Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02384410F46811EF9C07D45C762E951A.roa
File: 02384410F46811EF9C07D45C762E951A.roa (raw, json)
Hash identifier: GQCFvz9sLR8he3J1CVNP8mbD9LfsvPTe+/PNqOMn3Go=
Subject key identifier: 2C:58:22:E5:6D:5E:AC:05:FE:8D:91:0D:F4:E7:2C:CC:BA:AC:56:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02384410F46811EF9C07D45C762E951A.roa
Signing time: Wed 26 Feb 2025 17:35:02 +0000
ROA not before: Wed 26 Feb 2025 17:34:59 +0000
ROA not after: Sat 19 Feb 2028 17:34:59 +0000
asID: 17561
IP address blocks: 156.233.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79275 (0x135ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:34:59 2025 GMT
Not After : Feb 19 17:34:59 2028 GMT
Subject: CN=67bf50c6-dfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:c5:ed:93:1b:5a:40:36:d3:3d:1f:6a:42:
d7:ef:47:35:ad:6c:6c:3b:9d:63:a2:1c:ef:98:fa:
6e:3f:0c:95:f2:05:2e:e3:43:9e:fc:73:86:86:03:
67:d1:1c:b8:b0:b0:51:24:33:10:af:ba:02:15:a2:
b5:23:58:f1:ba:8a:65:e2:cc:5b:e7:aa:4f:58:23:
7f:c1:aa:b1:58:a3:a7:42:e7:68:da:59:04:6d:e9:
56:37:d8:95:d5:ac:24:47:12:e4:67:ce:6c:9d:67:
b9:c8:00:f0:bc:68:ac:74:d2:a2:ec:93:3f:bc:8d:
2a:5f:71:88:49:b5:ac:eb:8a:31:bf:9b:fc:08:72:
d0:8b:a5:63:b8:75:ed:83:fd:5c:e5:65:4b:1d:c4:
39:17:92:7a:f2:66:ef:a2:0f:ff:66:24:5f:4c:22:
e5:d4:bc:de:71:c0:b6:fb:fc:60:08:ce:40:73:41:
8d:22:ea:17:98:5c:62:c2:70:6c:bc:f5:b2:78:42:
88:04:60:f3:56:d6:66:86:c7:dd:4a:79:0d:3e:10:
4f:72:61:38:a3:02:10:2a:05:66:10:f0:e7:05:cb:
a9:17:f4:e6:cf:99:02:c3:08:d3:7d:6d:12:b0:f5:
8c:64:1c:16:be:f8:63:24:f2:2d:87:05:a6:7c:df:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:58:22:E5:6D:5E:AC:05:FE:8D:91:0D:F4:E7:2C:CC:BA:AC:56:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02384410F46811EF9C07D45C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f4:0d:ba:13:d0:e2:66:36:f8:9e:21:10:34:23:50:26:3a:
d7:6c:7a:12:da:88:3c:3f:e6:ad:5f:0b:7a:1f:42:08:68:49:
b7:18:d8:41:0f:6b:db:93:3d:94:43:3d:35:c6:98:20:23:29:
b8:c1:94:b1:48:c3:22:a1:78:fa:46:dd:b7:32:81:b1:e5:8c:
98:12:01:0a:16:42:5e:f4:cf:ad:25:92:be:81:dd:f6:2c:f0:
be:6f:3d:a9:78:dc:03:b3:3f:1f:69:dd:64:2c:7c:56:a5:b0:
91:b7:c4:7f:ab:cc:54:d7:05:aa:46:7f:7b:15:c3:8f:a0:76:
a3:83:99:23:6f:20:65:b0:d9:ce:90:c1:c5:1e:28:8a:5c:03:
e7:58:10:c3:67:fd:64:d8:32:55:61:76:9b:72:fa:33:2c:32:
3b:7b:59:ad:c7:c4:a6:5f:2f:69:50:d4:72:76:5e:ea:9a:df:
42:40:cc:ec:dc:6b:38:03:bf:0d:32:2f:82:f3:73:70:f7:1f:
76:d0:90:21:ca:a1:be:58:11:ce:18:ee:c9:84:b1:8c:5f:32:
a5:e9:74:63:ea:c5:0d:b1:03:ac:5d:72:dd:81:fe:ba:7a:8a:
fb:e8:42:ba:45:81:af:56:be:96:da:80:9f:00:b8:7e:b7:fc:
32:b4:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:02 2025 by rpki-client