Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8F4BD1AE53611EFB2F0E666762E951A.roa
File: F8F4BD1AE53611EFB2F0E666762E951A.roa (raw, json)
Hash identifier: OtismCXexGJTmUBCHW4+H/jidYkv64vO4/lC9JK6aGQ=
Subject key identifier: A4:F7:B5:9D:0D:68:BA:4C:FE:9A:A0:91:01:E1:A8:7C:26:10:9A:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8F4BD1AE53611EFB2F0E666762E951A.roa
Signing time: Fri 07 Feb 2025 09:36:14 +0000
ROA not before: Fri 07 Feb 2025 09:36:10 +0000
ROA not after: Mon 13 Dec 2027 09:36:10 +0000
asID: 17561
IP address blocks: 156.230.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72891 (0x11cbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 09:36:10 2025 GMT
Not After : Dec 13 09:36:10 2027 GMT
Subject: CN=67a5d40e-95ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cb:9b:4d:ba:24:e9:66:2f:2e:a4:6a:2f:de:
30:f8:65:13:c8:05:d6:7c:2a:f8:ee:a2:47:08:3b:
0f:82:6a:07:3d:09:92:eb:c4:99:64:a3:3e:1a:3d:
6d:13:b4:95:15:19:67:3b:ad:77:8b:69:52:5b:40:
7d:75:78:c9:49:f0:28:72:38:7b:47:f5:d3:c2:56:
f1:34:c4:c9:50:b9:72:d8:6b:55:c8:62:eb:40:c0:
0f:fe:4d:9e:ac:03:29:0a:48:36:06:16:9a:bb:38:
96:8d:5e:b7:36:8c:e9:7a:37:84:b1:fc:84:ba:23:
09:56:70:c5:48:ed:c8:e3:f5:f8:06:f7:d8:4e:ea:
65:42:6c:22:8d:e4:7f:34:c2:7a:8b:ea:0b:89:85:
64:b9:64:72:1a:d0:a6:f5:8e:35:9f:90:80:1d:8b:
dd:f6:f1:39:3a:d0:62:01:5d:a6:c3:b3:88:49:46:
cf:7d:06:5a:62:59:66:f5:30:54:cb:42:ea:59:6c:
80:7b:1c:4e:47:26:bb:a9:6d:46:47:22:98:d4:65:
3c:47:94:2c:f9:d8:d1:1b:26:3e:93:4b:1a:6a:c9:
a5:9c:35:d1:ec:14:2a:07:9f:8e:9a:5f:cd:5e:d3:
cf:0c:ef:50:b2:3a:4e:8d:48:62:d5:96:c4:4f:42:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F7:B5:9D:0D:68:BA:4C:FE:9A:A0:91:01:E1:A8:7C:26:10:9A:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8F4BD1AE53611EFB2F0E666762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.133.0/24
Signature Algorithm: sha256WithRSAEncryption
25:55:89:fc:2e:34:db:6c:81:f7:83:15:85:01:91:19:01:c8:
71:7f:5f:0a:7a:f0:55:59:e1:ab:a3:7e:72:47:38:b4:59:e4:
2a:59:2a:49:81:fb:5f:ad:4c:20:10:c6:d1:81:7c:51:e9:ad:
a5:d4:69:92:3e:ac:fa:6e:f7:b4:8a:4c:07:c6:fc:8f:ad:79:
91:4b:50:1f:68:92:e0:cc:59:73:76:52:93:cf:4e:50:c0:01:
37:90:70:4f:04:1a:a0:8d:d1:8f:72:df:e0:0d:16:23:20:4c:
ca:8d:bc:c0:22:e4:a3:57:e4:6e:ad:ad:a1:0b:20:ac:05:c3:
a1:cc:e0:09:de:08:08:58:35:3d:ad:58:91:f0:d2:73:ab:75:
2d:24:4e:b0:64:ec:1c:05:cc:38:12:21:f6:21:0f:91:9f:a8:
01:80:f5:6d:f1:b7:61:7b:01:24:a7:10:19:29:94:dd:95:a6:
14:92:11:be:f9:d5:82:6c:93:8c:8d:30:4b:f1:9c:6d:db:b9:
7b:44:f5:60:1a:95:56:ce:d9:95:98:bc:17:69:9d:23:27:12:
95:66:6e:ce:53:78:c8:b7:c7:3c:6b:e1:53:c4:78:e8:14:54:
2f:18:52:4d:c8:4b:26:28:c3:f4:2d:3c:7a:f9:7d:f7:b9:74:
4e:85:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:00 2025 by rpki-client