Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F671712E03DA11F09BE259B7762E951A.roa
File: F671712E03DA11F09BE259B7762E951A.roa (raw, json)
Hash identifier: cF487XYRs20Ld8xd0zqwqbBV15dnNw4QmzPbPLbGG6k=
Subject key identifier: 62:48:1A:D9:EB:01:B4:03:46:DF:8E:F4:E6:09:B2:AC:DE:09:63:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014685
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F671712E03DA11F09BE259B7762E951A.roa
Signing time: Tue 18 Mar 2025 09:25:42 +0000
ROA not before: Tue 18 Mar 2025 09:25:38 +0000
ROA not after: Wed 23 Apr 2025 09:25:38 +0000
asID: 2914
IP address blocks: 156.238.44.0/24 maxlen: 24
156.238.45.0/24 maxlen: 24
156.238.46.0/24 maxlen: 24
156.238.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83589 (0x14685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 09:25:38 2025 GMT
Not After : Apr 23 09:25:38 2025 GMT
Subject: CN=67d93c16-0524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:31:72:70:8c:cf:f4:28:ea:0d:51:ec:17:3c:
8b:64:f0:d9:d0:95:9d:8f:64:72:ba:2a:1a:3c:0a:
d4:e7:fc:75:b1:83:c7:7d:67:df:f8:90:1c:a4:58:
a0:d1:c2:7d:01:fb:63:81:3c:0f:25:7b:c9:a9:db:
e3:b6:d1:06:b4:20:c9:62:c3:78:d5:3c:28:d5:a7:
ae:f0:6f:65:cd:65:7c:8c:25:4b:36:07:b6:ce:11:
36:d6:4d:d6:ff:e6:77:ad:82:37:c7:c3:60:89:ac:
f0:95:78:e0:ab:9a:7b:5c:50:04:d9:e4:f3:ad:ec:
9d:ae:25:37:a5:bd:3d:5c:50:ff:76:6a:93:42:d6:
1e:74:93:86:39:e0:bd:9f:98:28:5c:71:a0:b8:0c:
8f:e6:78:ee:11:66:fc:0a:f5:e4:82:d2:c0:a8:b9:
51:7d:d2:4d:08:cf:40:ef:6e:cf:b9:53:b1:73:75:
32:3a:79:89:e3:79:b6:3a:35:7c:fa:4d:53:e1:68:
d4:d1:c4:5d:95:99:ba:fd:3b:5c:1b:9e:93:09:42:
d1:da:87:b7:78:4a:39:e7:d8:49:b3:1a:7a:26:0f:
26:11:73:8c:d3:3f:4f:9c:66:5e:b7:93:06:32:1d:
52:ad:77:ce:86:01:3e:74:66:2f:8c:c3:57:e0:53:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:48:1A:D9:EB:01:B4:03:46:DF:8E:F4:E6:09:B2:AC:DE:09:63:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F671712E03DA11F09BE259B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:a6:66:bc:a0:24:e5:2f:c2:72:ee:ff:13:6b:56:a7:0f:ac:
97:56:21:ac:ea:6b:1d:01:f1:e8:97:8b:05:19:b9:68:e9:f8:
57:8e:29:5e:b1:db:95:37:d3:cd:8a:a6:59:56:3a:7a:a5:5c:
25:db:1e:a9:8e:ef:e1:81:c6:8f:ac:fb:28:fc:bd:9d:a7:bd:
d4:58:8b:e9:6f:2f:86:44:7b:fc:3d:d9:0e:98:4e:49:ab:4a:
f5:c0:7b:ca:48:f5:23:cd:1e:d6:99:ec:fe:c8:10:f8:ff:7d:
b4:f8:a6:3c:60:12:2b:90:c2:61:79:2e:bf:15:00:5f:e6:fb:
1f:77:4f:7c:30:75:9f:3c:be:39:a6:2a:96:fd:d2:36:d9:f0:
9c:6e:f8:ab:7b:cd:1d:9b:54:16:82:49:53:ca:a0:82:fe:b8:
4e:75:48:7a:66:d6:f4:ef:20:e0:82:c6:d1:07:10:bd:8b:cf:
5b:cb:0d:a3:57:36:a9:c5:38:f3:80:5e:29:91:62:62:c6:82:
4b:92:2b:29:18:8a:45:58:d0:10:40:a8:c6:07:f5:6a:e9:86:
1f:6b:cc:86:4c:2d:77:d0:43:62:c9:d4:e5:c1:a5:c4:fc:c5:
48:f5:16:2e:52:fd:db:77:f4:87:06:31:29:8d:b1:ac:2b:59:
d3:12:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:54 2025 by rpki-client