Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0761BDC6108911F08343C6A6762E951A.roa
File: 0761BDC6108911F08343C6A6762E951A.roa (raw, json)
Hash identifier: AhVFxdxCE8cyQGYVUkp52H+A+u+h6QA0/tkh2A/eJiQ=
Subject key identifier: 51:11:12:24:09:02:E0:AD:B9:BF:17:ED:EA:95:2D:82:C9:EF:EC:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0761BDC6108911F08343C6A6762E951A.roa
Signing time: Thu 03 Apr 2025 12:41:57 +0000
ROA not before: Thu 03 Apr 2025 12:41:53 +0000
ROA not after: Mon 14 Apr 2025 12:41:53 +0000
asID: 4766
IP address blocks: 156.239.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84461 (0x149ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 12:41:53 2025 GMT
Not After : Apr 14 12:41:53 2025 GMT
Subject: CN=67ee8215-9c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:60:fa:8a:7b:a3:c0:65:a2:eb:99:17:f8:
90:44:ca:8c:fb:68:ca:6d:a8:ea:09:0d:0d:53:36:
e7:40:27:7f:b1:be:9f:fa:f5:2b:c7:c4:fb:2a:65:
27:ee:95:db:18:27:47:70:b6:db:e0:38:75:97:93:
41:d6:4b:e9:3d:ee:96:19:17:56:0e:42:f8:c8:e7:
58:bf:c3:3a:4f:b4:ec:cf:b0:76:fa:cf:58:cc:2c:
23:cc:bc:39:e5:c4:61:2a:29:0f:06:23:29:38:ee:
c7:cc:00:8a:af:0f:db:ec:87:a8:26:5e:0d:82:21:
76:03:0a:c4:32:77:a9:a4:d9:5f:8c:f2:43:52:8d:
b8:8b:67:4a:fc:7f:df:a5:02:dc:ee:c0:be:d2:01:
3d:bd:12:7a:ba:77:6a:0b:44:3f:3f:c5:dc:f4:55:
f2:00:db:f8:f7:84:ec:62:5e:d5:f7:da:17:53:a9:
a7:a3:81:6b:69:db:bb:b6:0c:a6:5a:d8:77:70:04:
73:9f:a7:71:0e:54:a3:78:2d:b7:23:49:4d:31:91:
bf:38:36:27:a1:2b:58:f7:88:de:14:74:4b:9c:b9:
d5:d9:e9:6c:35:61:bb:a2:ab:63:ba:02:5d:c3:71:
60:2b:9e:85:2d:b9:fc:4d:0f:7a:be:48:e3:84:53:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:11:12:24:09:02:E0:AD:B9:BF:17:ED:EA:95:2D:82:C9:EF:EC:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0761BDC6108911F08343C6A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.19.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1c:7e:59:02:a2:e2:ea:49:70:5d:ff:2f:dd:97:db:59:15:
8e:44:63:f3:08:fd:3b:cd:84:1a:5e:86:c5:08:84:ab:dc:f6:
c5:a6:6b:af:01:ed:40:89:b3:e1:c2:da:c5:01:15:af:5b:08:
21:f2:a4:36:5f:7b:f7:55:08:91:85:78:99:97:4b:bb:98:22:
1c:fb:19:a7:79:55:c7:9c:93:b7:52:71:c5:d4:6e:70:f3:70:
4b:8c:a8:0c:01:e5:b2:82:2a:dc:9e:0c:21:a1:1d:d2:ae:dc:
4d:2f:ec:31:86:53:39:f6:3f:36:4b:50:87:92:0a:68:c5:97:
3b:79:21:b9:10:d2:a0:8b:7c:12:52:4d:2f:a8:55:13:5a:e1:
99:2c:40:37:78:a4:c8:ea:7c:cd:bb:34:82:29:a3:b2:ed:76:
55:9e:d7:e5:a1:a8:ee:83:f9:15:b7:80:87:4e:c1:59:3e:d2:
60:02:e5:bc:2f:a4:29:d3:91:b1:08:c0:d4:8e:17:25:72:00:
7f:5e:cb:34:f2:ec:64:04:ea:a5:cd:14:01:3d:b2:a6:e3:e9:
9a:87:34:e0:3e:7b:e6:63:ad:ca:f0:06:5e:76:ca:84:f7:de:
2c:f4:09:88:5e:83:97:ca:4f:b6:6a:79:91:70:de:0e:3d:2a:
4d:e0:a6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:05 2025 by rpki-client