Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/643C25B4241F11F0BA3F8F9DDAE4EC9C.roa
File: 643C25B4241F11F0BA3F8F9DDAE4EC9C.roa (raw, json)
Hash identifier: x1Qx9hcigrkG1RkQpDBDE7UsImMHb4n4QH3PeE6xC8o=
Subject key identifier: AB:4E:B9:BE:75:C5:1C:DE:2D:B6:EB:B0:C7:6D:68:A5:23:AE:22:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014EE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/643C25B4241F11F0BA3F8F9DDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 10:56:10 +0000
ROA not before: Mon 28 Apr 2025 10:56:05 +0000
ROA not after: Mon 13 Mar 2028 10:56:05 +0000
asID: 17561
IP address blocks: 156.231.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85735 (0x14ee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 10:56:05 2025 GMT
Not After : Mar 13 10:56:05 2028 GMT
Subject: CN=680f5eca-91b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:c8:69:4f:08:cf:7e:a0:0c:62:e5:8c:66:
c9:a0:19:81:b7:c2:4e:65:6f:fa:37:37:54:7d:78:
83:21:98:d4:d7:7a:8d:76:d1:5d:03:39:54:0b:9f:
24:2a:53:64:bc:34:4a:36:e2:67:97:35:91:8d:64:
9b:4c:25:5a:2d:c6:b6:39:6e:a9:e3:19:9c:84:69:
4b:ec:e2:ff:4b:65:cf:1f:6f:a7:a0:b4:4b:33:16:
cb:e9:6a:c0:b7:05:3f:ce:e8:1b:09:b2:4e:23:85:
77:b8:fa:23:ab:44:f0:e5:97:0d:55:fc:c6:c1:54:
6b:9d:12:8c:7a:01:82:0f:be:54:20:93:8d:70:3b:
f4:a5:02:0e:a9:43:20:c7:ca:ae:23:df:ff:57:9f:
6a:16:66:75:54:d4:25:c5:e6:7b:6a:90:a2:4d:2a:
5b:bc:83:ef:54:b3:23:36:49:e4:19:ef:1e:7f:42:
1e:b7:09:7f:4c:9f:93:fb:da:a9:ed:66:9c:ac:36:
32:2b:bb:cf:90:09:05:4a:aa:34:92:83:6a:f6:b8:
12:c0:c2:e2:e0:66:2f:d6:58:47:e0:a7:cc:e3:64:
96:d8:19:b0:94:0e:61:04:d5:07:5f:f6:df:09:bb:
a6:d4:44:27:be:43:ef:16:c5:87:5a:0d:f4:b3:9c:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:B9:BE:75:C5:1C:DE:2D:B6:EB:B0:C7:6D:68:A5:23:AE:22:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/643C25B4241F11F0BA3F8F9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.110.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0e:df:99:ac:a6:f1:ed:c7:ef:e6:10:b0:b5:e4:2a:0c:19:
35:3e:5b:96:c1:66:a7:48:27:29:81:2e:e8:82:b8:e2:29:20:
9b:dd:6f:fa:07:cd:5c:50:46:f1:eb:e2:76:d5:2e:31:a6:64:
a4:4f:9e:0b:c1:e0:06:b4:b6:e4:49:00:9b:0b:c1:07:ee:e1:
b3:d7:7e:ea:ae:e9:d5:b8:ab:2d:1a:c2:57:20:99:c0:11:dd:
4e:76:63:4e:14:e8:83:3f:c4:d3:07:33:cc:b4:0c:b4:bd:91:
5d:c1:49:15:c5:3b:30:32:b7:06:4c:0a:06:d1:8d:6e:11:44:
96:86:23:5a:8a:67:63:7c:60:0a:08:68:99:62:e7:4e:b7:d9:
f1:7e:d0:2d:05:7c:7b:4b:83:7e:3b:5e:5e:42:ce:88:d4:55:
09:ee:88:a7:c0:4b:f3:1d:02:81:10:eb:5d:1b:da:ed:82:63:
c7:cb:45:81:74:c4:f6:12:b4:06:0c:ec:72:b1:07:ce:ec:49:
6e:9d:ee:b4:d0:a5:79:c4:ab:21:60:15:75:3b:9d:ed:30:f6:
a3:30:0e:67:2a:ad:21:ec:0e:8c:30:94:c0:2f:fd:af:e0:8d:
8f:33:18:e0:85:3b:40:a8:c8:f6:ff:8e:60:f6:44:53:90:b5:
98:02:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:40:10 2025 by rpki-client