C79596E762E951A.roa
File: F11F23DCF44511EF9C79596E762E951A.roa (raw, json)
Hash identifier: HCI8xnruS94Ljem5hI3mx6zf0+CFo0gN9mBqp5tV4ew=
Subject key identifier: FF:A8:73:21:12:BA:D9:8C:06:9B:1D:E8:F8:76:33:A3:2C:A3:AC:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01332C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F11F23DCF44511EF9C79596E762E951A.roa
Signing time: Wed 26 Feb 2025 13:31:11 +0000
ROA not before: Wed 26 Feb 2025 13:31:07 +0000
ROA not after: Thu 19 Feb 2026 13:31:07 +0000
asID: 984
IP address blocks: 156.231.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78636 (0x1332c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:31:07 2025 GMT
Not After : Feb 19 13:31:07 2026 GMT
Subject: CN=67bf179f-f05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:58:f0:e7:17:66:7e:ee:e4:f0:70:41:b7:
ad:40:d7:55:02:c1:3d:9e:c0:42:86:44:3b:29:5f:
68:91:d7:38:f2:3c:3a:31:a0:14:4b:3a:c6:e0:e1:
46:78:17:1c:d2:9d:a3:8d:66:b4:51:47:68:71:1e:
91:b2:33:dd:7b:a9:6b:32:49:ce:00:c8:d9:f1:0e:
4e:d4:42:3e:eb:1d:a6:b6:65:21:c6:8e:27:f0:05:
10:23:64:eb:bc:ff:7e:fa:9f:16:7a:84:f5:6b:de:
59:0d:39:1c:5f:9c:19:a9:36:7a:19:e1:22:e5:92:
55:66:ad:4c:c0:5c:2a:18:a9:1c:a2:a3:e1:7d:f8:
fe:ba:b4:bf:08:54:4b:ef:97:59:38:f7:a9:96:a5:
3e:80:9b:28:bf:88:9e:dd:8a:a6:da:51:36:ab:01:
bc:bc:f1:62:50:bf:bb:a2:c9:bd:2c:c9:f0:7a:a5:
c2:3a:96:17:f8:b6:ed:2e:e8:74:b4:b7:7b:7f:3e:
37:9d:ba:c0:46:c9:67:99:86:c9:11:be:44:e9:71:
12:af:f6:bb:50:5b:67:d4:6c:57:44:26:4f:0e:cc:
69:78:39:f1:eb:92:8e:b6:11:9a:87:72:42:b0:74:
e2:3f:6b:c7:f1:5e:b3:7a:08:fc:8a:d7:18:eb:c0:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A8:73:21:12:BA:D9:8C:06:9B:1D:E8:F8:76:33:A3:2C:A3:AC:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F11F23DCF44511EF9C79596E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4e:14:04:cd:40:60:9b:41:a5:6e:47:57:e3:6b:33:55:11:
e3:ea:06:99:7a:d6:23:ee:b6:da:5a:d2:84:4f:43:e3:0a:73:
98:46:a6:31:ec:d5:b0:37:fb:e6:86:d2:c3:64:72:12:db:cb:
a4:a7:b9:9b:a3:45:af:0c:13:ad:83:d4:7a:6f:30:f0:b7:0e:
2d:c2:bc:01:88:5f:62:c6:e7:7e:68:68:ac:0f:f3:a1:3e:56:
6e:94:f7:90:f7:00:21:d1:8b:11:ef:8b:94:f5:81:99:e0:6d:
d9:23:db:4b:55:69:33:b1:99:56:fe:81:2c:26:06:7b:83:12:
bc:ce:f5:d8:2e:35:2e:be:29:6a:79:28:56:9c:34:2d:dc:fa:
b0:0e:19:60:64:a4:21:8f:73:ad:77:4b:4d:47:67:81:df:4a:
9b:33:10:9e:37:e9:c0:41:08:2c:00:d8:ef:c3:56:83:9d:47:
95:a2:a6:ca:9d:36:7a:36:05:98:32:e2:3b:d1:10:6d:73:e8:
a1:cc:1e:c1:1a:05:a3:07:be:64:d7:31:d3:a7:cc:80:4e:b2:
96:7e:8c:f6:4d:1c:2f:1c:ac:79:6a:d0:08:17:c0:ad:90:5b:
57:95:48:34:ba:81:1b:b9:17:2b:ec:a0:62:ac:a0:c4:15:ff:
49:11:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:02 2025 by rpki-client