Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7C0DD36211111F0A96E7AB1DAE4EC9C.roa
File: F7C0DD36211111F0A96E7AB1DAE4EC9C.roa (raw, json)
Hash identifier: rgi4qBtvvztzxbrIgBY+fCx8OTHseOEN0Bm3Jxbahro=
Subject key identifier: 3F:D5:E8:19:87:ED:62:90:16:F7:FC:E3:9B:52:90:A2:6D:8E:D4:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7C0DD36211111F0A96E7AB1DAE4EC9C.roa
Signing time: Thu 24 Apr 2025 13:42:31 +0000
ROA not before: Thu 24 Apr 2025 13:42:26 +0000
ROA not after: Fri 02 May 2025 13:42:26 +0000
asID: 38193
IP address blocks: 156.238.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85624 (0x14e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 13:42:26 2025 GMT
Not After : May 2 13:42:26 2025 GMT
Subject: CN=680a3fc7-b043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:aa:ef:27:17:76:4b:ee:d1:01:67:af:38:77:
ed:f8:d6:85:6c:b4:7c:3b:9a:ef:d5:74:8b:2b:cb:
11:a7:d1:2e:c1:a4:a8:d3:44:a8:e9:af:b3:da:76:
18:c5:a1:be:70:c0:87:20:f5:46:48:5a:e8:e4:5d:
51:64:c9:88:f3:6d:a9:b0:68:48:d1:11:6a:9c:1d:
eb:d7:eb:39:4f:11:d7:34:3d:27:91:d7:0b:8d:1e:
84:c7:6d:de:1e:c4:3a:5b:39:b1:8f:2c:81:51:35:
57:bc:e1:b1:1f:a9:f8:6b:6e:95:bc:18:aa:e4:63:
ed:e1:0c:9b:fd:b2:d6:c4:c2:b2:5a:fc:60:52:19:
57:98:c7:d0:ea:72:92:3a:3e:0a:79:d8:8f:c2:09:
e0:ba:63:c9:01:1a:67:0d:1a:6b:b8:49:73:f0:31:
af:51:a8:57:31:a4:79:cb:44:c0:cc:84:31:15:bb:
6f:58:57:b4:74:86:c2:f6:be:54:3d:27:17:0d:cc:
54:a9:69:7f:9f:18:af:b8:07:c8:a0:8c:c6:5f:2e:
b9:01:0e:1d:15:78:d1:ec:d0:2f:c4:c2:42:c4:ad:
4d:fb:70:74:83:de:d6:61:b1:c3:11:2d:80:5e:c3:
1e:91:0f:6e:40:fa:42:84:dc:cf:ba:8f:61:47:d4:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D5:E8:19:87:ED:62:90:16:F7:FC:E3:9B:52:90:A2:6D:8E:D4:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7C0DD36211111F0A96E7AB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2e:ee:f7:f5:13:a1:ca:f4:d5:f8:3d:af:45:eb:2c:61:5e:
82:09:1e:34:04:56:24:e2:b3:03:fd:eb:79:59:d6:c1:e1:ac:
7f:31:69:6f:f3:94:dd:a8:6a:ff:b3:20:02:ad:be:1c:42:2a:
39:74:b9:41:e9:07:4f:34:c5:c5:e5:7d:86:d2:cf:fd:14:a9:
b9:9e:f4:34:5f:b2:59:4e:8a:e2:41:8f:6d:4a:19:53:fe:54:
5d:49:ac:b7:73:50:ae:f9:56:b7:99:12:c5:35:b4:45:b3:67:
7a:b1:56:51:81:26:a4:29:eb:b0:a0:b7:bd:6e:fc:1b:26:fe:
e6:b0:30:2b:ec:43:e9:1d:c4:05:d7:00:e8:a0:66:85:b0:e4:
6d:a3:0e:48:c2:06:35:99:ad:59:86:e8:18:17:da:4e:c0:51:
cb:2d:61:2d:a3:4e:41:cc:27:4d:b2:5c:83:95:25:24:9f:4b:
7f:75:7a:b7:90:41:dd:73:cd:ba:ea:96:0e:b0:80:f6:7d:af:
24:c8:40:44:66:75:0d:e2:e4:b0:60:f8:c3:88:d4:c2:e6:0f:
da:a5:78:8c:b5:b0:24:db:de:b0:b8:b1:36:2b:8f:95:22:c9:
01:f1:81:7c:7e:d9:fd:5d:d7:39:8e:b2:09:c8:02:e1:45:1f:
06:36:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:31 2025 by rpki-client