Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C511BE8F46011EF90B8DAA6762E951A.roa
File: 3C511BE8F46011EF90B8DAA6762E951A.roa (raw, json)
Hash identifier: ISx1TVEz0L/v8r74g3Vk3VShMxtPy5vp4UkCycmFfVg=
Subject key identifier: 31:2B:D1:76:3C:88:92:E3:BD:D4:32:97:DC:E3:E5:BC:11:03:85:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C511BE8F46011EF90B8DAA6762E951A.roa
Signing time: Wed 26 Feb 2025 16:39:24 +0000
ROA not before: Wed 26 Feb 2025 16:39:20 +0000
ROA not after: Thu 19 Feb 2026 16:39:20 +0000
asID: 984
IP address blocks: 156.252.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79080 (0x134e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:39:20 2025 GMT
Not After : Feb 19 16:39:20 2026 GMT
Subject: CN=67bf43bc-6535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:94:3f:9f:e1:21:d2:b4:5d:10:fb:c0:bd:
b8:c5:37:06:5c:f4:e6:e9:6b:b7:2d:a1:ea:32:72:
14:02:43:f7:8e:64:7f:2d:3b:cd:2f:20:93:8f:70:
1e:3a:71:3f:3c:ea:eb:5d:8a:e5:da:d3:84:68:ac:
1f:42:ad:e0:df:5f:1b:78:dd:7a:b6:b6:9b:ab:0f:
83:c6:a2:5a:c1:8b:e9:b4:5c:c4:15:2f:b8:c3:18:
d3:fe:70:b1:fb:a4:65:da:33:72:7a:45:39:77:32:
0e:46:d1:cc:f4:92:aa:c2:12:ba:82:9c:6f:97:ef:
5a:3a:f0:d9:c3:4f:81:cb:33:76:ba:a9:2e:52:3c:
c7:20:21:e4:98:9a:8d:ea:af:0b:74:c3:73:d7:62:
d2:cf:76:21:27:7f:bb:c3:bb:73:74:73:c8:76:67:
2e:e2:7a:d2:29:f9:70:57:d7:c0:8c:3e:10:77:0a:
73:7c:df:c3:b7:a9:55:be:96:6c:61:0d:75:17:5d:
a5:c3:57:cb:3d:b4:ce:cd:1e:df:95:b6:31:27:3a:
1d:22:2c:1d:d4:3d:30:f5:df:d8:fd:ed:21:81:a6:
68:9d:66:88:a8:16:61:b0:23:d3:60:44:0b:ca:1d:
f8:7b:1d:88:f0:ca:1e:00:87:98:63:23:66:2a:f8:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2B:D1:76:3C:88:92:E3:BD:D4:32:97:DC:E3:E5:BC:11:03:85:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C511BE8F46011EF90B8DAA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.244.0/24
Signature Algorithm: sha256WithRSAEncryption
74:db:21:e6:4d:cc:5d:53:05:26:cd:f8:d3:23:fd:15:46:2c:
c9:61:55:a9:48:94:2f:65:c7:3a:d5:90:53:38:fa:25:a3:60:
41:d8:b3:5a:25:7e:b1:e5:48:59:2a:be:f5:f5:12:b5:d7:5b:
03:03:53:2f:e7:ba:ca:37:f7:c9:c1:4e:08:de:03:0c:23:01:
e4:d5:b8:ba:e7:6e:d9:f9:b5:6f:56:09:4f:d9:b3:62:30:ce:
62:47:79:4a:9c:d5:2f:0b:0a:12:03:58:de:c1:ff:d3:50:d3:
ef:0d:8c:f9:ee:71:14:f5:2b:65:b4:c4:ab:3d:83:43:c2:0e:
2e:56:84:66:f5:79:a8:72:6b:af:ad:29:2c:52:d3:b8:0b:91:
b4:40:1d:28:e9:12:44:bd:df:b3:d8:22:42:52:9e:10:ec:ea:
29:49:9c:50:65:de:59:0a:7c:ee:ca:94:97:db:44:7e:7c:20:
ca:1c:83:c2:20:3a:5a:1b:64:d8:ee:1a:23:21:53:a7:4b:da:
59:8e:22:73:93:c9:e5:75:e5:9b:55:86:20:5f:54:ae:ee:81:
89:5e:63:4d:d1:91:47:04:7c:16:f7:2f:0e:6a:2f:d7:57:16:
a6:72:1c:18:d0:69:c3:cf:44:e9:d5:1e:4e:d9:e6:96:5a:c7:
de:e6:fd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:36 2025 by rpki-client