Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7A36956273411F0894A5CC9DAE4EC9C.roa
File: C7A36956273411F0894A5CC9DAE4EC9C.roa (raw, json)
Hash identifier: 8Up58kr2het2DwWmiplOIHrUyDkq6pcR0CkLBOV4ucM=
Subject key identifier: EB:0E:F1:1A:FC:F7:3E:10:4D:54:7E:76:01:4F:AA:F0:C5:15:33:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015166
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7A36956273411F0894A5CC9DAE4EC9C.roa
Signing time: Fri 02 May 2025 09:06:49 +0000
ROA not before: Fri 02 May 2025 09:06:45 +0000
ROA not after: Tue 03 Jun 2025 09:06:45 +0000
asID: 203020
IP address blocks: 156.253.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86374 (0x15166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 09:06:45 2025 GMT
Not After : Jun 3 09:06:45 2025 GMT
Subject: CN=68148b29-d1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:5e:7a:74:97:10:89:4f:df:65:da:1a:94:
2c:38:92:1a:4a:06:3e:1e:b6:8b:21:f2:a3:4f:30:
bb:8d:3e:f2:96:ee:44:bf:36:15:c1:f8:b6:70:54:
f7:65:34:43:06:72:3c:36:04:6f:56:cd:dd:85:0a:
69:9b:4b:0f:14:43:6f:b8:97:1e:94:6b:5b:4e:df:
e0:f2:41:ba:51:03:01:ff:4a:ac:ed:35:da:90:15:
52:9b:c7:b3:27:c2:c1:de:4a:1a:c3:b5:1c:37:be:
2b:32:03:89:d0:cc:47:0d:63:35:bf:d9:2a:47:3d:
98:c4:c1:02:f9:be:47:a1:75:dd:07:84:8e:b5:27:
1b:21:c3:04:12:ef:a8:91:f0:09:da:f3:73:c6:96:
d8:73:4e:7f:7f:e0:9d:7b:51:db:d5:84:50:da:d7:
bb:15:9e:d4:b4:e9:ea:15:be:89:e3:a7:13:ee:c1:
ad:a8:4a:41:ac:d1:19:c9:83:6a:15:ef:f4:65:cd:
90:50:f5:65:f7:bd:88:c5:3c:3b:cb:02:ea:91:87:
41:bd:95:30:9c:e2:ee:17:39:e8:95:a8:f3:f7:1c:
4e:17:b9:5e:3d:07:ba:06:9e:4b:82:e9:30:fe:20:
40:f3:2e:1d:98:32:30:cf:33:b3:58:99:65:d8:1e:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:F1:1A:FC:F7:3E:10:4D:54:7E:76:01:4F:AA:F0:C5:15:33:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7A36956273411F0894A5CC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.214.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:40:47:73:67:04:6b:3c:63:fc:c1:07:61:7e:48:09:74:7d:
26:c7:b8:88:bb:97:fe:6e:d6:69:1c:4d:9e:0d:f2:7c:f3:02:
12:79:20:05:07:4c:82:3c:c4:cf:33:cf:92:32:34:bd:b7:67:
63:54:91:96:30:b9:05:ae:2a:58:6b:d2:b2:08:78:de:40:c6:
46:f1:04:f8:76:d6:90:ff:1f:24:f6:1e:03:df:20:56:5b:37:
97:63:56:a4:c4:86:0b:ba:1c:7f:3e:33:a9:e3:05:79:e8:2c:
c2:06:8f:af:8d:46:61:51:30:64:06:92:5f:4a:77:42:dd:d7:
16:ee:2a:46:e5:75:1b:50:54:bf:23:b3:95:25:f7:3d:76:f7:
e5:27:84:a0:f0:bf:7f:75:09:2d:8d:a4:2a:37:6e:a7:a6:40:
3b:de:7d:c6:32:b6:1e:d6:76:29:81:8d:65:95:ee:c8:e1:80:
a9:69:83:6f:12:29:5c:bc:17:f4:f7:d0:9b:51:c0:83:c9:4d:
aa:87:db:9c:80:61:85:72:29:ad:e9:ef:ee:33:c8:ec:3e:26:
93:7d:64:df:73:05:90:47:17:7e:2f:19:bc:bb:4b:1b:8d:43:
99:2e:66:20:ca:5e:b5:4e:bd:d8:84:67:a3:a8:4b:9e:a5:5f:
9a:61:e1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:08:13 2025 by rpki-client