Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E147998242011F0B740F7A3DAE4EC9C.roa
File: 4E147998242011F0B740F7A3DAE4EC9C.roa (raw, json)
Hash identifier: +qCrmjD3M1XVSFfFi63Pky/EGBTDF2KGnmYVKiUp8zc=
Subject key identifier: EC:0D:07:DE:19:54:CB:AC:05:BD:CA:16:26:B7:B7:8E:18:1D:48:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014EED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E147998242011F0B740F7A3DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:02:42 +0000
ROA not before: Mon 28 Apr 2025 11:02:37 +0000
ROA not after: Mon 13 Mar 2028 11:02:37 +0000
asID: 17561
IP address blocks: 156.231.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85741 (0x14eed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 11:02:37 2025 GMT
Not After : Mar 13 11:02:37 2028 GMT
Subject: CN=680f6052-06b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:8c:1c:fc:9d:3b:da:f8:3b:43:c7:ee:e6:
d4:bc:7d:32:2b:9b:f4:72:49:c0:4c:58:97:ce:8d:
40:4c:1a:75:1a:33:ca:67:d1:3c:c1:ac:58:68:8a:
f7:36:19:2e:39:f5:0f:d4:cf:d7:fa:a8:56:dc:d9:
25:9a:75:f6:03:83:c4:75:29:e9:91:e8:92:9c:06:
e7:9d:2d:31:2f:6d:51:53:67:d2:62:20:62:3b:73:
5e:de:3b:f0:42:4e:6a:d5:08:22:1e:f5:ae:22:02:
0d:8e:80:01:fd:84:67:ec:9b:4e:e7:ef:24:f4:d5:
a1:db:4e:36:2d:d5:db:23:72:50:a5:15:d1:98:f8:
17:b6:00:06:03:64:1a:97:11:9b:20:09:4c:a9:b5:
db:e6:15:71:d5:56:82:12:36:a2:0a:63:30:55:0f:
aa:9e:81:8e:c6:e5:c3:a0:03:38:21:46:32:a5:35:
82:0f:3d:7c:99:62:8a:83:d0:52:dd:ea:6b:05:32:
42:0b:3b:4e:30:db:26:4f:fe:4c:5c:26:20:15:b4:
9f:aa:14:91:ad:bf:32:fd:23:a1:0f:12:5f:cd:8d:
8c:bd:c2:6b:d2:d1:6e:c3:8f:1f:ed:39:c5:45:91:
55:8c:d7:f2:98:00:db:5f:be:8e:cf:22:10:51:e1:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:07:DE:19:54:CB:AC:05:BD:CA:16:26:B7:B7:8E:18:1D:48:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E147998242011F0B740F7A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.177.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5b:d3:f3:c6:0d:84:0f:bc:af:94:f3:40:4f:9f:32:d3:88:
73:ce:9a:61:fa:da:f4:fb:05:52:ee:b4:cf:fc:66:31:7e:db:
cf:ac:65:3b:2d:25:8f:da:5e:b8:2e:b6:aa:96:e0:8b:e9:3f:
cc:ae:a4:33:64:cf:35:61:ba:b3:18:14:4a:ff:65:30:b7:fe:
fc:d3:80:8a:4e:7a:40:51:48:d7:74:ca:3b:a1:d4:9d:95:09:
d7:be:3c:9b:90:e8:81:b8:f3:22:2c:d9:eb:72:29:e3:b1:d8:
6d:30:1c:d7:83:c2:0e:92:95:2a:50:7a:f9:04:23:d7:c6:da:
4d:d4:06:62:03:2c:32:d1:aa:7b:e5:85:77:dc:43:3b:a9:48:
1b:bf:0d:3e:1f:03:0b:a1:93:07:64:2f:a7:cb:9e:1d:aa:3c:
e5:34:28:80:ad:4e:61:5a:9c:0a:99:c7:cd:9b:26:fe:d4:c4:
f2:1f:e3:18:2d:b6:2c:55:b1:ce:8d:fc:9a:a7:4e:51:6f:c4:
60:56:ba:3d:73:ef:60:f0:9d:eb:1b:b3:2d:58:97:a8:75:70:
b1:13:1c:30:d3:5b:6e:c7:d1:15:41:7b:7a:da:54:bb:14:a0:
ac:d9:c0:40:be:41:9a:a7:81:ff:03:9c:22:22:da:28:c5:0f:
f8:bd:1f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:35:15 2025 by rpki-client