Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7CF1AE4F1CE11EF9EB32942762E951A.roa
File: F7CF1AE4F1CE11EF9EB32942762E951A.roa (raw, json)
Hash identifier: 1hSvgBEgA0mNlpKdS25snEchWmYlfxbaaSoRR7H128A=
Subject key identifier: B9:F7:AE:18:BB:7E:3D:C8:AB:F6:6C:71:F2:60:94:1E:2C:62:A5:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012AAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7CF1AE4F1CE11EF9EB32942762E951A.roa
Signing time: Sun 23 Feb 2025 10:14:29 +0000
ROA not before: Sun 23 Feb 2025 10:14:26 +0000
ROA not after: Fri 15 Aug 2025 10:14:26 +0000
asID: 55933
IP address blocks: 156.254.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76462 (0x12aae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 23 10:14:26 2025 GMT
Not After : Aug 15 10:14:26 2025 GMT
Subject: CN=67baf505-1f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:9d:82:3d:8d:7a:40:20:38:a9:b6:98:db:
0f:58:c5:17:21:01:ce:aa:ab:bc:99:ad:aa:93:ff:
d7:6f:61:9e:eb:8e:10:a0:26:6e:06:22:75:0c:c2:
24:34:e0:a4:1e:3f:05:20:b6:60:e9:9e:e8:df:b1:
9d:46:31:5f:ae:36:44:e1:7f:dc:38:51:6b:23:6c:
c8:e9:51:84:4d:b3:0a:e4:d0:3f:1f:a8:10:69:94:
e0:f4:fa:46:aa:42:e8:68:66:8b:65:a1:45:c6:10:
76:74:fc:d6:99:ae:16:ab:c8:3e:27:8e:38:94:ee:
7c:f1:04:a9:7e:9e:a4:df:b5:4d:0e:0e:46:8d:ff:
23:20:25:4f:1a:6b:20:2b:15:6f:ca:6d:af:5e:eb:
41:13:22:ca:b9:ac:af:2c:d8:4e:ef:53:84:9e:9c:
73:f1:88:91:84:38:6a:16:17:8c:56:b1:bd:6b:8c:
d7:79:b7:36:b9:4e:dd:f2:fc:58:7b:1d:08:96:d0:
82:33:b8:d9:cc:61:af:6e:d8:77:f3:f1:54:09:b0:
90:db:63:f1:ac:28:8b:2b:50:92:08:79:6c:3b:56:
36:bf:85:6a:18:e7:64:eb:7f:4f:77:a0:0b:4e:c9:
41:8c:50:74:d2:44:96:63:21:3f:41:a4:c7:05:10:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F7:AE:18:BB:7E:3D:C8:AB:F6:6C:71:F2:60:94:1E:2C:62:A5:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7CF1AE4F1CE11EF9EB32942762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.6.0/23
Signature Algorithm: sha256WithRSAEncryption
55:c5:cf:61:00:45:25:4b:1b:65:8c:40:bc:cc:78:01:47:a3:
06:33:43:15:53:54:3e:3b:a3:98:99:36:13:86:9f:09:8b:b5:
08:e1:6b:ee:56:40:b7:87:8e:c0:c6:bb:93:98:d2:d7:38:d7:
b7:9b:6e:d0:a4:2c:43:34:3d:cf:a0:88:cd:81:93:ee:21:2b:
81:f1:e2:a1:2b:46:59:9a:c8:81:7f:c2:f1:3d:b7:f0:78:44:
54:68:38:97:1b:4d:00:f6:cf:b6:2c:ec:75:da:c4:97:2d:be:
5f:e5:d1:49:2b:3f:1b:7d:fc:15:7c:da:2f:a3:65:66:31:51:
2d:48:cc:04:d1:84:4e:8c:6f:39:3d:b3:c5:0b:ce:b4:86:4d:
f3:6e:a5:10:f4:0b:de:b2:1d:33:a1:eb:c4:be:63:77:ab:29:
7d:89:70:a7:9d:71:6e:ab:80:6a:56:0e:c4:5b:f3:6c:0d:53:
65:07:ef:63:48:88:75:6c:64:cb:a3:c0:29:54:ac:ad:5f:90:
b4:40:64:7e:f1:ff:ef:a1:82:61:0c:8e:6c:a2:d8:8b:f0:bb:
32:fb:4e:a8:66:2e:f4:69:ea:da:3b:30:7e:3b:9d:bd:18:49:
42:3b:ce:85:52:65:35:69:1a:e6:b3:b2:48:74:08:cc:56:79:
c1:d8:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:39 2025 by rpki-client