Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8927A12242411F0BF8EE7C2DAE4EC9C.roa
File: D8927A12242411F0BF8EE7C2DAE4EC9C.roa (raw, json)
Hash identifier: p8i06fNQv49Nhboz9cfgcrWx+8t69jA4Rugb8eB0zlc=
Subject key identifier: 77:81:F9:21:18:1B:65:90:F6:17:FF:3A:33:E2:FB:41:F1:1E:12:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8927A12242411F0BF8EE7C2DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:35:12 +0000
ROA not before: Mon 28 Apr 2025 11:35:08 +0000
ROA not after: Wed 15 Mar 2028 11:35:08 +0000
asID: 17561
IP address blocks: 156.237.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85760 (0x14f00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 11:35:08 2025 GMT
Not After : Mar 15 11:35:08 2028 GMT
Subject: CN=680f67f0-9cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:18:44:5a:6a:4b:44:3b:64:ac:69:63:7e:
f7:50:bf:a0:11:15:30:e7:c9:f1:3a:5f:33:b4:87:
7b:7a:95:46:2c:bf:c2:b2:6c:72:62:f5:69:c1:b9:
8c:c7:5d:7b:c7:b4:ca:03:61:26:27:a5:36:cd:da:
83:4b:88:c3:7a:b1:30:4f:a9:31:ad:3f:9b:07:1a:
12:fb:d0:9f:0b:90:1d:40:86:56:02:58:db:ea:54:
0f:91:8f:9b:d9:3d:30:a7:0b:9b:fc:30:d3:33:e1:
40:05:60:32:fa:e5:a9:64:58:23:65:bc:51:04:87:
bd:87:ae:aa:99:02:4e:d8:5b:e1:7e:3c:09:43:e1:
40:2b:bb:3f:fb:b4:3b:17:52:5a:98:51:1b:d6:f5:
0e:52:bc:00:26:6e:c9:d4:55:2e:87:18:28:7e:3b:
f9:5f:ee:70:08:dc:b4:f8:c2:f3:7d:11:e5:aa:14:
24:e9:bd:7a:db:0d:40:f1:8f:7c:e5:81:e1:de:48:
b4:3c:78:bf:33:82:81:61:97:c1:f4:80:f9:44:c4:
fa:3a:5d:29:2e:05:dd:25:b0:d0:1a:9d:d1:2a:dd:
7f:93:62:9e:a2:40:12:68:a1:cb:ad:18:c6:d9:35:
5c:26:1a:f4:7d:ea:d5:e6:91:b7:d7:f1:13:e5:54:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:81:F9:21:18:1B:65:90:F6:17:FF:3A:33:E2:FB:41:F1:1E:12:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8927A12242411F0BF8EE7C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.106.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a9:89:ea:7d:a6:ca:a4:d2:da:4a:6e:dd:24:7d:d6:50:23:
99:70:4e:aa:56:19:38:e5:91:05:15:58:73:02:cd:da:ea:54:
2a:0f:48:fb:41:8c:cf:89:8b:49:5f:11:0c:4a:c7:2e:52:72:
36:db:49:20:89:f7:2a:55:34:96:53:71:b6:f5:f3:18:e5:4a:
dc:d7:74:e1:0d:c7:f2:ec:80:bf:da:85:d9:22:70:fe:61:a0:
14:80:50:97:9a:d8:f3:7c:9d:fc:dc:69:f3:b6:f5:c8:81:4e:
c2:61:71:58:b5:0c:fc:3f:24:13:15:04:39:bb:e9:4d:65:be:
bf:e4:8a:7f:37:cc:44:c7:19:00:64:e9:70:ad:04:a0:44:b4:
c6:e6:58:72:41:62:93:65:9f:40:2d:51:75:7a:9b:46:04:9c:
7e:2b:f0:34:64:dd:f4:12:d7:c6:94:da:27:64:80:70:ac:0d:
3c:ec:d5:43:97:a2:42:d2:90:b4:eb:6c:4d:95:1f:ef:0c:5a:
99:50:31:64:8c:13:1e:de:a7:c1:83:e5:f6:bd:e6:e6:d0:de:
61:51:db:10:5a:44:86:e1:44:ca:9a:11:df:b1:6a:81:d2:cc:
1f:e5:14:34:3f:ed:95:2b:64:55:d9:cf:53:55:20:e1:b8:a0:
0a:1c:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:36:21 2025 by rpki-client