Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/325B49A40CD111F0BB453B92762E951A.roa
File: 325B49A40CD111F0BB453B92762E951A.roa (raw, json)
Hash identifier: B/q/pXjZytb9POi7eSU12uxNTxn+U9Oc53Nchmh7uvM=
Subject key identifier: 25:79:47:F4:2D:81:64:EA:F0:B9:97:9F:3F:59:DB:6D:37:B0:B0:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/325B49A40CD111F0BB453B92762E951A.roa
Signing time: Sat 29 Mar 2025 19:08:28 +0000
ROA not before: Sat 29 Mar 2025 19:08:24 +0000
ROA not after: Thu 08 May 2025 19:08:24 +0000
asID: 7018
IP address blocks: 156.248.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84214 (0x148f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 29 19:08:24 2025 GMT
Not After : May 8 19:08:24 2025 GMT
Subject: CN=67e8452c-8e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:c1:3b:64:48:04:4a:a5:e5:f6:fa:c6:7e:
e6:5b:80:93:dc:0a:a6:ba:b1:9e:fb:60:17:20:1e:
1f:b7:4b:6f:6a:ca:23:73:b6:bd:82:f1:1a:74:98:
53:39:85:25:ec:7f:fd:56:bd:b1:d3:a0:57:a6:71:
6d:f2:66:17:2b:fe:b5:65:ca:50:ea:3d:8a:eb:1b:
f0:aa:36:1d:e0:a7:14:04:5e:73:2e:7f:68:24:ad:
2b:74:d6:53:70:21:3d:4a:53:04:1f:0a:6b:c9:d7:
f2:55:c3:8a:15:56:d4:39:9c:83:05:50:3e:6a:5b:
a4:d0:5d:ac:dc:3c:c1:0c:70:61:27:3a:a3:b6:aa:
ef:43:e3:76:c8:ee:4f:ed:2c:53:8d:5a:2e:46:cd:
75:b6:de:6f:ce:3e:98:6a:3a:ca:cc:a9:42:5d:7f:
78:9e:59:0a:82:b3:5a:e3:f3:2e:20:74:45:ff:23:
9a:b1:44:91:40:8d:6a:91:78:7f:6f:e2:22:f1:44:
3a:fd:be:8d:67:bd:af:9e:85:96:f0:fe:7b:9e:90:
bd:bf:b5:2f:43:7b:85:a5:f6:9a:9e:fd:6b:af:f3:
b0:7d:b7:1f:ba:1c:19:86:07:e5:51:e8:87:ea:4a:
fd:b5:38:50:9e:90:81:7b:7e:01:a3:8d:bd:4f:10:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:79:47:F4:2D:81:64:EA:F0:B9:97:9F:3F:59:DB:6D:37:B0:B0:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/325B49A40CD111F0BB453B92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.112.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:9c:b9:f0:9d:38:ef:f9:3e:84:d5:91:7d:45:1a:38:d6:42:
bb:e8:a1:6c:b0:2a:ab:98:1d:f3:7b:76:2c:5d:5b:cf:8d:3b:
86:71:35:89:5b:06:8f:ad:44:9c:c4:74:4f:2d:ba:6e:2c:a9:
26:d1:e3:36:dd:e5:d4:12:21:10:0f:70:c0:87:0f:62:87:3c:
68:e5:5f:13:32:f6:64:25:68:96:ba:70:c8:b5:b4:72:d3:8d:
c4:13:ed:07:f8:21:84:4d:61:ee:38:a6:07:7b:6e:da:aa:73:
d4:76:d5:cd:19:86:35:a2:01:cd:8c:99:7d:e6:6d:94:eb:ec:
32:ce:d1:aa:9b:6b:54:35:67:46:3f:47:c3:e4:db:36:63:94:
e8:e7:51:80:a6:9b:b6:ba:43:fc:11:87:e2:f7:17:2c:cf:a3:
e7:c8:b8:5f:99:61:d5:85:01:1a:42:2e:80:5b:96:da:5a:b7:
5a:70:02:81:fb:72:0c:0b:ce:1f:3c:82:3f:d3:c6:8d:c0:75:
b6:40:c5:95:3b:37:92:31:41:48:44:5a:99:d4:ce:0b:37:92:
60:50:3e:b0:ea:fe:e4:91:00:f2:a5:f7:4b:d0:99:2b:c6:43:
22:ce:2c:32:97:09:40:8e:dd:e7:87:94:59:c1:55:f8:c9:08:
07:0a:20:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:19 2025 by rpki-client