Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE6D4CBEF44311EF80CF5763762E951A.roa
File: FE6D4CBEF44311EF80CF5763762E951A.roa (raw, json)
Hash identifier: 5g0v+oLZKrHCp/FgDc564QcjJP5V+KRK8v+8t79qTB8=
Subject key identifier: 70:FB:A7:81:49:E8:EA:E3:D8:19:ED:73:5C:F5:61:D5:6C:C5:3E:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013306
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE6D4CBEF44311EF80CF5763762E951A.roa
Signing time: Wed 26 Feb 2025 13:17:14 +0000
ROA not before: Wed 26 Feb 2025 13:17:10 +0000
ROA not after: Thu 19 Feb 2026 13:17:10 +0000
asID: 984
IP address blocks: 156.231.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78598 (0x13306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:17:10 2025 GMT
Not After : Feb 19 13:17:10 2026 GMT
Subject: CN=67bf145a-87cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:90:2c:ff:86:80:96:b2:24:8a:06:62:87:
80:41:90:5f:b4:88:bd:7e:7f:ce:8c:b2:29:95:66:
8e:a3:3a:44:be:8d:04:33:f3:81:5a:fb:6f:b9:78:
ae:40:a3:a3:23:1e:be:2b:19:d6:e8:79:c8:e6:0e:
b1:7a:3b:98:32:68:8e:da:35:23:aa:fc:c4:5d:0f:
b9:d9:39:7d:aa:0a:3f:10:af:09:be:51:08:c0:40:
e4:01:1e:5d:b9:d0:c1:24:09:36:c8:9b:23:f8:53:
5c:f4:31:16:13:5a:a4:87:fe:f5:81:e6:39:8c:2b:
d5:2a:8a:98:76:86:91:30:76:b4:1d:47:f1:67:57:
9b:04:51:1e:b2:2f:7c:9c:41:61:87:b2:44:63:39:
7f:1b:42:cf:b6:ce:d4:35:1c:a5:b8:c2:8b:d2:07:
55:d1:c7:5f:e2:72:d3:b2:28:b1:27:84:6f:a5:fd:
07:f2:5f:68:74:f0:2a:be:5a:c6:e2:1a:95:ba:83:
01:6c:3b:6e:44:d5:db:9b:56:77:19:22:07:58:61:
6f:cb:98:97:09:8b:e1:86:81:20:d6:54:9a:0a:82:
59:67:23:87:fe:a8:41:87:7a:f2:41:91:90:8c:f3:
a2:9b:22:01:c7:fb:e9:c0:4c:04:c6:1a:7d:5b:3d:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:A7:81:49:E8:EA:E3:D8:19:ED:73:5C:F5:61:D5:6C:C5:3E:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE6D4CBEF44311EF80CF5763762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.75.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8a:e9:62:86:7f:e0:20:41:62:a2:94:1a:a0:b3:fb:1e:f4:
4e:4c:e2:58:ca:28:63:c3:4f:0f:39:38:d7:aa:da:70:2f:ef:
fc:56:d2:41:5a:01:a5:3e:72:95:27:a3:47:c1:df:4c:75:ac:
1b:14:a1:be:a5:8d:c3:62:bc:a2:4a:5d:40:30:20:21:d2:0e:
1e:60:11:7d:1f:0b:18:04:2b:a9:e4:ad:72:68:e8:8e:f4:d7:
2d:7f:cc:6c:98:92:6a:0d:10:3e:19:3d:1d:19:1a:86:a1:ec:
b1:37:a8:8f:74:e5:02:4a:6d:3b:c3:4b:59:7b:87:9f:61:74:
0d:f5:b7:ae:53:b9:c9:7e:2b:6f:ee:a4:13:aa:b4:2f:bd:60:
97:49:01:db:47:25:b4:dc:29:02:4a:8f:a5:29:c2:bc:dd:c5:
96:0d:ed:ff:d4:46:f2:7a:8a:4e:94:96:1f:71:bd:cf:e5:17:
cb:6b:fb:0b:b6:b4:67:ad:98:ca:f7:db:91:73:44:c0:24:e1:
08:50:83:b8:62:83:e6:40:0f:1c:5e:f8:b4:d5:07:6f:1f:d4:
91:8e:97:93:0e:4f:be:8d:cd:a9:91:f9:1c:71:6c:89:5f:63:
a4:2b:29:d3:c0:a3:9f:53:7c:84:14:cf:9b:1b:46:87:8d:4a:
37:f1:1e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:59 2025 by rpki-client