Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1750E242F46011EFA25ECBA6762E951A.roa
File: 1750E242F46011EFA25ECBA6762E951A.roa (raw, json)
Hash identifier: NZTQ213fkVRDgLHGV5opSQND1i55H0vL9SF1Ids5p4s=
Subject key identifier: 27:3E:50:05:D9:D0:08:D4:C9:DC:E8:C8:94:39:4E:19:EF:A7:EF:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1750E242F46011EFA25ECBA6762E951A.roa
Signing time: Wed 26 Feb 2025 16:38:22 +0000
ROA not before: Wed 26 Feb 2025 16:38:18 +0000
ROA not after: Thu 19 Feb 2026 16:38:18 +0000
asID: 984
IP address blocks: 156.245.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79075 (0x134e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:38:18 2025 GMT
Not After : Feb 19 16:38:18 2026 GMT
Subject: CN=67bf437e-fba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:41:ae:b5:c5:44:85:7c:d3:f6:ca:0e:3d:
67:b0:30:84:06:52:d7:fb:c0:d8:87:f7:47:2a:90:
29:11:f7:6d:80:46:9b:c0:69:e0:11:10:23:30:21:
ca:40:b7:20:cf:9e:34:dc:f3:89:20:0b:f7:55:f9:
3a:31:49:5c:f3:57:5e:a1:96:da:1c:61:6e:61:1e:
93:22:8d:5e:51:06:2f:37:d8:ed:84:36:aa:21:f5:
1a:c2:cb:8a:bb:d1:ff:55:23:d3:26:fa:76:48:5d:
59:28:fd:5a:64:8a:8c:8a:a7:9b:6a:43:18:5b:b8:
f9:d2:10:64:00:3a:34:40:cc:34:a2:6f:38:7b:80:
c0:0c:1c:eb:c8:d7:8c:ec:6d:ca:3e:ca:c3:46:91:
a5:ee:5b:43:38:24:f1:66:1e:17:e1:9c:fb:03:29:
6b:b7:db:e4:f0:0e:eb:49:a4:67:d3:4b:90:96:a8:
6b:db:c7:88:1d:74:a2:f5:60:f5:df:3c:28:b7:b6:
5f:a4:e1:e4:69:7b:cd:bc:2c:fd:99:93:38:bf:3a:
58:8a:8b:a1:f0:ad:b0:1f:57:eb:29:27:bd:21:64:
b9:6f:04:59:aa:e3:f1:0c:2a:8f:55:9a:db:ed:f4:
74:29:5d:9c:f9:db:e4:da:1d:58:57:0a:f9:ec:1c:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3E:50:05:D9:D0:08:D4:C9:DC:E8:C8:94:39:4E:19:EF:A7:EF:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1750E242F46011EFA25ECBA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.6.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f3:1f:80:22:8a:d0:8e:71:68:cc:d1:bc:ed:f1:f5:ac:ab:
b1:18:7a:48:9c:90:83:79:21:9d:c6:5a:33:87:18:f4:e8:c6:
ea:b5:2e:42:0f:c4:9c:f0:cd:ce:af:a9:4b:f9:4d:a2:86:7a:
2f:e0:26:b4:4b:8c:23:b1:67:df:a0:c3:e4:91:a3:98:7c:0a:
1a:ca:d4:c2:e6:9a:a6:9a:4a:80:ee:b0:6f:25:b4:9e:56:5a:
df:50:16:cb:3e:8f:7a:71:2a:f5:ef:98:aa:ed:83:83:a1:d1:
1b:e4:76:e2:e8:d6:46:85:a5:7a:dc:dd:c7:b9:c2:ba:e3:0b:
49:21:4e:8c:de:29:f5:1c:b7:18:e2:87:f5:ae:54:eb:42:79:
5b:39:5c:d9:fc:19:76:d5:5a:e6:b4:70:72:94:60:04:72:12:
4b:91:79:1c:6c:c3:1e:ab:28:09:8f:d5:7b:14:54:6f:7d:24:
a4:56:b8:7b:d1:68:81:4e:dc:e1:ee:e6:05:34:5d:48:b5:01:
03:15:bc:0d:b8:38:d9:f0:7c:48:3d:fc:d6:68:19:d1:8a:d0:
22:94:91:07:c5:8e:0f:ab:a8:9f:fc:b0:1a:7e:b5:49:9b:ae:
63:87:46:a5:5a:be:08:7f:6f:9d:6b:83:df:4b:d4:0b:1e:7a:
81:0b:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:55 2025 by rpki-client