Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1034AA44F2CA11EF88211946762E951A.roa
File: 1034AA44F2CA11EF88211946762E951A.roa (raw, json)
Hash identifier: bXx7I+ir9i/hGI/C1ObiJogGbpg2h11gfZxO3GldYBc=
Subject key identifier: C7:4B:09:F7:21:E9:BD:B7:66:EE:8D:47:AE:E1:EB:C6:49:91:0B:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C32
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1034AA44F2CA11EF88211946762E951A.roa
Signing time: Mon 24 Feb 2025 16:11:54 +0000
ROA not before: Mon 24 Feb 2025 16:11:50 +0000
ROA not after: Sun 30 Mar 2025 16:11:50 +0000
asID: 137899
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76850 (0x12c32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 16:11:50 2025 GMT
Not After : Mar 30 16:11:50 2025 GMT
Subject: CN=67bc9a4a-bfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:7d:1c:ca:f9:95:d7:a0:97:18:30:d7:b2:
3e:fb:29:08:57:ed:c6:9d:de:bc:44:18:96:ae:27:
fc:89:df:5f:04:79:09:93:23:ad:d5:96:84:08:f4:
de:b6:f6:0c:0c:d6:c7:4e:59:f7:d2:ac:a2:b8:19:
d2:d5:7d:ff:c6:67:f8:0b:74:57:c9:eb:72:26:44:
7c:f6:48:1f:d8:7c:bb:5b:90:91:cd:1c:20:b1:f4:
77:41:02:e5:3d:41:7c:2a:4f:29:4f:27:c3:b8:4b:
d8:51:47:84:14:b5:f0:91:f1:c5:f4:53:b2:4e:3b:
de:33:85:ab:0f:30:bb:2f:cf:2a:ec:29:df:3d:81:
07:e1:67:00:a9:b7:db:67:99:44:8c:a5:9e:61:0a:
df:0b:33:c3:03:17:0d:2d:af:a5:ec:c1:46:2a:e6:
b8:4a:74:0f:4e:78:92:21:38:6f:f0:35:fc:65:99:
42:26:8e:2e:d0:5a:32:9b:82:48:b1:12:66:ee:18:
13:33:51:64:2f:69:9d:d3:6d:6e:a7:6a:7f:ea:b7:
92:65:9e:7d:d7:2c:cc:5a:96:b3:7a:67:17:3e:aa:
ce:fd:78:16:90:b6:0e:f6:a2:d1:9f:83:39:c6:82:
ab:17:b4:b9:10:60:54:94:6d:67:a4:d9:e2:64:12:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4B:09:F7:21:E9:BD:B7:66:EE:8D:47:AE:E1:EB:C6:49:91:0B:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1034AA44F2CA11EF88211946762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
43:39:06:1f:e7:dd:1a:9a:08:ca:bb:14:41:bb:40:eb:2d:1d:
c1:8f:d9:05:d1:14:e6:5b:ce:01:33:ba:1d:9e:72:aa:bf:e1:
83:bf:b2:ee:3f:15:70:b3:b4:de:84:5d:0f:dd:ca:e3:f9:5a:
c7:b6:2d:1c:26:6d:82:ba:ee:14:e2:06:8c:fb:12:4f:fd:22:
27:3a:ba:8b:46:9a:5a:2a:f7:2a:41:9c:d8:32:88:fb:c5:4f:
f0:2b:9d:71:8f:57:d7:0d:91:2b:63:c6:2e:4c:f5:8d:72:ec:
85:d2:f2:50:e4:98:b7:87:c8:a4:d1:62:37:4f:b9:d1:f5:00:
cc:db:82:83:02:0a:37:df:f9:e0:d5:3d:b4:a1:21:e3:89:3d:
93:ef:25:64:b9:04:8b:79:54:c9:b1:a5:4a:e1:0b:71:cb:8c:
91:f4:d9:f8:20:9b:19:e3:7d:d4:74:44:b6:9b:b9:c3:64:35:
a6:a6:d0:08:a2:a0:5e:e1:95:c4:8b:e8:23:55:04:d6:08:4b:
16:81:e4:c9:bf:1b:42:0f:b6:96:d4:f6:19:7d:ab:12:c3:22:
e6:79:fd:57:f1:d5:6d:55:e7:3c:a1:93:99:2a:f6:14:c2:68:
f2:12:ed:00:1f:41:f5:ee:5f:9b:2e:22:65:6b:62:21:5f:47:
de:ab:aa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:15:40 2025 by rpki-client