Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E3513E243911F0A5577DCBDAE4EC9C.roa
File: 60E3513E243911F0A5577DCBDAE4EC9C.roa (raw, json)
Hash identifier: GTGYsxdd5rgSgT9fbnp9nsvXCiAbcah+JH/avInvITI=
Subject key identifier: 20:4B:55:BB:59:74:8C:74:06:36:FC:0C:68:48:2C:E3:B7:BA:BC:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E3513E243911F0A5577DCBDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:02:11 +0000
ROA not before: Mon 28 Apr 2025 14:02:06 +0000
ROA not after: Sun 26 Mar 2028 14:02:06 +0000
asID: 17561
IP address blocks: 156.242.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85839 (0x14f4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 14:02:06 2025 GMT
Not After : Mar 26 14:02:06 2028 GMT
Subject: CN=680f8a63-29cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:85:aa:ae:d7:48:e9:9e:86:a4:2b:0a:08:
57:60:83:5a:ca:b3:e5:4c:10:c2:61:88:ff:ae:b0:
57:5b:59:0e:01:d5:32:2a:08:9b:23:1d:da:47:95:
44:13:7e:2b:86:ec:1e:a6:b2:6d:67:d9:19:f9:db:
99:ec:7a:ef:e3:1a:1e:3a:5e:18:4d:bd:7d:11:87:
cc:4c:16:11:4f:49:10:c3:4a:6e:ae:ba:d5:c6:f5:
28:20:95:ac:88:c3:7b:43:ce:47:00:19:90:23:bf:
fa:bc:82:6f:51:e3:d5:f8:22:d4:ce:55:b7:27:46:
69:23:94:46:5e:ba:c6:f6:a2:e6:e0:f2:e3:04:fc:
3e:b3:60:a5:89:a0:ef:f3:4a:dd:74:bd:3f:2d:f0:
02:fd:cc:34:c6:18:c6:42:e3:6d:3e:bc:60:ce:fa:
fd:c8:bc:80:03:c5:23:ad:e0:f4:7c:d9:c7:13:8e:
11:80:14:45:41:65:96:7f:81:59:d0:63:2e:24:ca:
c5:06:a8:fc:46:47:79:ab:5a:5d:e2:0c:90:17:2d:
34:73:4c:f5:11:3c:6f:08:0e:4b:21:e7:4d:c5:95:
f6:2b:7c:23:e4:06:a7:aa:11:65:e7:b0:da:47:8b:
f2:83:05:22:3b:23:de:59:17:d4:68:40:24:e9:9e:
5d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4B:55:BB:59:74:8C:74:06:36:FC:0C:68:48:2C:E3:B7:BA:BC:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E3513E243911F0A5577DCBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.56.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d3:80:e8:37:0e:d5:a0:f4:81:2f:3b:7c:85:14:e3:a9:4d:
36:85:01:26:f8:57:d7:4a:10:64:ec:c1:f4:af:e9:a7:60:05:
d3:80:ac:c9:97:ba:ea:1e:6c:29:57:5e:58:2b:96:bd:6f:3d:
73:cc:01:5a:8d:cd:8f:43:e8:2f:6f:67:f5:f1:81:93:b6:e2:
8b:c8:f5:8d:1d:c6:f8:cd:db:0f:c7:07:3d:ee:a4:b4:f0:e0:
c0:4f:40:79:67:54:55:df:3e:15:1f:b8:66:db:4a:77:b4:87:
54:3b:59:42:01:45:14:ff:d7:42:d5:16:19:d0:a0:8d:5c:79:
49:01:15:c8:73:97:89:9a:6a:3c:22:de:03:d8:10:e3:b7:9c:
de:b3:81:76:fb:67:ea:f8:71:35:02:68:57:97:b2:7a:fb:4b:
b0:3f:e0:07:5b:e4:92:03:df:59:98:8d:7d:c7:2d:25:c0:2a:
08:8e:f4:59:4f:a4:08:4c:c1:de:c2:aa:41:d4:3c:2a:7d:a4:
a8:b0:7e:1f:81:6d:6d:8e:ec:0a:16:a7:51:a4:d3:17:b7:5e:
54:e8:b8:d7:b3:5a:19:0d:1a:04:4b:97:e7:45:bd:6e:3f:34:
8d:ba:34:6c:06:48:d4:b2:88:9b:64:4b:bd:54:ae:3e:92:ea:
fc:fc:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:43:26 2025 by rpki-client