![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F764EE1E499811EF9DA80643762E951A.roa
File: F764EE1E499811EF9DA80643762E951A.roa (raw, json)
Hash identifier: q4nnRk1m2i+SpEu4U77RZ2+56BJaq6RI9MvKnkNbQBg=
Subject key identifier: 79:09:89:F1:C1:ED:F7:11:19:A7:8D:29:06:A4:58:30:6E:77:E8:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F764EE1E499811EF9DA80643762E951A.roa
Signing time: Wed 24 Jul 2024 08:44:41 +0000
ROA not before: Wed 24 Jul 2024 08:44:37 +0000
ROA not after: Sun 26 Jan 2025 08:44:37 +0000
asID: 24875
IP address blocks: 156.249.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40741 (0x9f25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:44:37 2024 GMT
Not After : Jan 26 08:44:37 2025 GMT
Subject: CN=66a0bef8-98e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:e3:ff:f8:21:69:aa:a4:78:72:34:72:4c:
41:fd:69:79:f8:73:fd:5c:6b:e3:22:0d:78:38:df:
84:bb:5b:37:04:04:09:fb:46:dd:ff:5f:28:3b:1d:
bf:a2:7e:d2:40:78:0e:80:22:d5:f0:25:40:40:42:
c5:e2:03:aa:f7:99:0f:cf:6a:84:74:d4:11:02:fc:
9d:01:f8:33:65:0f:d2:39:5f:a9:40:0f:66:ed:18:
10:d5:c3:b3:9a:be:90:3b:b0:2b:a9:c7:48:03:ee:
e3:df:9a:38:26:74:ac:ae:f6:91:83:45:02:4f:00:
30:88:88:3e:a5:c5:cf:21:ec:01:96:4f:23:7a:bd:
ae:54:6d:a4:e0:28:4f:eb:5a:13:de:2b:55:56:c4:
e6:2c:45:ce:a4:d6:4d:0a:4b:49:cc:a2:ac:89:7a:
75:96:94:26:ca:50:1a:65:34:69:3a:fa:a0:53:4e:
42:fd:9f:2e:45:63:15:3e:fb:54:f8:75:68:25:1d:
cb:9b:a2:b8:4e:81:99:2d:78:0b:01:61:05:0f:00:
1e:ee:26:a4:71:3d:46:e2:30:46:dc:bb:b4:f7:6d:
ef:90:01:6e:59:c9:d8:00:17:a6:ed:fa:60:9b:04:
82:5b:e0:8f:22:97:bc:9b:9e:11:e7:ad:5d:a7:0c:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:89:F1:C1:ED:F7:11:19:A7:8D:29:06:A4:58:30:6E:77:E8:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F764EE1E499811EF9DA80643762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9f:3b:a3:13:5f:13:96:71:59:43:6b:c5:81:17:59:cb:f4:
dc:b3:05:6f:ff:ac:5e:83:8d:5b:06:81:e0:7b:3f:d1:87:83:
40:84:33:2d:1b:a1:50:fc:8a:0a:4e:ad:56:51:5b:01:5e:b1:
1d:5d:41:92:79:68:f6:44:18:6d:24:8b:cf:41:3f:ee:59:8e:
97:bf:63:35:2f:23:08:e0:88:81:68:e9:54:49:a5:d2:62:2f:
06:c8:34:70:d4:f3:12:12:5a:0d:3b:ec:20:3b:ab:f5:02:b7:
4a:f8:4c:ac:3d:37:f2:3e:2a:97:16:1e:30:d8:fe:be:ac:9a:
c1:c6:13:f6:88:b5:17:ca:67:f1:6b:2b:90:57:3a:77:79:75:
eb:a1:9f:c5:c7:91:ae:20:a5:a1:3d:57:5f:67:81:9d:ab:e5:
2f:c7:3f:b2:ef:49:57:7e:d0:ed:20:51:15:c5:6c:6c:8e:cf:
fe:bd:07:aa:1e:5c:d9:15:14:8a:f1:fd:f2:60:bd:db:e2:1e:
f7:5b:9d:f0:c0:11:59:f6:93:69:95:60:cf:dd:71:6e:8c:37:
34:71:27:37:cb:2c:aa:12:5e:2c:a8:06:26:73:2e:33:e8:9f:
d8:f0:40:af:d7:82:51:82:96:72:a1:d5:a8:f8:9b:31:ed:7d:
00:b2:18:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:11 2024 by rpki-client on console-ams.rpki-client.org