Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE2C8C94F43C11EFB8149AB0762E951A.roa
File: FE2C8C94F43C11EFB8149AB0762E951A.roa (raw, json)
Hash identifier: KpKTi+uFjTNSxfw3jn3NKr8QwnvidBjSpfuDgbmMrQM=
Subject key identifier: 73:42:F4:69:2C:52:37:83:C6:2B:C3:17:5D:41:4F:F8:88:60:B8:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01326F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE2C8C94F43C11EFB8149AB0762E951A.roa
Signing time: Wed 26 Feb 2025 12:27:07 +0000
ROA not before: Wed 26 Feb 2025 12:27:04 +0000
ROA not after: Thu 19 Feb 2026 12:27:04 +0000
asID: 984
IP address blocks: 156.245.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78447 (0x1326f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:27:04 2025 GMT
Not After : Feb 19 12:27:04 2026 GMT
Subject: CN=67bf089b-5822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:8e:cd:05:64:1a:0f:99:ab:29:5f:f6:41:
6c:78:90:24:a9:f8:c5:75:2e:44:29:7c:07:cb:b1:
b4:92:28:a2:75:2d:8f:24:22:54:a5:d8:d8:d0:0c:
a4:e3:65:ac:fa:ca:1e:d1:89:9a:da:fd:4d:49:ed:
1b:30:93:5d:a5:f8:55:37:86:7a:c2:c2:a3:2c:b9:
0f:e9:50:84:14:f3:9b:28:d1:13:85:1f:ac:3f:56:
78:a7:d6:41:57:3d:83:80:0f:2d:31:82:43:86:3c:
54:70:e9:5f:83:ab:5f:b8:29:94:d9:f4:b9:f9:b0:
09:02:ef:89:87:83:ba:80:a5:ae:03:d7:75:a7:a7:
dc:56:c8:b1:72:76:6b:24:89:75:0d:00:d5:96:de:
36:01:dc:36:50:36:08:6c:16:95:dd:07:1e:ca:5a:
4e:90:b9:35:7e:ba:96:c5:39:78:d0:b0:44:6e:16:
65:b4:7b:60:a2:77:39:e1:84:37:8e:b3:4b:2b:04:
c9:1b:3e:25:6b:b9:a6:9f:26:6a:d9:c4:07:b1:75:
b2:8e:6f:1c:94:c6:ca:73:e0:8f:82:80:28:92:8d:
59:96:c2:aa:95:b0:28:d8:8b:31:4e:c9:c3:5a:cb:
db:c6:23:7f:81:1e:d3:fb:92:49:9d:a5:90:f6:74:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:42:F4:69:2C:52:37:83:C6:2B:C3:17:5D:41:4F:F8:88:60:B8:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE2C8C94F43C11EFB8149AB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:59:93:f4:cf:70:42:fa:4e:5d:99:b8:27:d0:7a:2d:e3:61:
bc:a0:e2:bd:51:07:9b:c2:47:46:dc:11:69:d6:75:97:7b:de:
0a:80:9d:bd:cc:53:ee:65:e1:1e:59:26:84:98:46:4a:a8:db:
cb:78:17:df:28:ec:47:f7:cc:e4:f8:d0:1e:b3:e5:b3:a7:6f:
2e:c8:64:a2:5d:b1:9b:a0:2f:22:2d:e7:8a:76:1a:d4:5e:07:
f2:54:75:d5:d8:6e:16:c0:c4:0c:02:09:46:f9:59:89:f7:a6:
d1:6c:d8:d2:e6:cd:c8:db:26:7c:0c:e0:e8:bb:19:c0:ac:f8:
bd:c3:0a:67:3c:e6:0a:e5:17:40:7a:fa:e9:3c:80:49:48:73:
31:d8:8c:11:9f:31:ac:60:6e:a0:64:6d:70:23:b0:7a:ba:a7:
ae:fa:03:76:a0:03:f2:bd:8b:43:e3:49:3e:bf:b7:c7:b8:29:
39:da:65:4e:3a:fb:b5:7c:bb:93:32:4a:8b:77:79:98:99:0e:
0e:10:f5:9a:0a:0a:81:04:92:73:3e:cd:01:ac:be:7e:92:9e:
96:b5:13:4f:76:93:e3:73:45:92:0c:cb:49:7a:68:0d:a7:c1:
4c:90:30:2a:25:69:b0:d3:ee:58:27:a8:b8:59:10:5d:3b:30:
b8:14:76:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:42 2025 by rpki-client