Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CDE30D61F4611F0B4C74BB4DAE4EC9C.roa
File: 2CDE30D61F4611F0B4C74BB4DAE4EC9C.roa (raw, json)
Hash identifier: JzjxK+2mofelIu7ELFgfHZudbzNfnhVa8b3HaUUNvuU=
Subject key identifier: 3E:57:27:97:15:C2:88:30:16:C1:02:78:FA:FD:D3:4D:E0:C7:28:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CDE30D61F4611F0B4C74BB4DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 06:51:11 +0000
ROA not before: Tue 22 Apr 2025 06:51:06 +0000
ROA not after: Thu 15 May 2025 06:51:06 +0000
asID: 150519
IP address blocks: 156.240.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85460 (0x14dd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 06:51:06 2025 GMT
Not After : May 15 06:51:06 2025 GMT
Subject: CN=68073c5f-5042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:03:77:1e:80:53:eb:fd:02:aa:9a:86:23:
64:73:75:e8:ab:68:b5:c6:94:44:22:52:d9:bf:d5:
74:fd:94:0c:0d:56:82:17:05:88:69:43:d2:9e:05:
bd:04:54:e2:0c:0e:60:2d:03:8c:4f:4a:e1:25:e4:
ea:53:74:53:ad:de:ba:e7:ce:ad:a8:2c:28:ae:3a:
f3:c2:f2:4c:80:ad:16:04:f7:ff:bb:64:15:7c:0e:
e6:9b:f7:9d:68:78:59:84:e5:4b:01:88:ca:3e:04:
db:bb:0f:b3:17:22:93:b9:d3:46:9c:5c:f1:ca:25:
fe:d3:60:f2:58:51:f9:5e:c9:da:6c:a7:48:1a:23:
4f:cc:26:c4:cd:48:de:c9:63:f0:fb:a9:90:8a:c0:
a3:b5:0c:b5:8e:45:bd:44:de:4c:69:8c:69:44:8f:
96:49:3c:17:b4:25:0b:7a:d0:7c:98:b6:d9:f1:f5:
64:95:40:6a:57:c1:96:97:b6:a4:84:85:88:60:d3:
d3:3d:21:a2:6b:d6:6e:52:3c:28:b5:ab:e3:ad:ef:
11:70:c3:93:d9:de:71:ef:50:f9:6e:c1:1e:91:c1:
3f:aa:81:29:f6:a8:8d:e9:18:12:ae:b6:fd:3b:e0:
43:c7:f4:39:47:8a:41:18:e6:be:d1:43:c7:08:41:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:27:97:15:C2:88:30:16:C1:02:78:FA:FD:D3:4D:E0:C7:28:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CDE30D61F4611F0B4C74BB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.100.0/24
Signature Algorithm: sha256WithRSAEncryption
21:84:4b:e2:34:89:2f:48:74:6b:ef:13:77:6f:67:66:75:27:
4c:6d:3d:f5:34:29:a8:e0:eb:f4:ae:d3:16:ed:41:20:19:2e:
2d:58:be:ab:03:d8:b1:06:56:1b:e5:8a:37:62:d3:c2:fe:99:
f4:d2:d0:0c:9b:d1:14:47:33:5b:63:9a:0a:65:13:13:36:0a:
90:6e:35:95:6a:d0:9c:1e:b5:db:fd:c1:60:2f:01:df:75:98:
07:ea:29:22:ee:92:d8:31:ed:a2:bb:65:2c:3d:ed:26:6d:a9:
66:d7:20:26:bc:d3:4c:b1:fe:f3:81:4d:3c:ea:19:2f:95:3f:
3b:99:13:a3:50:f8:3a:7c:a9:4c:ab:19:44:ff:95:a3:77:2b:
d5:a3:99:63:9e:54:57:a1:2d:cb:5f:b5:9b:89:27:1e:ba:b1:
f3:f2:d7:c6:6a:20:04:34:3b:29:33:61:28:7b:63:52:d3:f2:
eb:db:93:bd:52:b7:ec:68:49:70:af:df:f3:4e:b9:97:ae:3f:
9e:d9:c1:68:b1:09:da:e6:6b:e3:ec:f6:58:51:5b:cc:27:9e:
70:7e:9e:d6:1d:a9:07:5d:42:af:e1:8b:7a:1a:13:25:81:2f:
b5:59:37:62:54:71:ab:17:8f:ad:11:cb:10:87:50:2f:56:ef:
61:1b:b7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:52:46 2025 by rpki-client