Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B70A21EA17AB11F09D176BFB6DB8BCC6.roa
File: B70A21EA17AB11F09D176BFB6DB8BCC6.roa (raw, json)
Hash identifier: Ph27QtKuz0Eotj0smnvM8NX9+Oqg/fBibRJFxWNdu4w=
Subject key identifier: 87:D0:F8:99:F6:B5:1B:47:A3:D6:16:01:4C:A8:E1:13:55:BE:3F:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B70A21EA17AB11F09D176BFB6DB8BCC6.roa
Signing time: Sat 12 Apr 2025 14:37:53 +0000
ROA not before: Sat 12 Apr 2025 14:37:49 +0000
ROA not after: Mon 09 Jun 2025 14:37:49 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84968 (0x14be8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 14:37:49 2025 GMT
Not After : Jun 9 14:37:49 2025 GMT
Subject: CN=67fa7ac1-b983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:3a:fa:5d:c4:c5:b9:5d:1e:89:e5:2a:fa:
cc:a9:22:85:21:e8:92:d9:ce:67:5c:41:19:ee:be:
19:e4:a8:d6:4b:f2:4a:ae:c5:5a:23:e8:94:4f:ca:
91:56:78:2b:de:51:cf:77:b0:d8:7d:f5:19:3f:7e:
cd:0f:21:30:d1:4e:5e:16:e6:37:df:88:f6:0d:ee:
5f:96:20:e3:02:52:b8:e4:87:67:e8:7a:3d:2d:f9:
5e:45:29:44:20:f1:53:3e:06:af:5c:16:9f:f1:20:
51:b3:8b:3e:66:86:62:01:4e:fe:8f:46:68:60:9c:
f8:b4:31:69:73:1b:20:b9:c6:4d:18:51:e2:a7:79:
e8:35:eb:b8:89:35:95:87:20:96:f5:4c:9d:85:35:
03:23:dc:1b:b6:10:1c:5c:01:86:bf:11:90:e2:a9:
6b:5c:5e:af:3b:1a:64:ac:15:8e:68:09:e5:b1:09:
19:6d:a3:de:a7:ea:a4:60:4d:41:67:c1:5c:45:10:
5e:59:cb:2a:59:5e:91:1b:64:3c:0c:4c:dd:f0:5d:
42:1f:fb:02:09:b9:3d:48:26:f7:39:cb:64:1d:35:
4b:4a:17:f7:ae:36:25:a8:d3:e7:ab:d6:10:d0:2f:
78:ca:6c:d7:0a:0a:b5:48:77:87:bb:40:52:4a:59:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D0:F8:99:F6:B5:1B:47:A3:D6:16:01:4C:A8:E1:13:55:BE:3F:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B70A21EA17AB11F09D176BFB6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:a9:c6:38:f0:88:56:93:b7:ae:ec:4f:47:e8:cb:52:b7:7b:
fd:2e:83:fc:86:95:8d:ba:e3:42:86:14:c7:ac:8f:00:8f:09:
94:f2:99:43:b6:7d:d7:07:26:3a:9f:74:f8:b2:b2:dd:e7:80:
fc:ff:8a:4f:60:5d:0e:5d:9f:3c:0f:14:11:2c:e1:23:7c:ac:
ed:b6:56:33:a3:1c:f0:db:41:74:dd:81:0d:3d:55:5b:5d:07:
84:e1:b8:5f:ed:12:98:b5:46:37:63:46:73:80:86:90:f8:b7:
79:f2:c6:8b:47:5c:99:d3:70:49:74:7a:9b:b2:94:3f:6b:20:
70:af:d0:94:ad:61:c2:cf:04:f4:d6:c3:e9:e9:d9:6c:d7:d3:
52:cf:0e:9c:04:2a:71:02:c7:a5:fa:66:1a:3a:c8:c2:3e:9b:
a9:fd:72:8d:82:65:b8:31:91:fb:ed:ad:c6:ab:43:0c:63:8e:
01:b2:ca:ff:73:1f:81:f7:88:a7:69:d1:b6:3b:78:16:65:39:
f4:73:8d:08:a8:3e:be:51:0b:ee:fa:06:1e:e4:e0:ca:fd:d2:
65:33:76:ce:3c:6d:d9:f4:c4:21:cc:eb:4c:df:b6:bd:bf:bb:
6b:ba:99:51:bd:fe:f0:85:0a:39:5f:85:21:b8:7b:a5:ad:0f:
79:c1:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:15:49 2025 by rpki-client