Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B35D2EA4241F11F08FD7729FDAE4EC9C.roa
File: B35D2EA4241F11F08FD7729FDAE4EC9C.roa (raw, json)
Hash identifier: Kvc5t0Y33am6PrNL9Z41qyb3nvb6hIi2ylyJy3PPUhI=
Subject key identifier: F7:1B:D5:1B:31:99:16:87:1F:8B:F2:A9:3E:60:6C:DB:57:B9:3F:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014EE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B35D2EA4241F11F08FD7729FDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 10:58:22 +0000
ROA not before: Mon 28 Apr 2025 10:58:18 +0000
ROA not after: Mon 13 Mar 2028 10:58:18 +0000
asID: 17561
IP address blocks: 156.231.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85737 (0x14ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 10:58:18 2025 GMT
Not After : Mar 13 10:58:18 2028 GMT
Subject: CN=680f5f4e-fd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:79:cb:42:40:f6:9e:fc:a8:32:41:dc:b6:
8c:28:de:bb:fe:f8:17:e5:31:3e:fd:79:7a:42:fc:
22:2f:10:44:c4:0a:5d:6d:49:ce:d3:31:b4:ad:38:
9c:30:f3:ba:5b:d8:05:1e:7c:22:d4:a0:32:29:b4:
56:f7:75:3c:4d:d1:ab:31:d5:f9:bd:b5:2e:df:59:
49:82:6a:21:9d:70:11:92:76:c3:1a:56:53:04:fd:
ce:77:0a:eb:2e:25:46:51:85:a0:c3:b1:72:23:ea:
22:d1:c5:cb:64:56:7d:0b:eb:55:ea:2c:2b:24:c0:
04:94:05:47:b0:74:88:7d:c8:7e:96:61:e2:b8:ae:
75:07:ea:86:23:94:28:46:7d:03:dd:f1:d7:55:e4:
8b:bd:f2:06:fb:b5:84:de:b4:9f:9f:1f:fb:09:15:
08:e4:aa:b5:60:d8:f8:ec:af:08:b4:c0:c5:7a:bb:
5b:c0:ec:a0:52:b8:86:fe:94:4a:6b:4e:77:e8:31:
46:a4:17:a6:79:15:dd:ca:ec:26:cc:25:31:56:58:
11:5a:9c:9e:0f:7a:0e:60:64:0d:61:0d:10:bd:e0:
fa:40:e4:0a:bb:23:93:44:2a:4b:d9:9d:4f:23:4a:
97:f3:b6:b6:d4:16:6b:1d:b2:71:be:36:fa:ab:03:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:D5:1B:31:99:16:87:1F:8B:F2:A9:3E:60:6C:DB:57:B9:3F:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B35D2EA4241F11F08FD7729FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:13:22:f7:8d:92:2d:3d:5f:93:f4:35:0c:a4:ac:e6:f0:1a:
ee:b3:89:df:c1:35:ba:47:10:0a:51:83:03:c8:2c:0c:ed:d6:
88:5e:af:20:12:d9:23:bc:77:2d:4b:88:ab:8f:4e:9c:ea:87:
41:d3:6f:04:7f:bb:b2:5a:96:9d:6c:25:c2:53:db:a8:70:39:
3e:b3:90:36:8d:24:89:a8:ca:70:1b:95:19:7f:9f:36:33:1e:
71:00:93:c6:cc:80:83:c4:49:b6:ad:fd:b2:f8:42:a3:15:33:
bd:6b:61:44:b2:b5:d6:41:05:58:b3:49:45:7c:98:3c:79:d6:
6f:38:1b:04:c3:82:fd:06:7c:f5:46:97:43:4f:a3:6d:24:a5:
a4:95:80:9c:d2:c7:c3:ca:8d:69:b0:38:41:d7:ce:7a:1a:bb:
18:9f:ce:0a:e3:50:50:a1:26:5b:77:b6:3e:60:6f:2a:8b:b8:
93:81:50:70:6d:ca:c8:65:89:fc:c0:b1:19:4c:c8:6f:7e:a3:
e3:84:12:df:5c:11:ca:f7:58:07:9a:30:80:17:2d:33:be:88:
ef:31:dc:97:07:72:e6:fe:16:08:92:0e:4b:6a:6d:3f:eb:bd:
96:3a:67:b9:fe:fd:79:28:66:83:f1:9e:46:a2:1b:a7:ec:12:
aa:85:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:37:39 2025 by rpki-client