Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1332F4BAF44811EFA0269D7F762E951A.roa
File: 1332F4BAF44811EFA0269D7F762E951A.roa (raw, json)
Hash identifier: /l8V2sebCT6tKvLHapogFYamr53/9X2/fUkfN1ok69U=
Subject key identifier: 32:DA:79:B3:00:17:4E:CF:E9:A6:7B:6A:78:6B:E2:FA:61:D8:20:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01335B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1332F4BAF44811EFA0269D7F762E951A.roa
Signing time: Wed 26 Feb 2025 13:46:27 +0000
ROA not before: Wed 26 Feb 2025 13:46:23 +0000
ROA not after: Thu 19 Feb 2026 13:46:23 +0000
asID: 984
IP address blocks: 156.252.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78683 (0x1335b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:46:23 2025 GMT
Not After : Feb 19 13:46:23 2026 GMT
Subject: CN=67bf1b33-979f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:f3:6d:7e:ae:92:4c:43:c1:ca:12:f0:96:
5b:95:ad:a9:54:50:b1:11:8f:ad:99:0b:9f:37:90:
74:a2:68:16:08:e8:3d:d8:01:2a:d1:e2:5f:9c:9f:
4b:42:db:e9:47:6e:0c:e2:b8:f3:62:94:23:45:0c:
f6:22:1c:61:06:65:de:3b:4d:cb:89:a8:40:3d:b3:
c6:d6:b2:44:ba:db:ef:d4:49:c1:b2:d2:a2:c2:f3:
49:7d:19:87:a5:b4:13:ea:29:28:82:c0:9c:89:02:
3d:ef:89:26:9e:e2:42:1e:3f:e3:52:9b:d5:5e:18:
e2:e1:79:a1:f4:19:cd:a9:5e:75:33:08:ac:44:42:
c6:e1:25:3f:fc:9a:e1:f6:23:87:3c:d5:47:7a:83:
dc:69:de:e6:5f:75:26:fd:d4:5f:a5:02:f5:99:e8:
88:b7:49:47:82:c8:d0:96:7e:e2:ff:a8:78:2f:25:
13:37:93:d6:a0:c8:9a:21:5c:d8:30:bd:9c:e3:cc:
32:10:4f:ae:f0:00:03:58:3b:20:14:55:73:14:f7:
26:7a:ee:0b:a3:80:7e:88:f6:16:73:fb:47:4c:54:
de:7d:55:6d:35:69:05:3f:fc:bb:77:57:7a:d6:65:
9e:4f:b0:92:b1:8b:98:13:5c:b3:e6:4f:3c:3a:cb:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DA:79:B3:00:17:4E:CF:E9:A6:7B:6A:78:6B:E2:FA:61:D8:20:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1332F4BAF44811EFA0269D7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:32:75:a1:c8:85:0c:00:af:62:0e:20:cf:86:fa:0e:ba:0a:
af:d3:8b:60:00:8d:4c:39:c6:46:81:18:65:95:96:57:54:70:
c9:6b:43:be:ca:ba:77:dc:b8:6c:c8:a6:bf:1d:21:18:5a:0d:
37:09:85:1a:78:65:b7:2f:03:9c:70:2c:83:be:9a:d9:61:ee:
c4:17:72:5f:2d:32:04:68:d9:af:76:aa:3f:34:ca:73:e9:5d:
86:40:a0:d5:77:9c:28:ec:c3:ca:c1:c5:95:84:4a:30:45:d2:
a1:4f:9c:cd:77:4b:30:e3:f1:0a:4d:66:ba:68:66:70:5a:4d:
b5:c1:81:74:d1:d7:40:4d:09:c6:82:af:55:6e:36:e0:52:08:
66:02:d3:98:10:4f:7c:72:96:85:2f:4d:4c:1a:21:48:80:a5:
e3:3d:5d:4c:c6:6f:72:c5:03:7c:9f:9f:ce:74:78:d0:8c:23:
9b:80:70:d4:e1:20:08:d9:3a:53:6e:85:28:2d:02:fe:8a:64:
47:61:8c:e6:95:59:1d:11:65:eb:8a:88:e0:68:e6:c1:0f:8e:
c7:24:60:70:d7:36:dc:18:1a:85:ac:07:95:91:9a:b0:1b:32:
0b:9e:39:6c:f3:2c:37:45:db:1a:07:9c:1a:b0:07:54:2b:33:
23:82:af:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:49 2025 by rpki-client