Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C3E23EFF3111EFA6120445762E951A.roa
File: F8C3E23EFF3111EFA6120445762E951A.roa (raw, json)
Hash identifier: S1n+PYSE2C1buSksbiKYmyoBqm1sutuhjFyfCg112dc=
Subject key identifier: 4C:C8:C4:69:F8:3B:2F:39:14:85:2D:7F:12:22:F6:3C:A4:DF:26:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014551
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C3E23EFF3111EFA6120445762E951A.roa
Signing time: Wed 12 Mar 2025 11:05:56 +0000
ROA not before: Wed 12 Mar 2025 11:05:53 +0000
ROA not after: Thu 24 Apr 2025 11:05:53 +0000
asID: 40065
IP address blocks: 156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83281 (0x14551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 11:05:53 2025 GMT
Not After : Apr 24 11:05:53 2025 GMT
Subject: CN=67d16a94-71ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:cb:8a:46:df:fc:2c:19:4b:cc:4a:b6:35:
89:da:55:b6:ac:2c:4e:5e:c4:8d:51:cf:85:3c:0b:
5b:6b:b3:f6:a1:6e:a0:c3:44:65:c7:d9:c8:82:da:
ca:e3:78:55:69:4b:b4:4a:cc:63:32:48:62:1f:07:
be:49:4c:49:e0:22:7e:71:3d:a6:d1:da:f6:fb:c0:
e5:0c:02:45:1c:23:97:1e:cd:a9:1e:02:c5:db:bc:
ac:58:14:65:2d:a0:38:b3:c5:d9:70:30:ef:b6:ca:
c3:c3:82:ee:f5:fc:07:26:4f:e0:c8:84:35:2a:23:
d5:50:d9:10:a3:e7:31:44:63:4c:a5:9d:a9:c2:3f:
0b:2e:30:54:98:58:d1:fc:b7:10:f9:9b:81:cb:bc:
dc:67:c1:08:48:05:49:51:fe:db:4a:af:96:5e:2d:
11:b0:5a:5b:d9:b9:1c:39:01:fc:7e:50:72:34:db:
2a:39:bc:fb:f4:b1:e0:bc:74:e4:1d:0b:06:1f:56:
b4:23:87:37:fd:6a:a7:80:c1:7e:a7:04:2d:fe:31:
b8:11:6a:bb:d7:d5:4a:1a:15:51:df:7e:a6:57:b1:
58:87:51:a5:4e:1c:58:10:34:2a:d1:dd:d9:50:3e:
69:a0:ad:fc:31:ae:f5:a1:5d:f7:36:f3:34:17:29:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:C4:69:F8:3B:2F:39:14:85:2D:7F:12:22:F6:3C:A4:DF:26:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C3E23EFF3111EFA6120445762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:fa:47:74:d2:01:c7:a4:c0:0d:66:66:b4:56:08:e1:df:e5:
10:69:03:d5:93:da:11:ab:70:7c:9b:a5:4c:47:82:7d:7c:15:
b9:00:33:1f:ed:c1:47:65:e8:2d:ef:b7:16:04:bc:bb:8b:54:
b1:84:5f:f9:68:6e:e6:c9:dc:52:65:21:37:7d:5d:d4:2b:84:
19:3a:6a:eb:28:8b:12:6c:ea:68:16:f3:fe:47:07:c6:5f:f6:
8b:ae:be:7f:3e:54:84:58:5f:ea:e0:05:04:fb:4b:33:e9:84:
79:75:bb:6b:8d:a5:c9:f7:27:ed:86:58:6b:5a:26:6c:ef:c3:
7f:3c:f2:8d:56:4e:be:78:d0:7f:45:46:a3:ee:83:7f:db:3c:
ea:f3:79:ad:cf:25:f1:ae:88:a1:9b:d9:28:5e:69:c8:61:06:
0f:2d:30:46:f6:ad:0b:f1:33:e0:6b:0c:52:25:a0:f6:46:b5:
2c:f2:d9:5a:fc:b9:fa:a5:b9:4c:74:f0:34:ea:d9:5d:9a:81:
af:0a:ba:7f:9d:36:36:22:af:45:14:3b:76:d4:7a:3c:26:cf:
f3:63:17:a1:58:25:4a:88:b4:04:86:a1:0f:65:b4:7b:a6:f0:
61:c1:08:14:48:1a:15:96:2e:a4:c7:15:25:f6:fd:d8:18:92:
ed:8c:23:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:29 2025 by rpki-client