Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A712BC402A3211F0840D3DCBDAE4EC9C.roa
File: A712BC402A3211F0840D3DCBDAE4EC9C.roa (raw, json)
Hash identifier: ZLaFDNxPRruXyIaHjpEZ8A9bNYWc7M0deMfYAiAxqls=
Subject key identifier: C3:52:E6:69:C5:A8:26:19:B2:8E:57:8D:57:95:98:35:71:18:1B:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015227
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A712BC402A3211F0840D3DCBDAE4EC9C.roa
Signing time: Tue 06 May 2025 04:29:09 +0000
ROA not before: Tue 06 May 2025 04:29:05 +0000
ROA not after: Fri 06 Jun 2025 04:29:05 +0000
asID: 398478
IP address blocks: 156.245.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86567 (0x15227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 04:29:05 2025 GMT
Not After : Jun 6 04:29:05 2025 GMT
Subject: CN=68199015-fcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:5d:22:8e:76:c0:ef:95:90:b0:20:5a:07:
e1:14:0f:99:af:56:61:3d:41:29:62:b2:46:d2:bc:
73:fc:7d:e4:19:a2:35:2c:18:96:de:08:bc:c7:fb:
2c:0c:60:75:f2:f6:b3:e9:8f:51:cd:67:bc:10:5f:
d1:14:5d:0d:9f:ef:4f:0b:5b:aa:09:b6:5b:b7:f7:
4b:45:ab:28:2f:e9:7b:6f:ff:03:1d:2e:97:5b:8a:
10:c3:50:98:7f:17:ed:51:fb:89:1a:19:23:cf:42:
bd:92:6e:61:03:4a:66:ba:3e:09:3a:c0:87:8c:ee:
d0:69:b7:c7:d9:e1:06:4c:41:28:66:24:69:f8:59:
0d:9d:6a:40:dc:bd:29:23:5e:04:67:74:0a:e8:e9:
64:0a:6b:bb:a2:5d:47:d7:54:a9:76:9e:2a:0b:a0:
d6:2f:b4:fb:6b:5b:3e:ab:6a:a8:21:31:6d:d1:2c:
c1:1f:ad:e8:ae:cc:4c:4e:f1:ea:c3:80:23:89:7e:
9d:56:7f:66:5b:0c:70:ce:b8:f8:3a:62:47:36:43:
07:40:82:2d:50:b6:5b:6b:3f:69:b6:38:53:ac:d8:
a0:56:0b:10:09:30:13:8f:8a:76:de:e4:5c:68:c3:
1e:ab:29:b5:bd:b0:2a:3b:e9:1e:46:96:b3:3a:e4:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:52:E6:69:C5:A8:26:19:B2:8E:57:8D:57:95:98:35:71:18:1B:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A712BC402A3211F0840D3DCBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a4:45:63:e2:0e:e7:bc:e8:fb:66:03:e5:a6:d2:b2:1b:33:16:
f0:37:0c:26:12:5b:fa:38:4d:64:b0:f7:96:35:fe:b0:96:5c:
db:d4:02:a7:18:a1:18:80:86:60:81:c6:6c:a1:7b:ff:cf:0f:
e3:1f:4d:44:77:ef:a4:12:98:bf:cf:ca:37:29:ef:5a:5d:fb:
df:04:c8:da:5a:3b:72:f3:36:2b:48:03:73:82:d3:cb:fd:89:
49:8e:c8:91:8a:81:66:f1:cd:7e:24:0a:63:46:f9:1e:eb:ea:
a7:c1:00:17:31:8c:64:44:79:f3:41:b2:b7:84:ee:74:4a:cf:
fd:a8:31:cc:c2:ae:f8:97:54:7c:ae:8a:c3:79:7a:3f:1b:e8:
07:25:3f:ce:eb:31:69:42:96:4a:08:fd:d5:eb:41:09:69:32:
28:bc:01:25:49:b0:7b:b3:24:ac:c8:b0:dd:51:30:b1:02:f4:
74:99:1b:60:6d:42:90:a6:3d:6f:6d:90:24:25:61:26:d9:c4:
6a:5f:2c:9c:b6:1d:c6:92:f4:a0:9f:99:7f:27:4e:ce:4b:99:
1c:b8:57:c7:09:9b:2b:ce:ba:13:ae:64:d9:09:90:fc:d2:a0:
7f:7d:56:c6:b7:12:78:40:8c:5a:ea:79:e3:30:7c:b5:ac:ea:
45:81:bd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:01:38 2025 by rpki-client