Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9305510D24311EF8517C49A762E951A.roa
File: F9305510D24311EF8517C49A762E951A.roa (raw, json)
Hash identifier: x3OfzyOtzhsktzfXJ+WlkEQBPDaORc3XiWHooatbnUA=
Subject key identifier: A8:EC:D2:04:41:04:47:BE:22:27:0C:01:F9:AF:80:21:66:EC:D1:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9305510D24311EF8517C49A762E951A.roa
Signing time: Tue 14 Jan 2025 06:51:26 +0000
ROA not before: Tue 14 Jan 2025 06:51:22 +0000
ROA not after: Thu 15 May 2025 06:51:22 +0000
asID: 18013
IP address blocks: 156.224.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67266 (0x106c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 14 06:51:22 2025 GMT
Not After : May 15 06:51:22 2025 GMT
Subject: CN=6786096e-7f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:54:96:9b:1f:7e:13:3a:d6:e2:0c:e9:95:
a1:87:3f:fd:55:82:f4:82:a9:37:49:df:93:6a:ca:
9a:65:9d:e8:cb:99:b8:32:c4:c7:83:37:af:f9:ba:
83:ff:10:da:5a:ba:87:f2:59:bf:3f:d9:76:18:16:
62:cc:c1:f1:48:6e:8e:aa:d4:ea:e3:92:43:62:01:
98:f0:66:73:89:39:21:97:8c:98:45:59:49:b3:13:
44:ef:f3:cf:a5:ef:73:e3:ac:0f:3f:94:56:7b:fe:
31:10:f7:d2:93:13:4a:e6:e9:b9:07:dd:d7:63:a8:
d3:94:6d:8a:a3:e1:44:ab:c9:9d:8e:10:d3:d6:c5:
82:bb:b0:a4:19:3d:7d:01:ac:90:8a:21:16:34:dd:
00:97:16:46:5f:1e:84:db:09:c3:1e:7c:4a:d1:47:
b5:cb:2e:08:79:52:e6:a4:1c:7d:2c:fd:23:3f:a5:
f9:74:89:3f:4b:b4:00:de:dd:d7:7f:fa:fb:6a:84:
a8:4f:36:a1:87:06:b8:0d:b7:a2:fb:e5:a5:95:fb:
9c:44:db:93:62:2b:af:c5:95:36:f9:95:ed:25:36:
48:ab:63:25:a7:6d:08:b1:9f:35:fd:e6:48:ae:44:
33:85:34:b9:d4:97:3d:70:35:7d:0b:66:75:d7:fd:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EC:D2:04:41:04:47:BE:22:27:0C:01:F9:AF:80:21:66:EC:D1:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9305510D24311EF8517C49A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.18.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:74:8d:08:00:40:81:52:67:2a:27:a0:c1:fe:e8:41:65:8b:
00:ca:72:c1:05:22:28:f5:b2:47:e6:76:0c:29:e6:5e:8d:e9:
b8:c1:56:e0:04:d6:b3:93:5d:9e:fd:73:c8:0d:bb:f3:1f:43:
1c:41:ee:3d:3d:4d:a9:fe:72:e2:ea:66:3a:6e:71:37:ea:20:
39:f6:6f:a5:e5:fd:ec:e8:f8:ed:29:40:89:d9:3a:bf:63:bb:
ab:1f:a4:b9:f2:6e:14:6d:c3:f9:b2:ab:e5:08:be:c0:61:49:
32:80:64:42:de:7c:99:c2:ff:f2:1c:7d:ac:c3:18:fc:d1:96:
9f:3a:4b:bb:d8:6a:33:4c:0d:90:c8:6e:16:41:bc:41:7b:cb:
86:5e:b6:e7:bb:4a:7e:1e:2d:64:28:97:a8:35:17:dc:a4:e6:
39:76:48:10:de:1b:3c:92:4b:9f:0b:26:3b:ef:08:b1:2e:b8:
20:8b:99:7d:1a:5f:84:87:39:83:29:36:8a:31:e9:a5:bd:a7:
80:b9:78:7a:0e:59:38:cb:00:af:80:9c:64:31:7e:ad:54:0b:
04:16:c5:ab:f0:52:3d:2a:e0:9b:84:2b:47:03:d2:7f:03:9d:
b0:49:b7:5a:36:29:14:bc:26:09:62:ed:9c:7b:29:f5:d5:f0:
46:4a:4b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:12 2025 by rpki-client