Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CDF1A7C246D11F09A10CEA0DAE4EC9C.roa
File: 4CDF1A7C246D11F09A10CEA0DAE4EC9C.roa (raw, json)
Hash identifier: sGdzdSH71gObH1rBkLRS8pVBumgr/h1CkoH1w4B3aJ4=
Subject key identifier: 1C:2E:CD:1B:39:6A:61:A0:65:BB:97:6A:47:19:6D:71:C5:7E:27:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CDF1A7C246D11F09A10CEA0DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 20:13:51 +0000
ROA not before: Mon 28 Apr 2025 20:13:46 +0000
ROA not after: Sun 08 Jun 2025 20:13:46 +0000
asID: 7018
IP address blocks: 156.248.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85987 (0x14fe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 20:13:46 2025 GMT
Not After : Jun 8 20:13:46 2025 GMT
Subject: CN=680fe17f-04de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:05:82:fa:4d:2c:96:f3:45:61:fb:dc:0b:07:
3d:76:05:2f:22:29:ea:22:2f:b1:9f:9a:0b:e1:41:
dc:d9:28:76:3f:70:f2:1e:2c:de:af:17:b2:9e:b5:
9c:fa:f6:bd:00:f8:30:8e:b9:f0:81:27:8e:3d:ea:
b8:1f:5e:e6:d8:95:82:4a:a2:0f:f2:55:16:fd:f1:
e1:20:be:dc:75:f7:90:e3:4b:a2:d2:69:b3:cc:8d:
43:88:d0:9e:d6:ad:94:e8:56:4b:4b:89:6f:10:d7:
a7:e4:4f:0b:7c:29:f5:9f:e9:4c:b6:11:ea:d0:58:
be:04:5f:27:12:f7:da:71:2d:ef:76:4d:6d:62:b6:
43:ca:ec:05:92:0e:6a:12:df:64:e6:6b:f8:27:a9:
4a:36:5c:52:e6:50:e2:a2:45:2c:d3:af:97:6b:f9:
a6:78:d3:10:6d:5d:d1:41:e9:a5:12:47:e1:74:23:
fc:d6:86:5a:ee:56:cf:5e:84:40:81:92:86:62:b1:
07:29:94:83:6b:bd:b0:dd:2a:b6:99:08:6a:39:ab:
2a:3e:31:3e:a0:bd:c8:73:50:e2:98:79:9b:bc:c6:
42:91:ef:46:2a:e5:ac:fb:7c:b7:e3:a9:ee:a5:a4:
48:58:99:37:0e:08:62:f7:e2:f6:0d:60:ac:d7:f7:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2E:CD:1B:39:6A:61:A0:65:BB:97:6A:47:19:6D:71:C5:7E:27:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CDF1A7C246D11F09A10CEA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.112.0/20
Signature Algorithm: sha256WithRSAEncryption
29:f8:dd:4b:a5:6c:81:33:c8:77:de:35:bd:d9:ef:d2:a2:c0:
76:36:56:ef:d9:56:a2:43:57:6f:57:f3:73:3a:8c:7e:af:53:
90:60:f2:ea:97:89:be:77:16:e4:fa:8a:df:3a:32:6a:a8:b3:
1a:e3:e8:76:e0:ed:ce:e5:06:f4:47:7c:e4:21:3a:86:0b:f5:
c3:53:c8:d6:fd:1c:e0:71:5c:2f:38:96:87:93:62:89:f7:9d:
49:db:e9:ae:0e:ea:22:5f:62:9d:72:52:51:fb:74:0d:e8:94:
f6:1d:c8:2e:21:0c:f9:7a:a7:1e:e7:1f:f7:09:17:51:5c:f0:
1b:36:13:dc:60:e8:7d:28:39:ce:03:5a:f4:d5:0c:52:42:4a:
9c:6a:1e:58:04:62:24:70:f2:68:da:07:5c:f4:68:6c:3f:e6:
ce:a6:3d:1f:cb:c0:57:bc:20:90:8e:fc:f4:2e:6e:60:7a:cf:
96:f2:42:ca:d2:67:3e:b8:87:66:88:3e:e2:78:b1:dd:b6:63:
ad:94:b1:69:69:bb:76:70:4d:48:f5:2b:6e:dc:44:6b:af:eb:
ee:75:08:c1:26:2a:b7:d9:fb:db:ea:51:47:74:2b:a3:c5:3e:
84:9b:6c:bf:7b:45:39:eb:e7:b8:ca:be:f3:ea:22:b2:c8:4f:
9c:1e:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:14:42 2025 by rpki-client