Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/357BD52AFF1311EF9D72B680762E951A.roa
File: 357BD52AFF1311EF9D72B680762E951A.roa (raw, json)
Hash identifier: t8FZb0GsKQS10EBJztwSNs8iH5riviD6LQW1k3sltek=
Subject key identifier: 3C:C7:06:43:2D:7A:5E:58:22:7C:2C:9B:2D:5B:63:70:E7:77:97:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/357BD52AFF1311EF9D72B680762E951A.roa
Signing time: Wed 12 Mar 2025 07:25:44 +0000
ROA not before: Wed 12 Mar 2025 07:25:40 +0000
ROA not after: Fri 11 Apr 2025 07:25:40 +0000
asID: 213465
IP address blocks: 156.228.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83192 (0x144f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 07:25:40 2025 GMT
Not After : Apr 11 07:25:40 2025 GMT
Subject: CN=67d136f8-4370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:d7:1b:28:e1:b1:ff:6e:10:93:0d:4a:f4:
e3:04:23:68:d0:77:7b:43:3a:61:4e:78:b7:56:27:
9c:5f:9c:3f:a1:59:8e:35:3b:3e:28:95:80:08:12:
5d:e9:ec:91:24:1b:cf:3e:75:db:11:0e:fe:eb:a0:
e3:08:0c:f1:a1:4d:cf:89:3f:51:03:84:98:a1:fe:
87:3b:99:b5:81:f0:92:d9:e8:5e:0e:6c:2e:d0:73:
9f:78:77:be:bd:0a:f0:4b:5b:04:73:e1:16:26:a3:
cd:22:65:5b:c5:97:a0:7e:24:14:c3:52:36:ac:e4:
51:a1:b5:b1:28:e8:73:6e:e9:34:b9:95:8d:87:92:
fb:85:9a:c7:b7:8c:6f:4a:93:97:3a:41:4b:18:e5:
99:ba:5b:35:84:6f:85:ed:91:89:3f:63:c1:d8:31:
94:63:b4:18:6b:93:95:b1:1f:88:e8:d7:1d:ac:36:
7d:b8:c4:97:93:db:87:6f:ca:2f:00:54:af:3c:12:
58:c5:b6:ba:5e:36:f6:41:2f:44:af:d5:89:35:7d:
cc:68:a8:61:80:8e:d3:05:65:7d:bd:64:4c:be:d8:
65:4e:cc:e5:50:60:a1:b4:cf:5e:69:3a:25:e4:47:
88:29:c5:3e:31:66:a2:7d:13:50:c9:6c:11:42:5a:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C7:06:43:2D:7A:5E:58:22:7C:2C:9B:2D:5B:63:70:E7:77:97:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/357BD52AFF1311EF9D72B680762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2a:5a:4c:ed:3e:54:58:1a:1a:87:40:27:a2:ec:d4:62:31:
67:a0:cd:8e:15:9e:45:f7:d7:a8:f1:50:2c:fa:4d:79:b2:89:
41:36:3e:8b:00:40:d3:a1:32:63:a6:6a:e7:f6:33:58:df:d0:
e1:dc:c8:c9:45:23:10:d5:79:1f:70:89:f9:a3:0f:6c:fa:63:
a6:ce:06:25:08:a5:e7:e7:39:10:c1:78:4b:f0:24:b7:80:40:
59:c1:12:4d:d4:e8:00:ce:14:cc:12:ed:17:03:82:7f:a4:50:
a3:a8:da:7b:63:16:d7:fa:f5:60:1f:cf:e0:3e:f5:df:b5:f7:
65:af:ff:ac:24:ca:3d:ec:d0:d9:78:05:9a:b1:df:cc:58:17:
be:6f:78:a0:1b:3b:9d:1e:f0:6a:ce:eb:eb:44:a9:b7:1a:4e:
7a:71:41:73:4c:8a:a6:a7:ca:6b:19:bd:bc:e7:99:11:fb:1c:
58:fe:21:d1:48:04:01:ce:a4:49:69:69:a7:be:a7:c7:b9:9e:
ee:46:75:4f:19:2a:5b:99:5c:c2:bf:e9:b9:3f:e1:ac:47:de:
9f:1d:46:6f:e7:c6:7a:71:2a:cf:20:b0:ed:b1:2b:9d:17:5e:
97:14:25:b8:c2:35:2d:ca:ae:40:7f:52:05:da:dd:ba:a4:b2:
5e:6f:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:24 2025 by rpki-client