Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BEAC74817A911F0BB47D7EC6DB8BCC6.roa
File: 6BEAC74817A911F0BB47D7EC6DB8BCC6.roa (raw, json)
Hash identifier: qCNB7KH/I9/fIFfgJLKI9hLEDeIZKN7LCLCbMpETXoc=
Subject key identifier: 60:C1:47:80:57:D3:1B:00:08:19:8E:EA:7B:56:BE:EE:F4:79:4F:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BEAC74817A911F0BB47D7EC6DB8BCC6.roa
Signing time: Sat 12 Apr 2025 14:21:28 +0000
ROA not before: Sat 12 Apr 2025 14:21:23 +0000
ROA not after: Mon 09 Jun 2025 14:21:23 +0000
asID: 18013
IP address blocks: 156.234.0.0/24 maxlen: 24
156.234.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84962 (0x14be2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 14:21:23 2025 GMT
Not After : Jun 9 14:21:23 2025 GMT
Subject: CN=67fa76e8-8735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:61:4b:8d:ef:ef:40:ea:e5:f5:fa:34:3a:
ac:d4:d9:0b:e1:b8:a0:df:06:27:79:0d:24:69:12:
ce:12:cc:7a:77:3b:cc:59:a2:96:d6:7f:2c:5d:68:
05:9d:19:d8:f3:27:3b:60:f3:56:44:0d:88:2b:39:
27:69:a4:65:de:39:1d:ab:2e:13:a7:4d:a4:76:94:
d8:3f:df:7d:55:32:38:86:d6:20:44:c6:dc:11:8f:
73:6e:e7:f8:50:b2:e3:54:40:9e:d9:8c:3a:ba:fc:
2e:58:50:5a:1f:a2:0f:71:78:2f:a9:c7:7d:0f:3a:
0e:a4:b4:9e:92:34:7f:de:6a:c8:59:fd:41:6f:0f:
de:8a:f5:73:af:b2:8f:c5:e9:61:a8:a1:5a:66:27:
54:cd:46:38:e7:88:47:34:32:f0:69:fb:95:12:18:
d6:79:07:6f:33:70:40:75:45:ec:46:91:ef:7a:ca:
e3:0f:a4:46:a9:72:b1:78:b5:40:45:21:3c:25:73:
be:5a:68:1b:18:e8:bd:c0:28:d7:62:53:d9:37:7d:
a1:0f:b6:f9:09:5f:de:07:54:5a:81:e7:b8:a0:52:
dd:64:1d:de:66:b6:e3:ea:03:02:c8:5a:4c:09:83:
50:42:de:1a:4f:cd:c2:10:fe:77:06:96:3a:c0:09:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C1:47:80:57:D3:1B:00:08:19:8E:EA:7B:56:BE:EE:F4:79:4F:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BEAC74817A911F0BB47D7EC6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
156.234.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:62:50:f1:db:04:f0:36:f3:c0:04:bd:de:d3:90:21:a5:5a:
21:91:41:f4:9c:25:4a:12:b5:57:95:10:bb:d6:f1:5d:97:d7:
bd:52:8a:c7:e9:5d:34:ec:02:80:3e:c3:21:4e:c5:e1:cd:df:
66:2f:c5:38:4c:75:6d:91:11:39:3a:d8:f5:88:7c:ef:5c:32:
bc:9e:41:00:7a:a8:ce:70:89:28:19:83:73:f1:80:de:fe:df:
86:72:85:62:64:82:94:d7:2e:ae:55:3e:3c:6e:3d:e8:cd:ed:
a8:02:f4:92:3e:d9:e0:7e:74:c7:31:a3:b5:42:a4:10:f7:a1:
2d:bb:9a:87:b0:f0:41:51:b0:cc:2c:41:b0:16:3b:42:e3:1e:
94:4d:72:bb:e2:3c:48:92:8a:3f:c6:90:de:1d:01:a9:51:b3:
6d:2a:76:c7:de:a4:45:49:3a:ac:d7:52:bd:0e:b6:b8:e2:f2:
5f:27:7e:69:31:7f:0e:d3:09:9d:0b:f6:34:79:0e:ed:8c:12:
80:16:d1:6f:1f:b5:3c:0c:e9:fc:6a:6a:79:67:fb:57:c5:71:
44:38:fe:6d:5b:2a:22:d6:46:d5:77:1f:39:4a:fe:26:b4:2a:
bb:79:d8:e1:fe:0e:b5:a8:72:79:89:d6:3d:44:a9:2a:b2:f0:
95:d5:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:54:35 2025 by rpki-client