Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D05C6A00242511F08C004CC9DAE4EC9C.roa
File: D05C6A00242511F08C004CC9DAE4EC9C.roa (raw, json)
Hash identifier: AEsOj8rcOZroTzLNV2lRzMtCtnqT+98VZDvM9tP8a+Y=
Subject key identifier: B1:DB:2E:10:54:40:3E:BE:4E:F5:DE:BE:F9:87:3B:9B:62:AE:A6:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D05C6A00242511F08C004CC9DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:42:08 +0000
ROA not before: Mon 28 Apr 2025 11:42:03 +0000
ROA not after: Wed 15 Mar 2028 11:42:03 +0000
asID: 17561
IP address blocks: 156.237.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85770 (0x14f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 11:42:03 2025 GMT
Not After : Mar 15 11:42:03 2028 GMT
Subject: CN=680f6990-3b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:38:cd:5b:29:ef:67:16:83:ce:11:d0:ca:
c7:5a:79:8e:d4:f2:f9:80:ac:73:1a:28:7c:eb:39:
9a:05:92:a6:5c:70:dd:62:7d:2d:19:de:88:62:7c:
8d:ac:c8:3d:8c:bc:c5:97:c6:fa:f6:3e:5b:6e:4f:
0d:c2:93:43:e2:39:51:28:02:9a:34:12:3a:3b:90:
a2:29:e0:76:4b:6c:57:e2:3b:af:ff:56:31:c5:d8:
1e:5c:50:bd:8f:48:08:0a:6f:c3:d9:e2:48:b3:8d:
b1:20:9a:19:74:98:76:8d:19:a2:8c:55:89:b4:be:
5f:43:19:67:ee:31:37:d8:ec:9b:d7:65:59:a6:f4:
ba:5f:87:6a:5b:9a:1e:c9:71:9c:ad:2b:37:d3:b5:
8b:db:f6:d1:1c:47:fb:85:5b:2a:74:b6:10:0b:f3:
75:9c:8d:e3:a5:c1:9f:3f:da:3f:fa:cc:d1:43:75:
dc:16:48:c7:1e:94:33:ba:bd:6c:dd:c0:af:ed:26:
31:4f:31:72:06:c1:2e:5f:66:2d:5e:4b:66:79:68:
e3:5c:2b:00:20:41:ed:45:35:6c:d8:1b:83:89:5a:
0e:de:ca:f0:bb:69:8e:00:23:e0:e4:f0:57:c7:b7:
a4:01:3e:91:25:c2:f0:59:7e:58:0a:5f:0c:eb:80:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DB:2E:10:54:40:3E:BE:4E:F5:DE:BE:F9:87:3B:9B:62:AE:A6:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D05C6A00242511F08C004CC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c3:3e:84:fc:af:08:ca:23:e9:bc:19:c8:7c:9c:ee:90:5c:
84:4e:af:aa:22:bc:8f:dc:43:86:85:75:e3:b9:50:02:25:6a:
38:db:80:ba:b3:ac:68:dd:40:36:69:46:89:ad:ff:5c:55:18:
86:9e:1c:5c:45:db:24:3a:8a:61:2e:07:3d:c4:0a:bc:e1:18:
5b:0e:d0:e4:df:ff:f3:e3:6c:9d:fa:f7:49:b9:5d:46:9d:c4:
d5:c1:d7:b2:b6:6c:b8:f9:c7:8f:1f:df:28:b4:fd:7d:d0:cb:
33:ef:fb:c6:79:db:da:d5:d1:0f:2d:04:7d:bb:6a:a6:42:f7:
76:f3:ce:21:47:09:cb:e7:2b:39:b0:7f:25:7c:a2:5d:ab:dc:
16:5f:b2:0d:da:77:44:32:08:ca:a5:a4:3a:a5:d8:ae:cf:66:
56:a7:68:19:37:59:5a:12:3e:91:8b:e2:ac:29:08:7a:95:4a:
f2:03:98:d0:26:a2:41:00:64:b0:3c:b4:b4:74:f8:36:a8:de:
28:ec:e1:46:f9:32:5b:d4:08:a4:c9:c4:d9:a4:05:2c:ec:00:
4c:5f:c9:5c:7d:fa:dd:8f:c2:5f:96:7d:09:56:81:4b:e1:d7:
01:29:ec:5e:1c:ca:86:75:b2:5c:da:0d:16:5a:dd:26:1c:70:
63:0a:12:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:41:11 2025 by rpki-client