Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F9B05CA107B11F08DD86255762E951A.roa
File: 3F9B05CA107B11F08DD86255762E951A.roa (raw, json)
Hash identifier: GXh/NhPCSRQecRvFzFx08l4VfjQxXa5FVnn40BECvyk=
Subject key identifier: 1B:A9:31:09:C9:C8:9C:0B:A0:8A:8D:BD:9E:F5:DB:62:32:EB:BA:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F9B05CA107B11F08DD86255762E951A.roa
Signing time: Thu 03 Apr 2025 11:03:18 +0000
ROA not before: Thu 03 Apr 2025 11:03:13 +0000
ROA not after: Sun 04 May 2025 11:03:13 +0000
asID: 8796
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84420 (0x149c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 11:03:13 2025 GMT
Not After : May 4 11:03:13 2025 GMT
Subject: CN=67ee6af6-7897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:fd:0a:64:ce:c4:cb:c9:cb:91:7f:a6:31:
c4:b8:6e:aa:5a:f8:d7:c9:d5:ba:0a:db:a5:31:6e:
92:37:8e:46:c1:12:82:38:f3:d7:c1:ca:21:b0:02:
d2:cd:58:ae:4c:98:fe:3c:ab:3b:aa:63:64:2d:28:
f6:33:d6:d4:69:8e:f5:9c:3b:43:ac:58:cf:7e:02:
33:33:9b:21:0c:39:b2:c5:1c:82:30:69:d0:be:d0:
22:a9:f9:eb:00:83:6a:15:8d:ea:a4:9d:ee:fb:fd:
e5:79:ea:71:8a:a1:b3:d5:57:ff:61:19:fc:65:f8:
6d:fa:ae:9f:5f:c8:65:bd:2c:c6:17:00:10:38:c7:
ac:ab:bf:5e:96:09:d1:9b:6a:64:ac:bc:47:3c:55:
75:fa:60:57:0d:1f:f0:fe:54:fe:da:f0:01:63:c8:
70:8d:8a:57:4a:29:12:d6:f5:5f:b5:a8:d5:16:4a:
22:c6:93:3d:6c:91:01:af:fe:4b:81:9a:50:80:9a:
db:72:45:1b:04:0b:2b:e4:84:42:eb:3f:ea:e3:f8:
2d:15:50:41:5d:59:c8:b5:3b:59:bb:7c:1a:18:5c:
f8:a8:b7:31:41:52:92:2a:2b:04:b1:39:19:51:61:
3d:44:0b:50:6c:8f:26:b7:18:e1:3a:fa:9f:3f:e7:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:31:09:C9:C8:9C:0B:A0:8A:8D:BD:9E:F5:DB:62:32:EB:BA:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F9B05CA107B11F08DD86255762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
18:c0:8f:b2:df:90:1d:f5:86:64:e9:93:82:f1:03:f4:4c:14:
90:1d:e7:b2:51:04:37:46:46:b9:70:d2:9d:05:7a:95:5c:2d:
98:8e:50:e8:9e:69:86:2c:49:db:98:5a:71:c9:9e:9a:57:c3:
8d:62:fb:6a:1c:5f:0b:dc:d3:f9:71:85:d1:30:5c:72:81:7c:
26:39:bb:ed:ed:08:79:93:1a:01:47:af:b2:e9:86:a0:55:a5:
a6:96:4c:20:75:14:79:3e:f5:66:bc:f1:d2:05:90:13:c7:20:
a3:db:67:49:22:e7:26:69:e7:55:1c:d1:b7:5b:aa:7b:3e:15:
21:64:f9:be:37:30:f7:ea:cd:ae:5d:5d:2b:54:39:d4:01:1e:
6f:e9:6d:d3:40:d5:34:0c:c4:63:ba:29:78:d1:32:fe:83:21:
22:05:f4:76:94:36:cd:34:33:ca:89:82:74:d9:2d:92:a9:fa:
a8:cb:8c:54:f4:9c:34:29:d7:5f:4a:73:2f:04:8c:58:ef:23:
2a:be:d1:84:3d:a4:f3:c9:17:e7:cd:f1:03:95:eb:ed:4c:1e:
3e:75:3a:5c:0f:93:d7:5d:9f:29:6f:5a:98:77:ab:05:ca:46:
4a:7c:c3:52:8c:a4:ee:54:15:8c:9c:5a:06:dd:1f:a2:0b:fa:
8f:65:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:25 2025 by rpki-client