Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04EEC2D4F35911EF92D71497762E951A.roa
File: 04EEC2D4F35911EF92D71497762E951A.roa (raw, json)
Hash identifier: njTIzh2l041ovBr7N65iLg9kTmUSRzZniDNRT7Oi2Xw=
Subject key identifier: 4D:6C:F5:FD:82:6A:C6:0D:12:46:B9:71:1F:8E:FF:C8:F6:69:74:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04EEC2D4F35911EF92D71497762E951A.roa
Signing time: Tue 25 Feb 2025 09:15:13 +0000
ROA not before: Tue 25 Feb 2025 09:15:09 +0000
ROA not after: Sat 19 Feb 2028 09:15:09 +0000
asID: 17561
IP address blocks: 156.249.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77314 (0x12e02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 09:15:09 2025 GMT
Not After : Feb 19 09:15:09 2028 GMT
Subject: CN=67bd8a21-a606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:d7:23:93:f8:a6:e3:40:75:04:da:11:7a:
e6:7b:f5:49:25:6b:12:07:b4:a0:70:65:99:bf:47:
15:6d:0c:4d:c6:5c:6f:78:3a:0d:79:19:a6:67:27:
af:60:b8:e1:ef:48:71:3a:9e:81:13:45:80:a7:aa:
4b:f6:cd:2e:a6:72:09:88:51:5c:4b:1d:26:73:7b:
68:35:82:87:83:bf:bc:f3:d7:91:f6:01:01:01:ae:
05:2c:cf:6a:cf:25:75:92:7a:00:65:d1:e2:ce:71:
44:19:5b:4c:67:08:4a:0c:ec:2c:1e:70:b3:b8:c7:
2b:46:9e:53:27:ea:00:5f:9c:08:9e:06:06:10:64:
ac:b2:dc:c9:31:4a:3c:fe:1f:28:c5:58:26:8b:8a:
76:52:59:65:af:01:bf:8d:74:d4:48:fe:ee:8e:48:
3d:d6:82:99:fc:d6:dd:55:da:37:0f:fe:34:25:0c:
37:cf:0e:66:20:95:91:fa:6b:ca:ec:b9:46:8a:88:
45:b3:da:46:f6:34:74:75:eb:50:9a:4e:d3:1d:49:
a3:b6:c4:d3:07:23:6a:a5:fc:23:a5:99:7d:c1:53:
bb:26:70:6b:93:fd:0f:46:87:19:c3:39:4d:eb:ae:
b3:24:96:ae:d6:4f:33:06:37:85:1a:46:1a:6d:06:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6C:F5:FD:82:6A:C6:0D:12:46:B9:71:1F:8E:FF:C8:F6:69:74:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04EEC2D4F35911EF92D71497762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.254.0/24
Signature Algorithm: sha256WithRSAEncryption
64:96:73:96:19:7a:65:7f:1c:b8:01:1f:19:e1:cd:f1:c7:9d:
28:59:1d:84:a1:ea:9e:0d:c9:c2:08:62:1f:94:4b:15:9b:17:
fe:e5:d8:eb:c9:e3:d0:57:ac:19:7b:6f:12:6c:68:f1:40:9f:
e3:cf:cb:6a:1b:61:27:32:2a:ef:ff:e0:a9:85:3a:75:5e:69:
6e:48:4b:35:f3:3f:a9:83:02:11:4b:32:43:f0:b9:be:2b:cc:
e2:4f:9d:55:5f:c3:2b:7b:b5:07:7f:87:9d:2e:15:a0:bf:be:
bb:e0:25:8b:12:fa:59:fa:ea:88:0d:43:df:fc:4f:18:6d:1a:
52:b9:e3:76:e6:45:5d:19:8b:00:d6:d0:83:49:64:33:c9:b1:
ff:59:c7:39:8a:9a:1a:80:39:56:3d:4d:38:e3:6d:e3:48:a9:
b1:40:10:11:f3:c0:21:16:40:a2:55:fa:f9:29:4e:be:e3:67:
4d:a1:84:ab:de:e8:ba:c1:ad:0e:ac:75:fb:85:e1:e8:9b:98:
8f:3f:9b:e9:50:68:37:a8:c1:36:a5:5a:b9:fb:49:b2:4a:53:
69:1a:9e:06:42:7b:c5:ec:a8:d5:94:31:93:c3:66:73:fe:ab:
6a:1d:21:15:77:f8:ba:73:fe:d6:a2:55:2c:fe:ee:53:3e:5a:
40:8e:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:41 2025 by rpki-client