Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC69C182E53811EFA9B3C174762E951A.roa
File: FC69C182E53811EFA9B3C174762E951A.roa (raw, json)
Hash identifier: mWpdoT/9pavLmaYRVqLrvAwZ43rTVXoK4LLxC83vEjI=
Subject key identifier: 53:76:21:B1:8D:53:02:2E:13:0C:4E:1A:F1:79:0E:87:36:50:49:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CCF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC69C182E53811EFA9B3C174762E951A.roa
Signing time: Fri 07 Feb 2025 09:50:39 +0000
ROA not before: Fri 07 Feb 2025 09:50:35 +0000
ROA not after: Mon 13 Dec 2027 09:50:35 +0000
asID: 17561
IP address blocks: 156.230.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72911 (0x11ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 09:50:35 2025 GMT
Not After : Dec 13 09:50:35 2027 GMT
Subject: CN=67a5d76f-207e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:23:a2:33:b8:93:83:e2:df:31:8e:60:d2:
8e:c7:20:91:11:90:d4:82:c8:f1:f2:96:78:11:c0:
3e:37:85:76:bd:7e:99:1c:2b:39:8e:fe:80:8f:03:
63:0c:6d:25:70:ae:9f:96:09:bd:9a:dc:a9:23:47:
88:6a:53:aa:2d:fb:7d:e2:4c:25:cd:a8:1a:d7:cf:
18:ef:44:d0:80:88:a7:b8:b0:6e:47:29:31:30:ae:
05:72:00:c0:54:2f:d6:9d:80:76:f1:88:68:96:af:
76:93:fc:c7:ed:16:56:da:80:d2:41:36:47:a7:f9:
16:c8:88:f3:30:e4:3b:fd:fe:cf:9d:06:28:af:94:
67:f9:18:d6:1f:59:56:0f:ba:8f:c9:0d:3c:9d:7e:
f2:54:95:04:c4:e6:4d:d3:62:a7:57:40:54:1f:ff:
74:a1:75:f9:d2:c9:52:b5:96:01:cd:45:90:b1:c1:
17:11:c8:6d:79:3a:c2:c5:4b:1b:43:c1:a1:b4:e0:
46:b4:41:9b:f8:bd:4b:b0:45:08:f4:88:f4:de:57:
39:e7:6a:33:a5:0e:f0:4a:79:f9:bb:79:e6:74:2b:
87:f4:be:b1:2a:a5:90:de:50:3e:4f:cc:31:d2:ee:
dc:73:fa:fc:a5:3e:d9:2c:30:a4:3c:ae:b4:c5:4f:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:76:21:B1:8D:53:02:2E:13:0C:4E:1A:F1:79:0E:87:36:50:49:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC69C182E53811EFA9B3C174762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.139.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:65:1f:e5:6b:5d:ee:9e:12:6d:81:ee:77:ee:23:e5:ce:a0:
8b:1c:91:b9:cf:38:c9:4f:73:7e:b0:8f:91:8b:6c:57:43:0d:
87:68:39:11:85:a1:31:12:30:e5:81:0a:ed:2d:72:e1:6e:e2:
b2:5d:d4:4d:ba:c4:de:ef:aa:6c:f8:2f:3e:79:d6:68:4e:fe:
ac:41:20:f0:03:dd:dc:c3:37:14:a7:d4:24:54:95:2e:26:74:
ec:09:df:f3:62:af:3b:3f:c0:2e:22:7a:cb:1e:78:b6:69:cd:
65:19:b4:55:bb:15:19:44:54:b5:6c:82:49:0b:91:44:9e:6b:
e6:66:91:78:d4:00:97:b7:f4:2b:38:73:f2:02:43:2b:54:e2:
73:fc:6c:b5:ae:fb:e8:5f:e4:2c:aa:f2:48:65:7e:1f:a6:ab:
f3:f7:4f:f0:db:45:48:0c:97:d3:d7:09:5f:07:5c:31:c2:56:
21:9a:7c:8f:d8:a2:d4:ed:8e:b6:d2:54:d7:a5:2b:57:cd:19:
d9:47:9b:f5:40:8f:e1:44:77:a1:bf:bb:d3:d5:62:fc:fc:64:
0e:8b:84:51:b0:8f:ff:1e:09:b4:ab:a7:79:5a:b4:5e:67:64:
19:7a:6d:24:ff:75:90:b2:6b:76:f8:13:f4:28:e5:a8:96:f6:
44:e6:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:52 2025 by rpki-client