Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BB4C88EF5E111EFBAD74C83762E951A.roa
File: 2BB4C88EF5E111EFBAD74C83762E951A.roa (raw, json)
Hash identifier: 8F+Uy8zXAIBLk8LGNatpCT2sBTFLdQB0SZVXhg5DwHs=
Subject key identifier: 68:DC:45:B4:74:AA:80:10:2E:02:5F:D7:50:75:DE:88:FC:45:9A:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E5A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BB4C88EF5E111EFBAD74C83762E951A.roa
Signing time: Fri 28 Feb 2025 14:34:52 +0000
ROA not before: Fri 28 Feb 2025 14:34:48 +0000
ROA not after: Sun 13 Apr 2025 14:34:48 +0000
asID: 138915
IP address blocks: 156.244.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81498 (0x13e5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 14:34:48 2025 GMT
Not After : Apr 13 14:34:48 2025 GMT
Subject: CN=67c1c98c-7360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:72:72:ab:ad:05:c9:60:a1:70:65:d6:e4:
1c:5f:db:67:21:1a:a2:71:b1:b2:05:ad:3e:22:cb:
1d:31:23:f0:5e:a8:20:6e:70:91:82:24:bb:81:27:
81:a9:c8:af:d0:e7:3c:43:bf:d5:4d:db:e6:7d:8d:
0c:a9:36:0f:a4:a0:5f:ef:3d:4f:4c:8a:49:08:88:
1e:5d:fa:e1:ab:0f:50:62:60:80:e8:7a:53:cf:e3:
08:3f:63:68:82:bb:86:35:a7:55:79:26:36:be:1e:
fc:d9:f9:cb:03:20:17:43:cf:06:19:04:af:71:95:
3a:62:e8:60:a5:20:b8:31:97:f9:97:44:6e:9a:13:
2f:80:72:bf:7a:2b:ec:e8:c1:5d:5a:6f:b1:ca:17:
e5:2f:4b:d9:c2:99:af:ee:d2:ee:4e:3c:c6:85:b9:
5f:68:91:48:53:5f:0f:a0:d3:f2:ec:e0:2e:b9:84:
b7:72:bb:98:1b:57:82:8d:70:64:ef:e1:9d:d9:9a:
3c:39:39:8a:7a:11:72:50:fc:58:55:6e:34:95:d1:
df:d1:25:8a:1f:04:76:3e:26:41:d2:a6:33:b5:0c:
a9:8d:40:f6:ee:39:13:d9:05:b5:14:ba:0c:96:87:
d6:9d:a7:40:00:96:31:c5:08:67:aa:ce:ba:54:b7:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DC:45:B4:74:AA:80:10:2E:02:5F:D7:50:75:DE:88:FC:45:9A:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BB4C88EF5E111EFBAD74C83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.25.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:6b:4c:5a:aa:c4:35:5d:d6:93:d6:7d:07:6e:9f:a9:1a:84:
04:9e:02:26:ed:b7:cd:23:e4:9d:72:b5:7d:b1:bd:a6:f8:f7:
d7:9e:a3:58:35:d4:ed:8a:9d:3c:12:58:c7:52:ca:37:ee:66:
b7:1e:76:52:8f:1b:5a:1a:58:1c:ad:2f:56:7b:de:90:14:c8:
2a:bd:47:17:9f:86:1f:3e:31:1f:ef:26:46:44:5b:24:4b:84:
f4:7d:7c:b0:11:ed:ed:4f:7e:cb:ce:77:e6:1b:89:48:06:c0:
58:ed:bd:07:e3:27:ff:c4:80:44:83:88:62:22:77:fe:98:3d:
d5:e1:62:d7:5d:59:cc:3d:c8:b6:df:1b:e9:d0:71:be:7f:4f:
b6:15:a6:c4:77:cb:96:2c:d4:ea:b3:83:7f:2c:15:ce:48:48:
77:4b:67:cc:58:9c:f9:4d:ad:0a:34:4e:66:3f:27:b0:40:6b:
9f:6b:90:89:5f:8d:24:2f:7b:d6:5a:dc:1b:d5:c9:2a:97:d7:
29:ef:18:00:aa:d9:15:59:c2:ea:9a:3a:b9:dc:14:6a:85:f0:
99:56:82:0e:2f:9b:b4:62:d5:92:80:b8:e5:e4:81:b7:e6:0f:
92:d1:88:29:f8:71:12:a9:4b:bc:9b:cb:70:a8:b1:8b:33:70:
65:6a:00:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:56 2025 by rpki-client