Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E75AD62C15E511F0A70B16266EB8BCC6.roa
File: E75AD62C15E511F0A70B16266EB8BCC6.roa (raw, json)
Hash identifier: bJLeiGfPM5XhD8QKGVJHKc1jtMJQacgJ/qUlbr5W8+Y=
Subject key identifier: FE:C2:F0:6B:DA:95:D0:44:56:54:0D:FD:B5:24:B9:3C:24:34:27:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B4C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E75AD62C15E511F0A70B16266EB8BCC6.roa
Signing time: Thu 10 Apr 2025 08:29:22 +0000
ROA not before: Thu 10 Apr 2025 08:29:18 +0000
ROA not after: Wed 25 Jun 2025 08:29:18 +0000
asID: 142286
IP address blocks: 156.253.64.0/18 maxlen: 24
156.254.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84812 (0x14b4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 08:29:18 2025 GMT
Not After : Jun 25 08:29:18 2025 GMT
Subject: CN=67f78162-6826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:df:f4:fc:cb:13:cf:0f:cb:92:91:1b:0a:
8c:fc:51:e5:47:96:4f:78:6f:71:68:6c:3b:41:42:
79:c6:f9:40:a1:22:9a:37:e4:0b:86:96:87:d4:08:
f4:75:7f:6f:62:1e:5b:ff:25:e5:aa:cc:7b:5b:68:
6f:35:d5:47:8d:c9:fa:d7:c8:d4:90:37:45:50:9b:
44:f5:10:e4:06:98:3c:07:83:e9:39:0c:1e:54:2d:
ab:4e:07:de:f2:37:3d:aa:bf:6b:04:90:67:94:f7:
65:82:20:d4:55:43:01:4f:18:ed:7f:51:ea:99:f5:
47:81:13:8c:08:cc:b9:22:06:c6:b0:9f:d8:10:57:
8e:ba:f7:bd:44:8c:64:63:fb:3e:25:fd:98:13:a6:
92:f9:b3:65:45:45:58:b8:30:e3:f6:1c:e5:3d:54:
5d:d6:8f:87:5c:ce:dc:60:62:6f:8a:aa:47:f8:fe:
4b:95:41:f1:09:4a:0f:7a:23:ad:72:9c:19:cf:83:
7c:de:89:b6:30:20:71:30:e1:2b:b1:2b:5b:41:07:
3c:05:43:db:a5:be:06:73:2f:53:8c:75:cb:64:fb:
fd:a2:4c:23:5f:ea:24:23:44:7b:3b:36:81:29:53:
ce:a8:1e:80:70:eb:c6:c9:9c:dc:48:cb:1d:6f:80:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C2:F0:6B:DA:95:D0:44:56:54:0D:FD:B5:24:B9:3C:24:34:27:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E75AD62C15E511F0A70B16266EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.64.0/18
156.254.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3b:e5:d1:6d:83:2a:e2:17:47:f4:ee:55:33:ab:1f:3a:7d:09:
e2:f8:99:16:88:15:01:69:07:28:27:55:28:bf:c9:85:f3:d5:
10:8d:d9:f3:5b:c8:1f:94:aa:8b:18:5e:7b:81:40:20:72:de:
ff:80:d7:30:2e:d1:27:ec:39:f5:82:87:7b:79:4f:f6:52:67:
8f:b9:b7:cd:da:97:54:82:c7:92:83:e4:38:15:7b:6f:bc:a8:
23:fe:05:7c:48:8d:15:b2:ff:16:54:04:8f:d7:f7:f0:2f:cb:
f2:53:82:00:9c:3e:a5:04:6a:d0:f2:f4:31:3c:85:60:58:9f:
9e:65:0f:08:f3:85:53:a1:22:ef:62:8a:84:39:1d:83:16:23:
61:34:68:a9:82:3c:26:8d:ed:e9:76:8d:30:1c:dd:1c:78:e6:
b3:aa:91:93:ec:97:96:d9:96:9b:83:48:92:8a:12:01:c4:25:
dc:a1:52:a5:76:e9:b9:74:40:36:61:7b:84:96:e1:13:13:a4:
f7:43:51:68:b3:fe:40:a9:60:b9:f3:bd:be:16:06:56:0a:44:
48:7d:3c:18:2f:8b:73:ff:72:c7:c7:27:3b:51:6e:3e:21:d6:
e6:91:ae:51:98:d3:1e:71:7f:20:98:59:0e:17:e2:32:82:9c:
92:81:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:00:57 2025 by rpki-client