Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F7389C24D911F0A1BEC985DAE4EC9C.roa
File: D4F7389C24D911F0A1BEC985DAE4EC9C.roa (raw, json)
Hash identifier: kqbNaxqDv4TZog4MNfYGZIWwyypeFPN8c8UYrQPMh9Q=
Subject key identifier: 30:91:77:3D:CE:49:19:62:6A:C0:84:E2:72:71:F8:9A:34:7C:29:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01503D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F7389C24D911F0A1BEC985DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 09:10:45 +0000
ROA not before: Tue 29 Apr 2025 09:10:40 +0000
ROA not after: Fri 30 May 2025 09:10:40 +0000
asID: 152705
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86077 (0x1503d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 09:10:40 2025 GMT
Not After : May 30 09:10:40 2025 GMT
Subject: CN=68109795-13c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:34:3d:df:4d:f0:f9:ea:ea:c6:f2:fc:1e:
04:48:0d:3b:59:97:ec:55:5a:b8:67:a9:ac:8e:65:
95:bf:dd:89:60:f1:90:cb:7f:fe:c4:24:36:9c:c4:
8f:65:f7:2b:85:7c:80:97:df:f3:24:78:d9:cd:9c:
fc:8e:36:21:25:94:54:63:49:55:43:dd:1b:09:53:
6d:10:82:4d:87:c6:c7:e0:ee:e5:16:e5:de:3a:b2:
12:84:43:7b:a1:ba:bb:0a:64:cf:42:90:81:59:de:
90:3a:d6:70:5b:ec:8e:14:93:0d:26:f6:48:fb:a9:
f6:55:47:e7:45:4c:cb:41:a3:4d:0b:20:6f:f0:da:
f7:ea:4f:c1:0c:3d:d2:f8:05:02:8a:74:4d:92:af:
bd:8a:3e:9b:9c:20:1d:3b:20:a6:02:13:bb:9e:47:
74:d0:25:fe:46:19:8f:a7:78:54:13:96:33:40:c3:
c4:0b:5f:2d:62:62:99:d5:3e:40:99:60:8d:f0:33:
7b:07:08:f9:55:c2:e5:57:65:b2:31:02:29:4c:e8:
c0:17:1d:30:5b:3c:ad:85:98:4c:6e:76:34:bb:0d:
4e:16:c1:73:ff:b0:95:85:70:76:52:bc:05:71:fc:
94:40:4f:9a:90:06:12:72:c4:1c:8f:83:dd:6c:1a:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:91:77:3D:CE:49:19:62:6A:C0:84:E2:72:71:F8:9A:34:7C:29:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F7389C24D911F0A1BEC985DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
64:ee:64:de:28:f1:94:c2:3c:29:5b:28:28:11:9c:82:62:c8:
20:a8:af:a6:37:07:a5:50:92:c8:cd:f9:87:af:82:55:f5:65:
74:de:2a:22:c0:b7:75:52:e3:5b:7d:b5:d6:e9:d8:02:f9:df:
c2:ad:b3:7a:21:b7:0c:a0:dd:c7:98:f8:61:9a:ba:28:64:af:
16:24:b0:76:93:b8:9c:6e:61:b9:9e:6c:c2:a4:cf:de:f7:8b:
78:22:b7:2c:99:f5:f0:e7:db:8b:16:ba:77:01:ce:f7:d4:93:
4b:bb:dc:8d:66:23:0e:f8:3b:18:86:60:67:60:7d:62:c3:3f:
cb:f1:b7:81:fa:0e:a2:ff:5b:ce:27:4e:63:48:4e:d6:19:f4:
4c:5d:0d:bc:3f:db:7e:9d:7b:4e:a8:9f:0a:bf:72:ad:c9:b8:
12:ba:6f:ca:ef:59:7c:d4:3f:52:ba:9b:db:1c:3f:90:ea:ee:
78:fc:cb:25:04:c6:a6:84:91:f1:83:15:61:17:61:05:cf:b0:
5b:de:6d:61:18:fa:24:9b:ad:96:42:cd:76:39:5f:13:06:ca:
c9:2d:91:17:8d:fa:38:f2:b9:20:13:cc:13:f3:9b:62:fd:46:
61:b4:e9:ed:2b:f9:85:78:9f:c1:ae:b9:bb:e2:4e:14:d2:9f:
3f:c1:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:02:53 2025 by rpki-client