Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47A9643C28C711F08A0AE6CCDAE4EC9C.roa
File: 47A9643C28C711F08A0AE6CCDAE4EC9C.roa (raw, json)
Hash identifier: 7DUrgB7C6FFmgPdrxgrimDaIDDrTHkBzkaCLzuakOTU=
Subject key identifier: B3:6D:E3:E1:70:18:40:E8:40:A1:BE:96:3A:2E:7D:0C:2F:9D:B9:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0151D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47A9643C28C711F08A0AE6CCDAE4EC9C.roa
Signing time: Sun 04 May 2025 09:08:02 +0000
ROA not before: Sun 04 May 2025 09:07:57 +0000
ROA not after: Wed 11 Jun 2025 09:07:57 +0000
asID: 395839
IP address blocks: 156.229.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86488 (0x151d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 09:07:57 2025 GMT
Not After : Jun 11 09:07:57 2025 GMT
Subject: CN=68172e72-e083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1f:55:7f:e0:f1:f1:5b:75:64:f1:3f:85:6e:
20:9a:fa:99:30:b8:22:f7:0d:3c:fd:12:1b:88:a7:
71:ad:48:be:6d:ff:9d:d7:81:93:bf:6c:d9:69:22:
c7:78:d4:7b:b4:e0:14:c6:b5:58:9b:aa:11:bd:dc:
e8:c0:ff:33:32:f0:3d:61:03:71:c2:9c:ac:fe:5a:
0e:7b:2a:28:81:2f:e7:23:8e:26:ae:85:ec:0f:61:
c3:f7:e2:af:86:ca:0f:f8:87:57:77:4d:e6:a7:72:
19:ae:4c:ff:e2:52:a7:b7:80:2a:11:54:4d:d1:ab:
fd:d6:1a:db:d3:34:ae:0b:f6:69:ad:9d:8d:25:9b:
50:da:d5:d5:02:50:8e:17:b0:dc:06:9e:c9:a9:a1:
10:1c:85:c1:32:7e:bf:0e:51:88:2a:5c:62:81:22:
a9:f3:53:33:f8:ae:8f:a7:85:c6:f1:c5:b6:5a:62:
2d:fd:6a:52:40:e7:02:b1:e9:17:1c:ad:80:5b:51:
be:fe:48:c4:14:e8:d5:10:e8:0c:fc:43:9f:f6:03:
70:cb:89:e9:0e:e2:30:4c:68:52:61:66:59:58:3f:
e3:5a:15:b8:3c:4e:84:8a:86:27:57:49:9f:71:96:
51:65:24:42:15:e5:7e:a4:62:b3:27:9c:01:50:9f:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6D:E3:E1:70:18:40:E8:40:A1:BE:96:3A:2E:7D:0C:2F:9D:B9:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47A9643C28C711F08A0AE6CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.27.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2c:8a:0b:41:23:34:ca:46:9b:98:1a:50:2f:74:16:59:16:
cf:d5:1d:de:ef:60:6c:c4:93:d2:ca:5a:6b:4a:29:0a:af:d0:
18:0c:61:d9:2c:08:99:ef:82:47:0e:26:a4:7b:45:ca:73:74:
75:33:2f:ee:5f:aa:e5:8f:ee:82:9a:6a:ca:bd:5f:cd:ee:2f:
8a:72:e9:cf:78:e3:8a:c5:ce:8c:9a:39:72:29:12:ed:d2:d9:
0d:f7:09:df:49:d8:51:87:2d:1a:61:26:16:27:5c:4c:02:c8:
78:0a:fb:b1:24:0a:e7:cd:e2:1f:42:43:57:7b:ef:7b:2d:0d:
93:97:03:1f:bb:87:56:5f:b2:18:96:6b:c2:0c:fc:18:6c:b9:
13:6b:0c:54:dd:0e:c2:fa:9e:2d:55:25:18:f1:e9:b0:e7:2f:
17:27:e8:d6:e8:a9:c4:c6:ca:74:b9:d3:af:2f:b4:9a:9f:c0:
ee:32:be:a6:e7:8d:84:6b:3d:de:db:bc:a3:3d:65:e6:14:2e:
cf:24:78:f9:e6:6d:dc:5e:d9:23:54:b3:98:99:98:bf:c1:fc:
9a:81:99:1e:71:76:eb:26:f8:d0:d0:46:ab:08:28:75:c6:2c:
8a:00:03:93:cc:4e:6b:70:40:42:b2:5d:ee:49:3c:ae:fd:07:
e8:02:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:59:09 2025 by rpki-client