Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAAD6F36F38611EFAF5F424B762E951A.roa
File: FAAD6F36F38611EFAF5F424B762E951A.roa (raw, json)
Hash identifier: kC1XQA9FFM+1En0s1xptRF4RfZvWiu/NdnjEulFjXn0=
Subject key identifier: 91:CC:21:20:C6:11:13:3C:08:9F:8A:94:56:F7:D9:6F:8F:A0:0D:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAAD6F36F38611EFAF5F424B762E951A.roa
Signing time: Tue 25 Feb 2025 14:44:13 +0000
ROA not before: Tue 25 Feb 2025 14:44:09 +0000
ROA not after: Wed 26 Mar 2025 14:44:09 +0000
asID: 152705
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77368 (0x12e38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 14:44:09 2025 GMT
Not After : Mar 26 14:44:09 2025 GMT
Subject: CN=67bdd73d-f091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:1d:b4:3d:45:c7:4e:a6:27:2a:44:01:cf:
2a:7c:35:7e:8c:10:ea:ee:c2:e9:6a:ce:60:07:17:
07:c7:c7:5f:4d:f0:79:57:b6:b5:4b:94:79:42:6a:
02:e9:bd:2e:93:fe:32:41:99:70:72:fb:77:9e:85:
38:6a:83:e3:50:2f:b0:ea:8c:7f:20:d7:57:94:5b:
88:14:1a:8b:26:4f:0b:01:ee:c7:ca:e2:32:b5:87:
de:e4:19:52:6c:80:14:63:e5:52:1d:2c:13:bb:ab:
37:43:eb:52:c2:24:b1:30:dc:04:ca:de:5f:d2:22:
e9:09:31:5c:df:fc:7f:66:0a:67:a6:04:e7:d7:b8:
9c:c8:41:52:87:21:4b:34:56:97:7c:f8:49:23:3f:
26:b3:bc:47:31:81:fa:94:93:88:38:79:90:69:45:
7e:4b:ff:9b:24:48:c6:fd:eb:c0:84:c5:b0:fc:1b:
f3:9f:65:b9:61:69:52:5b:34:71:d1:53:5d:23:33:
15:b9:61:b1:9c:7c:f3:4c:fe:4d:d3:19:55:14:60:
60:73:c5:e9:2d:bd:89:ec:b4:25:be:0b:3d:f3:96:
6e:4d:c4:47:c0:0a:d1:5a:f0:56:77:4c:69:79:8a:
db:09:38:f9:70:d6:72:94:35:2c:89:3d:1b:e7:3c:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CC:21:20:C6:11:13:3C:08:9F:8A:94:56:F7:D9:6F:8F:A0:0D:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAAD6F36F38611EFAF5F424B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:04:cc:7a:c4:46:74:20:b3:d9:a6:5e:cd:d5:60:a4:dd:d9:
62:20:0b:ab:d7:a1:d7:bb:04:d1:b9:2a:41:dc:43:a6:1a:1d:
b6:4a:2e:d2:29:9e:44:5b:b6:d9:f1:c5:af:cb:4c:54:ec:58:
4e:da:a9:f5:fd:45:e3:1d:0c:13:43:35:8b:e3:24:a7:aa:6d:
b6:68:c7:5c:69:03:31:4c:f9:9a:c8:fb:2c:f2:27:b4:87:57:
d2:63:8d:4e:3b:c2:85:9b:a9:ee:63:f6:bf:47:8d:cc:65:65:
8c:49:e0:46:41:95:d7:38:6d:67:45:7d:1d:6e:b6:d1:11:07:
be:84:b0:e1:0c:77:2d:6d:b5:30:ab:ba:01:cf:3c:a9:d5:3f:
42:dd:b5:3d:cb:6a:2d:b7:60:a3:6c:0e:53:fd:fb:e3:15:ea:
e9:ae:62:f5:1f:f4:18:c3:52:87:81:90:7d:bd:c5:be:4d:e7:
1f:80:c1:ad:3e:b3:15:03:0f:ca:74:a9:cb:15:a0:7c:a9:10:
fc:40:0a:3d:b5:2c:74:0d:a4:fd:cf:94:19:b0:dc:b1:e9:ae:
4a:06:12:bb:e6:e7:ec:3f:c8:16:51:41:d5:52:4b:4b:f8:47:
ea:7f:3e:9a:f5:71:7b:ca:68:e8:66:41:bf:e7:e5:dd:1a:ee:
f5:a4:6e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:52:54 2025 by rpki-client