Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3078ED70F45411EF98B06955762E951A.roa
File: 3078ED70F45411EF98B06955762E951A.roa (raw, json)
Hash identifier: Yl39q8Iql0khWbU35Ett7HWqvjlvNqk4Rz3c7j6RC1w=
Subject key identifier: BE:B8:D5:D1:18:A1:5D:A2:93:C2:13:13:23:91:8C:48:90:5D:5F:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013425
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3078ED70F45411EF98B06955762E951A.roa
Signing time: Wed 26 Feb 2025 15:13:10 +0000
ROA not before: Wed 26 Feb 2025 15:13:06 +0000
ROA not after: Thu 19 Feb 2026 15:13:06 +0000
asID: 984
IP address blocks: 156.231.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78885 (0x13425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:13:06 2025 GMT
Not After : Feb 19 15:13:06 2026 GMT
Subject: CN=67bf2f86-dd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:8d:a1:1b:be:19:e2:53:1d:22:7c:da:09:
c3:7d:ab:32:99:23:da:79:6a:73:1d:6c:c8:78:ca:
cf:17:d4:18:e3:9d:3e:34:c3:6f:3c:90:09:74:b8:
f2:75:e6:e7:01:89:d6:d2:a7:38:7c:e8:06:f1:79:
89:6a:80:5c:af:42:72:94:1e:a5:bd:ba:03:69:8d:
52:ef:e1:5f:07:5e:9d:38:f9:ae:db:20:fe:33:12:
81:4a:5b:bc:17:eb:49:09:b2:a8:9e:56:21:33:b1:
a7:33:73:91:e5:d6:0f:a8:19:a7:c3:74:ba:4c:36:
e8:36:ed:45:25:a2:66:de:3c:82:76:2f:c1:9f:73:
01:a4:6c:30:6b:10:af:7f:31:1a:55:e6:ec:76:7e:
5e:63:28:11:9d:be:8c:b1:b0:f5:70:ec:42:cf:87:
a2:9a:ba:d4:d8:35:f8:66:93:41:ed:32:29:8c:a5:
67:34:f6:53:9c:36:b3:bd:c7:50:8c:7c:43:e6:f4:
9f:4a:cc:a2:78:85:72:74:2f:3e:8d:93:0d:76:9a:
6c:d5:98:2f:2e:f6:55:b9:e1:8d:ef:b1:7c:49:19:
7f:57:1b:dc:cf:53:ff:ca:c2:84:c6:8e:88:28:97:
7c:16:05:b1:c3:52:5c:b6:18:3e:e2:80:e2:2f:ea:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B8:D5:D1:18:A1:5D:A2:93:C2:13:13:23:91:8C:48:90:5D:5F:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3078ED70F45411EF98B06955762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.205.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b0:ab:ef:78:81:96:4e:4f:aa:f6:c9:5f:2a:c4:c1:66:36:
51:83:33:2d:71:df:a3:ca:9e:4e:b3:0f:73:d8:86:b5:81:12:
9d:e2:90:59:30:30:b8:f8:66:89:1f:c8:c2:36:80:92:13:0f:
d8:f0:2d:8c:95:26:2e:3f:3e:24:e8:8b:cf:4e:b4:2f:15:9e:
cd:b5:8d:c4:1c:a5:5c:7b:28:29:83:3c:62:3c:f4:71:06:7a:
4e:cd:93:3d:2c:99:f0:fa:d6:8c:4d:6f:54:0e:30:3c:97:f8:
03:6a:8e:de:c9:ad:5f:b9:1f:b2:55:ea:9c:c4:ce:ad:e7:28:
57:f3:39:23:13:a8:c8:cd:ea:36:d1:2e:98:c7:58:79:8d:3d:
1b:e0:29:0b:78:c8:5f:e1:1c:00:65:66:05:09:ae:60:52:e5:
2e:d9:39:90:07:8c:56:c5:f4:96:c3:b5:e7:87:dc:16:e2:b1:
f4:97:db:c8:64:22:a5:8a:5d:2f:94:7f:3c:a1:ed:62:48:79:
37:59:68:b4:64:74:58:e3:e4:a7:31:4a:68:d5:a2:8a:51:5a:
9c:77:16:36:86:01:d3:49:ec:7e:08:7a:d3:90:ce:48:a7:1a:
3b:42:a6:67:d5:94:96:8e:62:59:10:8c:13:05:9a:9f:1a:05:
80:c2:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:54 2025 by rpki-client