Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1CBD0242A3311F0A309E9D4DAE4EC9C.roa
File: D1CBD0242A3311F0A309E9D4DAE4EC9C.roa (raw, json)
Hash identifier: 8fYSO7VebDFdKF/AP1BW+z95yWUs3AnZ4UdLA+VDYQk=
Subject key identifier: B3:6E:3A:B9:CA:D7:73:8B:4C:81:33:D9:8F:8A:8D:07:01:6E:39:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01522D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1CBD0242A3311F0A309E9D4DAE4EC9C.roa
Signing time: Tue 06 May 2025 04:37:30 +0000
ROA not before: Tue 06 May 2025 04:37:26 +0000
ROA not after: Fri 06 Jun 2025 04:37:26 +0000
asID: 394432
IP address blocks: 156.245.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86573 (0x1522d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 04:37:26 2025 GMT
Not After : Jun 6 04:37:26 2025 GMT
Subject: CN=6819920a-4197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:2b:84:46:68:74:70:77:dc:b2:34:86:0c:
16:b9:d8:24:82:07:70:13:04:5f:4e:e1:ff:ad:7e:
4a:f8:2a:40:be:2b:2a:88:71:c7:88:db:e0:13:7d:
bf:e5:ff:16:6d:65:f4:f3:f9:1a:5b:46:a4:ef:5b:
d9:df:da:23:e5:8c:b7:4d:ee:e8:07:dc:10:21:f2:
4e:bb:70:b7:6c:e1:0b:17:cc:c1:c9:cd:af:db:b8:
91:9b:53:58:47:65:d3:d8:83:82:00:db:dc:38:24:
d7:5a:d8:25:5e:a2:10:52:d4:6f:8a:4e:84:5d:2c:
47:11:b4:6c:01:10:ea:b8:e9:ad:ad:ac:4c:e4:51:
a5:ba:c6:9a:be:8f:4d:88:2a:44:c7:e6:91:48:3a:
e2:19:5c:57:c4:ed:49:b9:45:32:19:28:64:08:40:
29:04:d4:4b:49:2a:5b:f3:5a:46:5b:9b:ee:6f:51:
18:28:a0:c6:ef:04:8c:cd:fa:04:55:cd:ca:81:8b:
35:57:bb:e8:48:cf:6e:b9:91:75:f0:9e:87:d3:48:
97:ca:86:93:2b:ef:0c:f8:37:c7:ff:9b:7d:f1:0f:
7a:77:b8:5c:39:23:e1:0e:44:2a:fc:68:2b:4c:00:
8a:01:f1:0a:57:56:36:af:2f:ac:5b:e5:00:3b:f3:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6E:3A:B9:CA:D7:73:8B:4C:81:33:D9:8F:8A:8D:07:01:6E:39:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1CBD0242A3311F0A309E9D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6b:a1:67:f2:3f:16:a6:46:d6:7e:75:4b:25:d3:51:13:61:17:
e1:35:18:87:25:8e:a2:2c:ef:47:90:c3:71:9c:8a:b7:c0:0c:
c0:8c:78:1a:23:d5:98:02:08:2c:08:c9:8f:9b:6f:c7:5e:50:
ed:04:f0:c9:6e:d3:a6:a3:40:9c:e2:a2:df:57:13:96:a9:2c:
81:bf:3b:50:7c:3d:7d:85:f8:53:c5:2c:84:0d:b3:3c:ec:f9:
de:e7:c1:84:c1:94:f2:1f:8d:5b:13:c9:5a:43:1c:61:eb:8b:
08:82:91:5f:4a:63:e3:99:89:10:a2:5c:a2:39:95:53:04:93:
ee:58:74:f0:af:14:39:de:fa:11:64:55:f1:a0:dc:9f:dc:1e:
d0:5d:6b:07:42:cc:ff:7f:db:67:6d:1b:23:83:fb:b2:45:3a:
48:cb:90:07:40:c1:cb:06:43:72:f6:79:2a:fd:dc:ca:50:69:
48:84:54:c4:c6:85:b2:9c:b1:0d:03:9a:d4:82:0c:c3:c2:31:
21:a1:8b:8a:0b:fc:77:93:54:7d:71:b5:31:47:aa:cb:0d:76:
be:be:bb:c5:20:59:a0:d0:69:50:35:8a:a6:24:ee:0d:34:3f:
8d:f2:51:aa:f0:95:cc:25:ac:68:16:cb:48:58:e0:86:65:b3:
37:1e:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:52:26 2025 by rpki-client