Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DF29B00F46C11EFA398CF7A762E951A.roa
File: 3DF29B00F46C11EFA398CF7A762E951A.roa (raw, json)
Hash identifier: xjOmic6fzONHfA3gi0KOFLWhE3n1kqbnj5+LIKWe70k=
Subject key identifier: 7D:73:E5:EE:6A:94:54:23:F5:AE:34:AB:40:F6:6B:FE:5C:EB:38:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01361A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DF29B00F46C11EFA398CF7A762E951A.roa
Signing time: Wed 26 Feb 2025 18:05:20 +0000
ROA not before: Wed 26 Feb 2025 18:05:17 +0000
ROA not after: Thu 19 Feb 2026 18:05:17 +0000
asID: 984
IP address blocks: 156.228.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79386 (0x1361a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:05:17 2025 GMT
Not After : Feb 19 18:05:17 2026 GMT
Subject: CN=67bf57e0-6a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:31:6c:19:ee:c7:8a:25:63:1a:7e:d4:d9:
70:71:97:23:36:da:be:e1:d8:22:47:a5:03:24:c6:
71:ff:d8:93:7e:45:73:c6:05:42:64:50:cb:98:1d:
dd:c8:6b:b9:1b:cb:af:80:71:3e:70:a2:5f:53:bf:
df:46:79:98:7b:43:f3:53:4e:96:1e:a8:01:8d:56:
d2:9e:28:f0:03:9c:33:78:44:9e:df:f4:86:ff:e2:
0a:c3:03:d5:03:f8:c1:57:ba:af:89:59:75:99:cf:
c9:e3:d4:87:92:84:a3:45:7b:56:58:b7:e3:52:a1:
32:5a:29:56:4c:0d:02:b6:10:c5:9f:b9:0d:d1:a5:
bc:bd:30:46:2c:2c:50:eb:dc:10:15:5d:f9:cc:de:
18:e7:f8:60:d0:d5:dd:a0:95:c6:be:c2:e8:8e:fc:
c6:87:bd:b5:98:d1:86:27:21:88:ba:65:04:8e:f0:
b4:d2:1c:b0:76:bc:75:25:cf:9c:18:51:60:32:9b:
47:93:46:48:10:e1:44:f7:1f:d8:49:83:b6:68:64:
18:7c:47:ff:04:cd:c5:f7:ab:7c:3d:0e:e3:da:ff:
cd:9b:85:05:80:da:75:ff:db:be:58:cb:50:b5:3e:
9d:aa:2c:c6:69:f5:c9:33:f7:49:60:12:cd:15:57:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:E5:EE:6A:94:54:23:F5:AE:34:AB:40:F6:6B:FE:5C:EB:38:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DF29B00F46C11EFA398CF7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a6:97:e4:2f:96:e9:e0:89:fd:14:4c:25:0c:78:da:83:a7:
b4:7b:89:a0:3e:2f:29:b2:a0:88:af:47:c7:c8:83:69:66:9b:
f6:83:5f:d6:b9:a8:78:28:01:e8:08:11:b4:93:e0:ae:6b:ac:
33:65:43:22:22:6c:8c:9d:9b:5a:ae:e2:0d:1a:c9:9d:83:ea:
8e:bf:de:66:0d:94:6d:98:9c:f9:b1:51:5f:f0:30:2a:49:6a:
f1:5e:bf:17:69:d6:49:da:31:b8:03:6b:df:5a:f3:17:f0:ca:
11:0b:84:ed:b0:1f:99:35:c2:2d:c5:80:39:42:2d:a5:b5:f0:
91:5d:a3:be:40:ab:0d:4d:c1:cc:0d:b5:36:df:b5:6f:dd:0f:
76:db:8c:7a:8d:d7:79:83:2f:31:a2:10:8e:b5:e3:3a:2e:18:
2c:cd:b4:20:60:6f:b2:6c:ad:f4:de:d2:20:b7:3a:ef:00:e9:
1d:fc:97:2f:2c:fd:c1:e2:36:9a:e2:79:d1:df:1d:1e:77:77:
3b:27:70:51:66:8b:c7:1c:7d:78:39:00:2e:b3:46:dc:c4:34:
81:c4:56:c7:ca:01:74:cf:03:c1:a9:af:2f:bb:38:9d:83:e4:
54:3f:3c:a2:e7:c7:50:d2:3b:5b:fd:43:e0:d1:0f:7c:cc:02:
c0:08:56:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:52 2025 by rpki-client