Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A262422F42211EF861E1473762E951A.roa
File: 4A262422F42211EF861E1473762E951A.roa (raw, json)
Hash identifier: SZbqDEEtUV4YKCWwOWsw6av+MNAVFtaPcUQuLVH3mHg=
Subject key identifier: 09:9E:3F:68:B2:4F:1F:65:7A:5A:AD:91:C1:B5:1B:4C:66:9E:FA:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013059
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A262422F42211EF861E1473762E951A.roa
Signing time: Wed 26 Feb 2025 09:15:58 +0000
ROA not before: Wed 26 Feb 2025 09:15:54 +0000
ROA not after: Thu 19 Feb 2026 09:15:54 +0000
asID: 984
IP address blocks: 156.230.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77913 (0x13059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:15:54 2025 GMT
Not After : Feb 19 09:15:54 2026 GMT
Subject: CN=67bedbce-fc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:a5:51:8f:e3:54:9d:fb:6f:ec:8c:2d:e5:
6d:9d:0f:21:14:fa:8c:91:10:11:c2:7d:fd:67:69:
ee:60:b0:b6:00:8c:7b:f5:2f:45:bd:52:f0:d5:26:
aa:23:d3:06:f7:7e:6d:73:2c:7b:8f:d6:0b:1a:cc:
be:9d:82:4f:3c:b5:13:22:22:32:a0:f0:d3:2c:c7:
8b:37:0c:fd:0f:0f:2d:63:1e:1d:2f:60:a1:bf:6c:
17:b8:54:72:43:e9:a8:d4:15:48:54:cb:4f:3e:2a:
f3:ef:e5:70:a3:a0:98:73:13:87:86:a4:14:dd:1b:
69:80:b4:18:14:60:30:61:66:c8:d4:df:4d:85:8c:
a6:fc:75:59:56:4a:7d:10:78:a0:55:83:68:05:c5:
75:f5:73:e5:7f:71:6b:4e:a6:8a:49:eb:ba:e7:f3:
47:aa:25:59:26:f3:da:65:f5:b0:02:8f:60:ff:1f:
7f:39:fe:9c:d7:e7:64:5d:92:12:2a:d6:7a:27:40:
f1:ea:32:b3:13:1e:a4:e4:58:3b:ec:f9:74:c7:38:
2a:5b:25:3a:c9:53:7d:33:2b:9c:f1:4d:06:07:b5:
a1:54:15:26:7f:71:13:c5:d9:20:bf:3b:69:e0:e0:
ee:8b:c1:a6:f3:a3:10:d0:e1:da:2d:42:88:e7:3e:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9E:3F:68:B2:4F:1F:65:7A:5A:AD:91:C1:B5:1B:4C:66:9E:FA:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A262422F42211EF861E1473762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.20.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f9:f7:d3:2b:7b:7a:93:3a:09:92:a3:a9:97:e9:38:a5:2f:
6e:b2:56:5d:4f:01:f9:df:9e:2e:5a:a2:71:56:5c:92:73:d7:
18:d9:33:ec:3e:77:30:a7:15:63:0a:68:40:0c:7c:8c:6e:1e:
49:03:d1:d2:c4:a4:ba:4b:28:5d:8a:84:7d:4f:a7:9a:6c:68:
67:f3:bf:34:a9:f8:cf:af:e6:a6:06:88:22:5c:3d:b8:0c:00:
23:b4:60:99:8b:f7:9c:5f:f1:7d:33:2b:af:0e:0d:fb:d8:a1:
a8:6b:77:bc:cb:d7:aa:c5:0e:45:81:e6:55:ad:d5:80:98:e6:
89:89:17:b4:2e:bc:45:d1:0b:46:b7:ea:3e:d9:1e:8e:dc:5b:
8f:34:bc:64:72:fa:64:ee:87:6d:14:5a:c0:cf:50:db:20:0b:
74:ad:cc:ba:8d:43:d9:5d:e8:b6:24:c5:89:6c:27:87:4d:95:
b1:14:25:8f:4b:9f:60:1c:06:43:25:e5:31:b8:82:26:6e:64:
3a:c7:c7:3b:36:ac:ec:f9:58:4b:67:4c:c4:c5:8a:c9:3e:b6:
14:6f:b1:e2:a4:3c:0e:10:3a:0c:ff:ec:24:5d:c8:7f:76:cc:
8b:e5:2f:b2:bf:97:08:a1:c6:58:06:6b:40:9c:0b:ee:01:0f:
1e:5f:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:34 2025 by rpki-client