Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE8577F0243811F0A4B3E1C6DAE4EC9C.roa
File: BE8577F0243811F0A4B3E1C6DAE4EC9C.roa (raw, json)
Hash identifier: YXAESbpTwOsQLeUiz2MyTWXrq5lnPnpVXhP4w4R3xjo=
Subject key identifier: 9B:D6:31:84:AC:91:33:98:E3:35:8B:1F:4C:EE:21:90:C6:15:4B:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE8577F0243811F0A4B3E1C6DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:57:38 +0000
ROA not before: Mon 28 Apr 2025 13:57:34 +0000
ROA not after: Sun 26 Mar 2028 13:57:34 +0000
asID: 17561
IP address blocks: 156.242.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85835 (0x14f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 13:57:34 2025 GMT
Not After : Mar 26 13:57:34 2028 GMT
Subject: CN=680f8952-ffe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:0d:da:86:7d:c1:7d:7f:b0:f2:69:7f:8c:
76:ee:9c:9f:42:39:2a:b4:6c:d9:a5:95:bd:79:8f:
95:dd:64:41:16:15:0e:9f:09:fd:25:8c:3b:59:db:
b2:c6:b8:04:60:e9:9e:a7:ae:2f:63:6f:86:65:4e:
fb:5d:7c:b9:95:71:0e:fa:f9:e1:1a:df:29:1a:6d:
e4:ad:69:48:c1:0c:f5:61:3c:2a:6c:73:11:33:7d:
74:39:dc:5f:65:93:6a:c6:73:9a:12:25:17:40:de:
6a:0b:ed:bd:f6:4c:fb:5a:36:44:b6:59:ed:54:ba:
39:e3:c2:9b:f5:f1:e1:ac:26:c8:a9:a1:f4:74:77:
3e:89:aa:76:97:f8:8c:93:03:02:9b:e2:3d:42:fd:
44:ba:6a:cb:78:76:83:de:70:3d:ff:a7:62:04:36:
be:f7:07:48:1b:61:61:03:64:6d:38:9c:bc:22:3b:
18:a4:47:11:77:72:a6:da:fe:20:dd:bb:8a:82:7a:
1c:72:88:2e:e8:d1:6e:52:fc:05:30:94:da:b0:55:
11:fd:65:01:8e:ee:9b:88:0f:f2:57:27:90:03:2c:
d5:a3:d5:01:f6:8a:c2:4d:1b:72:e9:c3:8e:7f:a1:
00:71:90:9e:08:dd:91:33:da:ed:cb:8c:cf:4e:c3:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D6:31:84:AC:91:33:98:E3:35:8B:1F:4C:EE:21:90:C6:15:4B:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE8577F0243811F0A4B3E1C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.53.0/24
Signature Algorithm: sha256WithRSAEncryption
72:58:5b:ac:8b:d7:14:4a:e6:16:73:4e:86:0d:23:ac:f5:62:
35:c8:af:3a:08:8a:5a:50:a3:37:6c:8f:1a:18:38:db:ec:40:
0d:7b:94:10:28:ae:5b:9d:a3:da:be:3a:6f:5b:e8:78:43:b3:
0a:74:26:9b:d5:a8:31:bc:b4:95:b1:cd:0e:85:77:65:62:5a:
d6:37:41:3a:df:e0:2a:72:54:1d:2f:7b:60:c2:04:f2:d5:08:
78:fa:f4:97:5f:30:b4:e3:c7:56:1f:7e:ec:b4:96:8a:01:2f:
3b:2a:30:67:78:84:64:35:f1:bc:c1:43:67:c1:84:5d:9c:02:
90:32:7d:87:9d:96:a2:04:01:96:dc:cf:62:2e:e8:ac:0f:69:
6d:bb:23:11:0a:63:21:78:b7:b8:a4:21:1a:f6:67:0f:74:fd:
b2:c8:a4:38:c1:07:31:7a:cf:cd:04:f9:a3:ad:5f:f8:8c:ff:
b4:c3:66:bf:9f:a3:22:01:c6:3c:da:4c:9b:ea:84:c3:01:fa:
a3:cd:0d:91:30:75:cf:16:8e:c7:11:1a:17:3c:2e:5b:88:58:
92:60:0d:0b:ad:ee:c5:c7:97:f5:d9:b4:d3:91:c4:61:7f:d3:
88:91:a1:5b:3a:fa:e4:23:24:08:9e:17:b5:2d:4a:ff:2a:4f:
bb:47:1f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:23:32 2025 by rpki-client