Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CEDDEA0F34511EF8FE71692762E951A.roa
File: 2CEDDEA0F34511EF8FE71692762E951A.roa (raw, json)
Hash identifier: GDrC36wAOuZhd9/5vC0Wxl44rs38aZSp5ql0NLpFp8M=
Subject key identifier: FC:1E:BE:BA:3F:F4:BA:6B:50:C9:8B:7C:E1:B5:1F:AC:37:E9:F1:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CEDDEA0F34511EF8FE71692762E951A.roa
Signing time: Tue 25 Feb 2025 06:53:10 +0000
ROA not before: Tue 25 Feb 2025 06:53:07 +0000
ROA not after: Sat 19 Feb 2028 06:53:07 +0000
asID: 17561
IP address blocks: 156.249.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77202 (0x12d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 06:53:07 2025 GMT
Not After : Feb 19 06:53:07 2028 GMT
Subject: CN=67bd68d6-ec99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:b0:fc:17:28:3f:65:00:a1:49:9a:8b:27:
4f:3a:e2:24:14:27:61:a7:dc:8e:67:33:ba:11:3f:
23:fc:c9:fd:27:f4:98:5e:66:e5:85:71:8b:e6:bf:
9d:16:5a:51:86:5f:30:2d:8d:ea:17:69:20:1b:e9:
52:38:47:8b:d7:7a:90:a1:c1:78:be:3c:e2:18:96:
53:49:c4:bb:42:02:be:f6:29:e4:ea:d4:6b:26:61:
b0:24:f0:69:fc:c7:54:aa:7f:08:a2:92:a1:9b:f8:
fd:c9:f6:46:db:7a:ed:91:4a:83:7c:24:54:38:39:
97:ff:6a:10:a3:32:2b:ed:4f:a1:99:8a:93:36:a7:
9c:ee:42:88:f9:11:2b:b5:77:4d:48:ba:20:b9:a2:
42:fa:58:d0:6b:7d:ed:fe:0a:fb:71:10:3d:e3:4e:
5a:6f:cd:1b:c7:d6:5a:67:8d:1e:65:32:08:b1:77:
81:46:33:ed:84:8a:73:b2:44:89:87:5e:89:47:a8:
86:a1:71:ca:e6:b5:e2:03:70:65:4d:a9:b5:79:16:
1a:c2:2d:e7:06:47:4a:88:49:18:8a:8c:e0:e8:ea:
77:57:69:4e:48:94:d1:b7:07:d2:79:73:c6:63:4d:
5d:2c:61:32:aa:64:9b:40:54:e3:11:40:1d:f6:bf:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1E:BE:BA:3F:F4:BA:6B:50:C9:8B:7C:E1:B5:1F:AC:37:E9:F1:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CEDDEA0F34511EF8FE71692762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.213.0/24
Signature Algorithm: sha256WithRSAEncryption
98:02:86:83:0a:e6:ea:4c:0b:60:ca:ea:40:a8:ed:b8:1e:ee:
8f:e7:d8:ca:69:44:5e:73:b7:bd:08:1c:57:dc:24:be:86:40:
c6:78:87:5f:8c:f0:e2:4b:b7:4c:9e:95:55:2d:01:c5:21:6b:
56:c3:8b:e2:70:17:9b:9f:c7:d3:f9:a7:b2:5d:90:78:bb:27:
f5:8a:b6:69:9e:cd:1e:03:5f:eb:d8:95:58:0b:15:6b:27:ca:
c4:49:24:89:c6:40:b6:89:a3:66:88:9d:79:cc:dc:c6:2f:7a:
3b:17:7c:a3:60:71:38:30:18:5f:9d:ba:20:19:35:df:08:ff:
55:32:8c:21:c5:3b:15:d5:89:ab:92:5f:05:61:dd:cd:ab:d4:
28:9c:bc:0e:de:87:07:50:36:a5:96:9a:cb:8c:ae:46:de:09:
a1:c9:2f:b7:9b:17:3a:37:b2:d6:15:1c:b0:35:3b:f1:af:39:
fa:70:cd:2b:7d:e6:b6:4b:43:56:f5:5a:33:ae:80:30:a4:90:
0a:54:44:8a:80:23:e9:a4:fa:15:49:1c:5a:93:c4:b5:e5:d1:
60:4c:84:4d:87:16:6f:ed:95:b7:fe:5c:ad:60:81:f4:e7:75:
3c:f3:db:93:e6:7b:3b:1d:21:89:96:08:ad:dd:a0:42:4a:42:
33:8e:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:47 2025 by rpki-client