Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF7231D4243A11F0BD74ADD2DAE4EC9C.roa
File: AF7231D4243A11F0BD74ADD2DAE4EC9C.roa (raw, json)
Hash identifier: OcP86FDqwSanOKUe+f4Jj9C567lOYrS9VjDnCzVI4Bg=
Subject key identifier: 53:D9:39:39:64:1F:85:F6:CA:9B:28:49:4C:14:2D:45:3F:6D:3E:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF7231D4243A11F0BD74ADD2DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:11:32 +0000
ROA not before: Mon 28 Apr 2025 14:11:28 +0000
ROA not after: Sun 26 Mar 2028 14:11:28 +0000
asID: 17561
IP address blocks: 156.242.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85854 (0x14f5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 14:11:28 2025 GMT
Not After : Mar 26 14:11:28 2028 GMT
Subject: CN=680f8c94-9c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:24:f5:91:d3:f4:a1:bf:80:2c:05:ce:b3:
ea:49:f2:9c:e3:1b:19:e9:90:3c:f4:66:12:02:5e:
4a:3c:50:de:b9:87:85:cd:da:3f:80:ae:46:70:47:
30:99:e8:38:97:cf:99:74:d4:5a:c5:a9:83:4b:c2:
1a:dd:0e:f1:50:19:28:e4:07:9e:60:a9:f2:2f:31:
f7:27:b5:9e:38:cc:1f:eb:43:17:ff:ae:d0:90:d1:
d3:25:11:4d:ab:0a:ba:b3:f5:7b:ac:16:56:af:64:
c7:84:a7:24:2c:8d:57:f3:fb:96:dc:ab:ec:53:da:
03:37:c1:79:3e:d4:5d:52:0f:3e:f3:23:38:24:35:
df:bb:96:64:b4:6e:8d:9f:14:2e:39:f8:f9:de:35:
a5:a8:5f:d3:c2:59:97:13:41:8f:96:e2:8c:74:17:
14:f3:5c:9c:91:31:09:24:1d:21:24:b3:20:3c:a7:
f1:da:6d:fd:90:7e:ae:01:81:50:65:45:ef:10:e2:
9b:66:78:fc:37:d8:d6:4c:68:f2:57:60:a8:e2:bb:
29:cd:9f:0d:14:b4:dd:c4:9f:59:31:83:35:40:28:
97:98:fd:1b:3e:57:4d:bb:f2:40:36:34:6f:23:ea:
7e:c4:21:de:f5:54:78:9b:cb:7f:f3:7d:db:8f:e6:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:39:39:64:1F:85:F6:CA:9B:28:49:4C:14:2D:45:3F:6D:3E:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF7231D4243A11F0BD74ADD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:7f:dc:8c:aa:c4:38:57:a6:f2:a3:b3:ec:76:aa:45:3d:c0:
ae:16:36:5e:aa:c1:2e:16:53:bb:8f:c8:de:db:00:12:db:2a:
d9:3c:3a:bc:b9:48:f2:ec:c2:ef:b1:b5:1f:1c:16:dc:4d:6c:
14:f7:a9:26:11:64:a8:02:4f:ac:e7:85:69:96:c0:ac:d6:f7:
37:54:01:f1:de:eb:11:83:74:90:2d:7f:d7:c2:cb:df:93:20:
87:64:bc:7a:9c:33:f6:a5:83:d9:65:a2:a9:3e:e8:74:30:20:
69:6e:51:87:e4:cb:6c:ed:1a:06:07:ae:ea:7c:10:ad:bb:19:
48:a9:60:e6:1c:ed:e6:3e:61:d0:14:71:f8:e8:a7:15:ef:8e:
23:46:1f:2d:c4:48:ac:95:8a:f8:6b:ee:e5:e1:aa:bd:46:db:
96:8d:9a:8c:15:67:2f:cd:17:1b:37:26:37:93:82:6c:c3:22:
6b:df:c2:c8:b4:a5:82:a6:fc:43:5a:b8:5b:55:97:c5:a8:5d:
1d:d9:f0:e3:41:87:50:84:e1:2f:fb:76:d8:93:65:e4:1d:4e:
3f:d0:50:06:cf:95:3f:dc:c6:85:5e:43:4b:99:c2:a6:6a:e5:
2a:b7:c6:02:f4:9b:92:ee:56:f9:d9:46:4c:a7:04:40:93:36:
b9:70:ee:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:42:20 2025 by rpki-client