Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED1406DA28B211F0BD0174C7DAE4EC9C.roa
File: ED1406DA28B211F0BD0174C7DAE4EC9C.roa (raw, json)
Hash identifier: ANQhS6JiQ/yQy2OY1FPwG+ArE34AF2BqvTvOIDnuwa8=
Subject key identifier: 7F:F9:A6:B4:4D:AB:CA:AD:E3:63:FC:C2:00:ED:F1:20:38:EE:65:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0151B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED1406DA28B211F0BD0174C7DAE4EC9C.roa
Signing time: Sun 04 May 2025 06:42:20 +0000
ROA not before: Sun 04 May 2025 06:42:15 +0000
ROA not after: Sun 08 Jun 2025 06:42:15 +0000
asID: 213599
IP address blocks: 156.229.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86448 (0x151b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 06:42:15 2025 GMT
Not After : Jun 8 06:42:15 2025 GMT
Subject: CN=68170c4c-7f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:67:bb:ec:01:be:e9:22:f5:44:7d:21:d8:
d0:d8:19:90:7e:47:a9:86:b6:ee:a2:f2:a9:95:db:
7c:4e:44:bc:d5:01:3a:7f:2c:0b:a9:49:17:78:63:
5e:45:49:e5:d5:fe:11:14:77:67:68:52:44:7c:2d:
45:f2:6f:db:fc:79:f7:cf:de:6d:8f:b9:54:64:06:
6f:f3:06:3d:dd:1f:2d:37:3f:20:14:98:57:7b:9f:
f5:e4:f0:b1:dd:36:0b:8d:db:38:34:a1:d7:b1:35:
2a:6f:9b:ab:17:79:f5:38:ec:08:51:eb:18:1d:c9:
1d:2f:77:bd:e1:c4:28:99:b6:86:90:fc:45:c6:92:
50:ab:ff:ed:a4:31:40:3a:a7:e5:ff:ce:67:1c:b8:
35:92:7c:99:0d:b6:a7:16:1d:62:ec:1c:40:56:40:
bb:27:e1:43:a9:3b:b1:d9:cf:63:37:3a:56:aa:cb:
69:27:e5:7e:6b:14:67:a5:aa:6b:e4:84:22:1e:8c:
4e:f0:b4:d8:a4:5a:9e:bd:3a:85:7b:3c:81:f9:c6:
d7:f4:71:80:ff:07:70:03:d0:d3:bd:84:99:e9:bc:
0a:14:fe:4d:f3:fa:47:c4:6d:20:4e:00:e0:82:d0:
52:6f:27:ff:35:98:5a:29:7c:31:22:76:03:96:dc:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F9:A6:B4:4D:AB:CA:AD:E3:63:FC:C2:00:ED:F1:20:38:EE:65:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED1406DA28B211F0BD0174C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.230.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6e:03:d3:fd:f8:ee:89:b1:3e:13:10:27:6b:cc:4f:2c:61:
59:fc:71:16:7b:b4:61:f6:f6:cd:73:0f:d6:a7:36:e9:34:17:
03:a2:c0:5a:58:1e:a6:fe:33:f5:39:9e:fc:46:96:98:7e:d7:
a1:15:c0:bb:f8:bb:ae:9a:a3:61:fd:95:7e:0e:25:95:65:bd:
58:f8:6e:7a:97:b3:04:d6:af:01:d3:f3:2f:83:68:05:59:eb:
6c:ce:4a:b8:38:74:56:0d:c0:f6:8a:60:b4:27:7f:4f:1b:09:
d5:ee:10:e5:86:7a:82:a2:00:b1:89:4d:41:26:bf:95:39:7a:
be:c1:db:6e:fd:cf:29:e2:e7:b8:f4:30:4e:3c:ce:f4:08:19:
72:88:21:98:99:e3:a4:8d:81:d6:f4:28:33:b8:40:ac:25:ea:
35:96:60:1a:26:e2:39:f3:5a:96:90:1f:a9:ff:ee:43:d7:ae:
78:e1:47:88:0d:ad:19:79:d7:cc:03:f8:fc:35:64:ab:0d:74:
d7:24:76:f2:f6:6a:4a:f9:c6:c0:15:44:1d:c1:87:5e:43:ee:
c8:9b:cc:17:00:b8:63:04:00:0e:c8:e8:bb:03:98:7b:64:b7:
01:73:79:93:62:21:04:88:ba:56:e7:cf:f8:b0:b5:6d:be:80:
b5:16:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:49:21 2025 by rpki-client