Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/029907C824F611F088F585BFDAE4EC9C.roa
File: 029907C824F611F088F585BFDAE4EC9C.roa (raw, json)
Hash identifier: xBm3pBYz2liWs1TIVkxHRXsGIWHgCAna+7C1qyxvmfE=
Subject key identifier: 29:AA:CD:94:79:E3:03:F4:8D:68:01:27:9D:EA:83:E0:29:E2:97:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015055
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/029907C824F611F088F585BFDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 12:32:28 +0000
ROA not before: Tue 29 Apr 2025 12:32:23 +0000
ROA not after: Tue 29 Jul 2025 12:32:23 +0000
asID: 9294
IP address blocks: 156.247.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86101 (0x15055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 12:32:23 2025 GMT
Not After : Jul 29 12:32:23 2025 GMT
Subject: CN=6810c6db-2b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:83:2f:79:cb:2c:32:01:40:59:10:8f:98:
23:e7:27:8e:0f:1e:84:b2:3e:8e:0c:1f:e6:dd:1f:
6a:ba:83:ef:f3:70:c5:fa:f7:43:a1:1d:67:13:61:
83:18:61:87:27:11:70:68:cf:32:83:00:1e:73:3d:
7a:14:0c:34:38:0a:c7:ee:87:7d:e1:1b:25:fb:48:
26:5a:e3:29:6c:82:de:55:04:c1:37:93:c6:fd:ae:
47:e0:48:41:c4:91:07:1f:e8:82:7a:8c:bb:08:a0:
bd:86:b5:8a:80:47:3f:88:fd:fa:ad:71:3e:b8:2b:
0f:7b:61:68:62:0b:fd:d9:02:96:39:1f:68:63:66:
7b:cf:53:ba:58:8b:af:85:25:ff:53:6a:da:44:fc:
57:c5:26:c1:75:e4:77:a3:97:24:25:8a:6a:fd:7e:
8d:bc:68:fd:1f:96:df:ab:e3:98:0a:26:52:1b:81:
41:1a:cc:e3:5d:cb:36:88:7c:0a:27:a2:8a:ad:30:
aa:80:8e:e5:b7:ac:13:f2:96:12:83:72:b4:8b:bc:
30:9d:86:db:d8:3b:c3:bd:4f:0d:01:6c:e2:78:dc:
b1:9d:f3:ff:6b:88:c4:5b:2b:7d:20:92:76:e9:f6:
a8:35:76:b0:74:99:82:0a:89:2b:8b:ca:73:4e:3e:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AA:CD:94:79:E3:03:F4:8D:68:01:27:9D:EA:83:E0:29:E2:97:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/029907C824F611F088F585BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.64.0/18
Signature Algorithm: sha256WithRSAEncryption
03:83:5d:86:c3:33:7b:9e:a2:0d:eb:b5:ab:75:cd:e6:58:16:
11:ae:1b:a4:3d:23:7e:63:14:5f:e2:2f:09:71:e2:f1:be:e8:
12:c2:9f:32:09:69:7f:bb:a8:37:41:0c:37:7e:82:2f:5e:f5:
5b:a2:16:38:5a:53:a8:87:5b:2f:81:60:e2:ef:ef:81:14:cc:
93:17:62:4e:a4:0c:64:45:57:ed:91:d2:b9:22:62:68:b3:0a:
c7:10:49:03:19:53:49:06:d3:39:97:bb:e4:61:3b:69:a9:47:
d7:b4:b3:a2:64:d6:62:3e:94:97:f0:5d:17:e2:15:90:d7:cf:
7d:1e:a3:a3:5b:bb:04:c2:84:36:8a:86:92:7d:95:89:15:66:
e5:c5:b5:a8:64:48:e9:ae:10:1f:34:ad:78:a5:31:95:26:58:
ca:b1:fd:61:93:34:49:21:f7:ca:e4:90:af:ef:65:e6:55:90:
a9:4c:d2:85:53:fe:b8:fa:9f:d0:86:df:b9:16:7b:ea:5a:b3:
48:3b:18:c1:83:99:b5:87:48:21:02:b7:98:d5:e0:3e:4c:69:
00:e0:77:4a:89:f4:0f:3a:c6:cc:c5:a5:e2:37:49:3a:2a:28:
52:a7:0e:a0:9f:ce:e1:7c:43:4c:c5:78:52:fe:d7:d8:d1:28:
c4:03:ba:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:28:15 2025 by rpki-client