Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C671985213D711F09BF4AEA1762E951A.roa
File: C671985213D711F09BF4AEA1762E951A.roa (raw, json)
Hash identifier: Esngy1muKndlmXOiYd7ZrUeCVqy6tRFGSv+UgG+h8N8=
Subject key identifier: 66:88:FE:2A:CC:C2:B6:1F:74:D7:A0:D2:52:2C:DB:45:23:E9:42:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014AA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C671985213D711F09BF4AEA1762E951A.roa
Signing time: Mon 07 Apr 2025 17:43:12 +0000
ROA not before: Mon 07 Apr 2025 17:43:08 +0000
ROA not after: Tue 13 May 2025 17:43:08 +0000
asID: 20473
IP address blocks: 156.231.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84648 (0x14aa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 17:43:08 2025 GMT
Not After : May 13 17:43:08 2025 GMT
Subject: CN=67f40eb0-ef7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:84:d2:ab:c4:65:61:c0:85:67:44:28:22:85:
86:ee:d8:e1:72:f8:d0:be:6a:c5:ce:8e:d4:dd:cf:
db:86:c3:7b:95:49:f7:f3:d1:65:42:33:4f:01:7d:
22:a8:65:f6:3d:6e:36:86:9b:19:71:ef:34:a9:47:
90:37:6f:16:d5:de:2f:95:27:ee:a3:8a:21:34:a9:
12:d3:ec:d2:9c:3d:96:eb:61:c6:5e:85:a5:b6:58:
5b:30:b4:d0:cf:3c:02:85:d2:c8:81:1d:62:bb:13:
74:6b:50:d3:43:de:a6:5b:6a:54:2d:1d:07:6a:c6:
88:7d:5f:b6:6b:b7:20:f2:c9:d9:6c:33:e3:40:1b:
b0:f8:9d:17:b3:3c:d6:62:f9:3a:21:7e:8f:c4:f9:
1d:a5:9d:6c:ad:a0:13:ae:dd:cc:ed:bc:88:2e:52:
bf:99:90:dd:39:61:19:e6:4a:20:0b:f6:0b:3a:a4:
93:02:dc:54:e1:6d:9b:6a:5e:63:e1:98:d4:5b:64:
b7:58:69:95:81:72:6f:47:01:61:77:65:0b:09:dd:
ee:e1:65:ca:21:e0:67:1a:c6:a2:6e:aa:f0:38:df:
1f:5a:ec:63:0a:df:7c:39:7a:4d:ae:e8:e2:d2:12:
3f:d2:31:f8:0b:f9:4a:ff:9b:40:77:b5:e6:a4:c0:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:88:FE:2A:CC:C2:B6:1F:74:D7:A0:D2:52:2C:DB:45:23:E9:42:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C671985213D711F09BF4AEA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.10.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4f:b1:18:a4:64:83:69:9c:b5:cb:d6:da:90:40:cc:64:1a:
c0:a3:59:0a:2d:d1:49:46:80:9c:df:d5:be:91:76:85:dd:df:
78:db:5f:34:98:6f:52:4f:20:16:c1:4f:22:61:04:4a:c7:d4:
2e:fd:f2:bd:e2:a9:56:33:a7:a2:64:99:ae:bc:63:73:9d:c4:
d6:29:b6:a6:65:40:c6:36:c4:b1:8d:54:fe:45:09:c7:c5:b1:
65:ce:39:4f:66:0d:3e:8b:1e:f5:a7:cf:44:f1:ef:f3:22:0e:
3b:a2:ab:7a:2e:17:14:4d:ac:98:32:18:26:4f:71:e3:54:19:
7e:42:49:69:d0:bf:88:6f:3d:7e:a0:4c:7c:4b:61:40:af:59:
5c:62:07:7d:e1:45:5b:97:47:cc:a0:1d:4b:6e:0d:83:58:2b:
66:da:2d:c3:de:2b:0b:eb:d7:fb:3a:3f:56:3e:f9:ba:73:19:
d2:9b:15:f5:cf:52:12:b8:20:fc:25:aa:e3:91:09:3e:38:85:
72:c2:3a:e5:85:b1:4f:5c:d7:49:7f:6e:94:5d:91:4d:6f:36:
97:c5:81:6e:2e:21:d6:8f:68:e9:9c:b7:13:b0:ce:f1:ba:e3:
7e:a4:37:ce:5f:b4:2a:a9:e1:e6:f3:76:1f:b9:87:4a:6a:82:
75:1d:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:59:34 2025 by rpki-client