Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDB883F4F44A11EF9C62CA94762E951A.roa
File: FDB883F4F44A11EF9C62CA94762E951A.roa (raw, json)
Hash identifier: ie/a6J6JmKvIM2fR3thfXyU6nMH/3g+RG2mr+CYhCTs=
Subject key identifier: 6E:11:CB:AC:6F:3B:4F:16:BA:5E:30:FA:CA:EC:90:E0:5C:FE:FC:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013392
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDB883F4F44A11EF9C62CA94762E951A.roa
Signing time: Wed 26 Feb 2025 14:07:19 +0000
ROA not before: Wed 26 Feb 2025 14:07:16 +0000
ROA not after: Thu 19 Feb 2026 14:07:16 +0000
asID: 984
IP address blocks: 156.231.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78738 (0x13392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:07:16 2025 GMT
Not After : Feb 19 14:07:16 2026 GMT
Subject: CN=67bf2017-1ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:56:c9:d9:ec:7a:eb:be:37:bd:2a:0e:63:
3e:5d:f9:4c:56:bf:c8:c3:38:40:0b:62:05:80:0c:
f8:20:5c:56:9c:be:7b:6e:b1:b9:ba:32:d9:21:21:
be:61:3b:c9:d0:25:69:27:9a:1b:d5:f4:15:20:a5:
78:e4:cb:00:06:e9:e9:ac:91:b9:9e:fb:c7:7f:68:
99:9b:d6:6d:7c:95:82:7c:1a:45:34:81:4b:c5:89:
48:58:d8:46:3f:d0:c9:ad:3a:f1:31:eb:8f:f8:1b:
c9:58:76:fa:b7:81:e1:77:72:68:5c:58:08:f4:8e:
90:0d:fa:ee:da:70:68:d7:c0:3e:8f:96:fc:97:83:
7b:58:0a:0b:d9:40:f9:fb:18:df:58:e9:1d:50:8b:
ae:5f:cd:9e:f7:d0:28:fc:22:32:01:5e:b5:7f:d2:
b0:a6:2b:97:af:32:ea:96:c0:77:04:df:46:fc:92:
45:24:5a:68:f3:d6:01:9a:f6:46:b0:2d:4f:0f:f4:
5a:3c:2f:e4:a3:b0:1e:5a:7b:21:7b:dc:2a:5a:05:
3b:51:c6:9d:c7:2e:3a:43:76:60:38:34:63:87:d0:
1c:69:f7:d0:45:c5:42:d8:b5:ba:8e:c2:c9:6c:98:
12:84:ef:3c:be:d6:f6:5b:c7:67:9a:71:8a:c0:0f:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:11:CB:AC:6F:3B:4F:16:BA:5E:30:FA:CA:EC:90:E0:5C:FE:FC:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDB883F4F44A11EF9C62CA94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.168.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4a:f1:37:21:7a:d2:30:93:27:75:ea:e7:c5:7a:41:d0:3d:
11:39:db:51:42:77:2d:72:f8:00:fe:d7:9a:dc:6c:53:9f:28:
a1:d1:93:87:1f:fe:40:d6:0f:a8:ba:d1:2e:aa:45:c7:2a:4d:
ac:50:01:e5:3a:4e:53:63:66:33:63:27:13:2b:0a:9b:dd:07:
31:7f:8b:52:a5:6e:da:ae:ed:22:be:aa:5b:e2:f8:64:85:a3:
5a:c1:3e:3e:13:58:b8:cf:5e:51:77:a4:11:54:8f:56:09:75:
e9:29:1c:e2:cf:ce:3f:eb:69:5f:ca:06:f4:60:b8:50:5e:fa:
b6:ad:53:9b:b5:c1:c2:b5:a6:93:f1:b4:81:38:57:cd:cc:01:
64:77:28:69:7b:5c:38:57:5d:68:9c:ef:7d:6a:42:2e:62:9b:
a7:37:18:4c:5c:16:67:4d:ff:d1:e4:27:57:ef:ea:35:8b:46:
74:bc:de:c8:80:8f:2e:26:b8:4c:72:a3:36:fd:63:09:3d:3b:
9c:f8:8e:45:5e:b4:77:e0:c2:f3:b2:20:be:f4:26:b4:a6:9e:
54:c9:d2:05:ac:06:8e:06:3f:a2:23:37:d9:68:7c:22:46:14:
63:68:70:21:b9:9d:6b:d7:70:3d:b1:16:16:bf:5e:58:e2:db:
44:5e:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:54 2025 by rpki-client