Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02FB4F64023711F097D2DCB1762E951A.roa
File: 02FB4F64023711F097D2DCB1762E951A.roa (raw, json)
Hash identifier: CEcY03bM1ftiNK78+jYj0NCgWGRfiDRhFeeG2V7mb20=
Subject key identifier: F2:13:41:EB:F3:7E:9D:9E:90:3D:16:39:77:DA:42:F7:6A:E0:29:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01465F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02FB4F64023711F097D2DCB1762E951A.roa
Signing time: Sun 16 Mar 2025 07:19:34 +0000
ROA not before: Sun 16 Mar 2025 07:19:31 +0000
ROA not after: Tue 22 Apr 2025 07:19:31 +0000
asID: 198584
IP address blocks: 156.253.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83551 (0x1465f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 16 07:19:31 2025 GMT
Not After : Apr 22 07:19:31 2025 GMT
Subject: CN=67d67b86-37d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:c1:b2:14:6c:f4:1e:70:e0:df:51:50:0c:
c7:cf:16:41:e1:2f:be:65:5b:56:74:48:56:05:06:
06:1e:fb:aa:f6:56:06:bb:39:5c:b7:5f:7d:e4:f0:
a5:a2:d0:8b:d3:3a:34:39:1e:08:bb:88:23:84:33:
c1:71:f6:da:c6:b5:46:68:b2:c3:b8:29:f1:ea:82:
ef:d7:3f:aa:a2:0d:ef:b4:9f:c6:71:d9:22:6e:48:
18:32:8f:7f:83:00:7c:38:88:4d:50:db:dc:c2:b1:
30:41:f1:f5:da:c4:41:8d:26:2d:e8:ca:a4:b0:f7:
3d:42:5c:76:bd:52:d8:ba:15:c3:19:af:c4:44:32:
1d:2a:f0:a4:c0:47:8c:3b:00:47:e3:f6:a9:bb:74:
00:d9:6a:97:9f:1e:bf:7f:a4:ee:7a:7b:86:eb:e6:
b4:dc:74:2f:2f:df:d9:24:63:71:82:41:27:84:f9:
9c:9f:f8:99:74:0a:ef:59:b5:77:40:9c:4d:0f:15:
d4:e9:61:d3:95:c8:03:42:50:e3:a6:7a:e2:b9:ce:
a1:d3:60:09:44:72:01:64:93:e1:f1:ad:1f:b5:44:
7d:f4:ec:62:d3:b6:dd:c8:58:f8:f8:66:21:6d:82:
40:24:36:3b:30:6c:63:04:1b:10:e7:3e:91:06:34:
a9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:13:41:EB:F3:7E:9D:9E:90:3D:16:39:77:DA:42:F7:6A:E0:29:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02FB4F64023711F097D2DCB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:37:98:df:c4:e1:6f:3c:cf:77:c2:c7:91:4e:6f:24:d8:c7:
c0:dc:29:b3:7d:a1:97:44:bc:5c:4d:d6:76:a4:9c:07:70:09:
2f:dd:bf:94:14:60:2a:43:15:55:5e:a2:56:73:2d:41:b5:ca:
dd:fe:16:a3:6b:79:3d:de:13:3d:bf:d6:38:50:f7:20:fc:0d:
c3:72:e1:2c:13:23:4f:9d:87:5f:54:2a:68:d2:49:95:c5:85:
95:58:61:28:ac:e7:48:5c:5f:0c:6a:89:18:08:7e:2e:9a:d6:
5f:95:c1:64:2a:6a:5d:83:54:c7:66:46:06:40:98:e0:2d:7f:
54:90:b6:db:f8:ef:f1:f2:e9:b7:af:de:02:85:a5:6a:06:93:
38:6b:0c:01:4d:a4:f4:e9:2b:f5:64:55:95:21:2e:0f:16:c6:
66:75:e9:ca:4d:0c:90:4f:a0:e4:12:c3:56:e5:30:ff:22:32:
fa:ce:84:79:21:64:a0:c7:9f:e6:42:68:cb:07:2d:90:7a:75:
cc:7b:14:de:15:51:05:b6:58:a0:08:a1:40:ea:41:21:95:a5:
30:91:91:fa:bc:f1:0b:21:9c:c1:f9:db:fd:25:5a:e5:9b:2f:
62:f9:77:cc:41:dd:47:03:e4:bb:d5:e9:00:33:94:e3:33:f1:
77:0e:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:16:48 2025 by rpki-client