Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2749A22EE9B611EFB6F075AF762E951A.roa
File: 2749A22EE9B611EFB6F075AF762E951A.roa (raw, json)
Hash identifier: 6xwCbyFbbhRPR13zzZk33/PyfEL+wxKmrwIcW+0UXSY=
Subject key identifier: B6:DF:85:40:15:5C:92:B1:B9:33:A3:5C:03:F7:65:FE:83:29:D6:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2749A22EE9B611EFB6F075AF762E951A.roa
Signing time: Thu 13 Feb 2025 02:56:43 +0000
ROA not before: Thu 13 Feb 2025 02:56:38 +0000
ROA not after: Wed 31 Dec 2025 02:56:38 +0000
asID: 17561
IP address blocks: 156.236.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74166 (0x121b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 02:56:38 2025 GMT
Not After : Dec 31 02:56:38 2025 GMT
Subject: CN=67ad5f6a-4f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:08:67:a6:b1:cd:27:4f:0d:a7:7d:84:cd:
5b:4c:cd:a1:95:d9:8e:b5:25:aa:b5:0a:43:36:6f:
15:a2:63:90:a1:4d:2d:57:3d:5f:3e:2e:ad:05:5c:
01:f1:28:15:a2:25:7a:39:9c:06:b5:b3:05:69:a1:
9a:90:a9:30:f5:b7:09:06:c6:24:18:77:d0:57:d1:
c2:33:52:ce:a3:f2:9f:8f:41:9b:7f:d8:a3:72:aa:
3f:1c:c9:7f:84:54:17:d0:3b:83:22:87:81:e6:90:
6a:cd:9c:11:11:52:cc:b1:27:2a:90:fb:6f:6e:32:
1e:90:33:63:ef:0c:8f:8f:82:d1:c1:6a:96:96:f3:
20:e5:dc:18:40:78:35:bd:b7:00:05:95:c1:1e:b4:
a1:72:77:05:39:f2:16:b1:5f:8c:cc:0e:05:96:78:
11:c1:44:86:e4:a3:11:71:ed:df:52:f1:0d:d7:c3:
3b:33:2f:4b:e0:11:d0:0a:a2:49:40:04:e9:1d:c5:
01:f0:3d:9f:d2:96:96:b6:0e:db:dd:a0:46:fb:97:
a8:61:2a:a8:a5:0f:89:9c:26:d6:cb:2c:36:92:dd:
e4:be:40:d9:86:0d:db:40:18:a3:f8:a4:01:40:a0:
2e:9f:b7:7a:fd:e4:c1:38:ba:6e:fa:e8:6d:91:ba:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DF:85:40:15:5C:92:B1:B9:33:A3:5C:03:F7:65:FE:83:29:D6:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2749A22EE9B611EFB6F075AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:1a:0e:d8:c6:17:22:43:0e:09:2e:ac:5b:99:5d:63:98:c5:
75:38:02:ba:7f:27:f6:84:81:75:bd:f8:60:be:b0:07:84:f8:
1f:d7:6b:c9:4e:c2:d4:72:7d:66:c8:7a:ff:f7:84:2c:da:19:
59:7a:c9:3d:64:c0:03:d4:44:e4:dd:a3:48:2a:ae:61:71:49:
1c:93:7b:51:d4:e9:dc:80:8b:c0:b0:67:0b:bf:bc:b0:ee:7b:
a1:52:c9:1c:11:66:ed:a2:60:29:85:09:05:10:53:f9:49:4a:
d3:51:45:df:88:a1:d5:0e:c4:a1:56:e2:e8:b6:fa:21:39:30:
f0:ed:f6:99:a9:16:02:9c:c5:cb:ba:78:83:56:6b:43:f2:c6:
61:cf:02:2c:8a:4e:b9:9b:81:8c:da:e0:aa:35:8d:f7:5a:61:
4d:d9:dc:b9:9f:4f:4b:98:95:1d:a2:6d:c3:ad:7a:ea:44:a3:
83:bd:a5:d9:7f:7c:70:d2:f9:b4:01:63:6c:da:f7:1a:25:dc:
54:9b:3b:11:c8:35:4e:20:6b:fc:f0:70:2c:9b:a5:12:e3:1b:
50:b8:00:0a:82:61:31:32:b3:dc:1d:ca:b7:95:e8:b8:97:32:
a6:2e:aa:28:b6:e8:45:0b:8f:80:63:57:52:dc:f7:bf:0b:89:
98:a9:81:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:32 2025 by rpki-client