Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAABCC2811F511F09DB88A4E762E951A.roa
File: CAABCC2811F511F09DB88A4E762E951A.roa (raw, json)
Hash identifier: k1+hUiIlUbWhV5WxBcTTInTYDvCPq0m2tyJ5Icxvntk=
Subject key identifier: 70:D0:19:2B:5B:D3:2B:7C:2E:0D:66:54:45:14:7A:28:A4:99:1A:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAABCC2811F511F09DB88A4E762E951A.roa
Signing time: Sat 05 Apr 2025 08:13:01 +0000
ROA not before: Sat 05 Apr 2025 08:12:57 +0000
ROA not after: Sun 11 May 2025 08:12:57 +0000
asID: 203020
IP address blocks: 156.241.16.0/20 maxlen: 24
156.241.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84548 (0x14a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 08:12:57 2025 GMT
Not After : May 11 08:12:57 2025 GMT
Subject: CN=67f0e60d-64af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:d4:f9:26:76:65:fd:83:b4:e2:fd:0e:04:
73:11:62:a6:23:ae:64:a2:a9:62:7f:02:05:3f:07:
3e:21:e6:8a:51:3f:3b:cc:52:ba:fa:9e:43:a4:fc:
24:ed:62:9f:c9:0c:fc:5a:39:90:b8:96:ae:23:ae:
90:d5:1c:6a:19:2b:08:9e:96:b5:ec:4c:4a:a9:67:
af:0e:19:ef:84:08:88:2a:09:bd:28:53:34:90:00:
0e:a7:bf:47:76:9f:cc:05:0a:c2:fb:04:23:56:9c:
6e:fa:6b:77:72:84:2f:83:a4:41:f3:cd:22:84:99:
5b:7f:ef:b6:bb:2d:7a:89:ea:79:2e:17:b6:46:9c:
18:7c:f4:8a:fd:1d:8a:91:1a:2a:dd:19:ae:1a:97:
d8:75:c2:37:ab:fe:67:34:60:4e:4b:e0:ce:58:c6:
96:36:5f:0c:2c:90:b7:6b:da:1a:70:16:14:90:ca:
c4:ca:fd:2b:b4:97:71:a5:3d:14:75:50:75:ac:5c:
f2:1b:25:dc:31:76:31:e7:60:39:65:95:1e:e0:46:
c2:85:78:b3:e2:3e:fd:57:61:d5:4c:4e:77:7c:d8:
58:0d:2a:19:f7:0a:65:0a:aa:90:b5:19:a3:16:6f:
77:45:5a:6e:e5:cb:27:9a:b3:8a:98:6b:35:53:67:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D0:19:2B:5B:D3:2B:7C:2E:0D:66:54:45:14:7A:28:A4:99:1A:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAABCC2811F511F09DB88A4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.16.0/20
156.241.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:d9:fd:23:0d:f4:e4:48:0e:c1:f5:c1:e0:a2:86:ae:12:bc:
3f:6f:a7:a1:98:13:c2:ab:6d:6e:9c:3e:d5:20:bd:e8:6a:a8:
49:45:40:cc:95:20:15:e0:0a:31:cd:16:e7:7a:44:20:1f:c2:
4d:7f:92:7b:8b:18:93:c7:7b:09:79:47:22:f0:9d:2c:56:3b:
03:12:16:d0:bc:6d:bb:71:fa:c2:5c:85:77:0a:e3:18:f2:23:
54:51:51:b2:12:a2:32:1d:83:3a:08:84:d2:0d:d8:d9:4a:ea:
67:71:84:77:36:1f:d8:8b:8b:61:35:53:c7:ae:28:c4:a5:0b:
f2:b1:60:36:20:b3:81:82:25:b5:c2:00:26:34:8d:b9:40:09:
f0:13:0c:a9:fe:2d:cd:8b:be:e1:20:b5:ed:bf:91:b7:56:95:
00:fe:08:91:8f:62:be:18:84:4c:86:d6:d4:f8:09:a6:31:db:
24:05:9c:7b:9a:ae:d1:9f:c1:c5:ca:08:d3:ed:e3:95:b2:d1:
2a:54:d6:d4:e4:ca:df:b2:4b:4e:5c:66:81:93:9c:33:0b:c6:
a7:94:63:90:f0:17:fb:43:18:5d:6d:bc:fc:55:1f:4d:e8:d3:
a4:82:ee:ba:b3:20:d0:69:74:be:fc:a7:f6:b4:63:f9:e8:af:
28:b3:95:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:02 2025 by rpki-client