Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27FCCA482B3311F0B58AB17FDAE4EC9C.roa
File: 27FCCA482B3311F0B58AB17FDAE4EC9C.roa (raw, json)
Hash identifier: PHm7UKw7dyF0VHbGJx+47XHnVUzy2jTE0GUv4rkabfA=
Subject key identifier: 83:5B:18:34:9B:71:D1:E0:A1:AB:2B:E9:EB:58:83:BF:1B:EE:4C:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0152AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27FCCA482B3311F0B58AB17FDAE4EC9C.roa
Signing time: Wed 07 May 2025 11:05:17 +0000
ROA not before: Wed 07 May 2025 11:05:12 +0000
ROA not after: Fri 20 Jun 2025 11:05:12 +0000
asID: 57043
IP address blocks: 156.253.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86702 (0x152ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 11:05:12 2025 GMT
Not After : Jun 20 11:05:12 2025 GMT
Subject: CN=681b3e6d-fea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:9d:dd:8d:04:3e:64:af:c4:93:26:f6:aa:
0d:dd:a2:53:6d:78:c6:7c:b8:d9:c9:dc:a0:40:aa:
fb:da:8c:ae:0f:fd:3d:23:92:6d:49:4a:6c:a7:c6:
fc:d3:27:51:56:a0:ef:31:22:67:db:b6:81:98:50:
d6:6d:a8:28:12:e0:46:8a:97:da:64:1d:a5:84:b3:
bf:d4:2c:fb:0c:9e:70:ac:13:f0:89:ce:e3:e9:91:
6e:5f:b4:f0:b4:d5:20:1c:58:89:57:5c:52:21:07:
ba:a2:16:aa:96:7b:0f:75:90:51:6d:dd:20:e9:7f:
6e:76:0b:ec:86:de:dd:3c:84:8d:4b:6b:cb:87:c0:
a0:46:9a:ea:39:dd:7a:7c:d5:63:9f:05:74:64:44:
70:d7:4d:0b:79:20:d4:7a:07:0c:fa:1e:c2:7c:17:
07:d1:39:7a:2c:76:a1:e8:4a:4a:5c:25:a2:40:40:
c6:6c:18:1b:43:8f:67:ce:fd:42:3e:6b:1f:ed:52:
8f:f8:d5:ff:29:2f:72:9b:60:07:e8:45:95:ab:a1:
31:08:3e:77:74:49:a3:c2:52:e4:da:ca:8a:a1:62:
bc:ce:11:8a:3e:40:e1:87:6d:f9:86:62:cd:c8:36:
8b:57:19:42:90:8b:8c:63:db:6e:90:99:98:97:05:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:18:34:9B:71:D1:E0:A1:AB:2B:E9:EB:58:83:BF:1B:EE:4C:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27FCCA482B3311F0B58AB17FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f0:69:f9:d0:34:ed:38:0d:36:8e:ca:92:c7:fc:f4:42:e1:
fe:14:44:59:76:11:ef:53:ee:5b:fe:f5:b2:ce:ef:60:6d:86:
a3:9e:d4:54:b9:57:1a:86:3d:a3:b7:ae:70:d3:a5:7d:8a:d2:
a0:88:46:8f:a6:42:f7:d4:a7:0f:f2:11:34:75:08:ff:6b:d7:
64:71:1a:8d:7c:81:3c:6c:be:33:f8:6c:13:90:a9:11:0c:8a:
a1:dc:b9:e7:0b:6d:3b:73:b7:2a:0f:49:51:12:22:3f:b5:50:
cf:d7:15:98:7b:75:ce:b0:52:1f:27:86:15:1e:90:39:61:3f:
58:98:86:74:aa:b2:ef:a1:3c:0e:30:de:b8:00:9e:f4:2e:40:
d3:4e:60:3d:1b:2c:6b:ee:38:2b:b5:bc:cf:01:f5:6b:12:23:
4b:cd:8a:55:3b:42:48:2d:5a:03:a7:6d:9b:2c:4d:84:c8:e6:
36:cd:dc:ed:41:38:db:2f:e6:26:2b:74:34:18:00:68:70:5d:
70:17:50:28:86:9e:f5:46:4b:74:85:ee:a7:38:df:2e:62:76:
10:5a:4e:5f:db:b2:9d:c1:92:ee:fd:8f:e2:22:6b:fc:c9:c4:
82:ee:e2:7b:11:c5:52:a8:4e:4d:95:27:48:9f:0e:73:5a:09:
83:bc:9e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:37:24 2025 by rpki-client