Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51156F3CF2C811EFB57B9BB8762E951A.roa
File: 51156F3CF2C811EFB57B9BB8762E951A.roa (raw, json)
Hash identifier: bLX0RzmL6YxJTyE+mIsnAivhIZW6TZj/hCj4MOHsSOc=
Subject key identifier: 69:8A:74:3C:3F:24:FA:98:D4:65:09:F3:F8:B4:16:8A:39:DD:2A:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51156F3CF2C811EFB57B9BB8762E951A.roa
Signing time: Mon 24 Feb 2025 15:59:24 +0000
ROA not before: Mon 24 Feb 2025 15:59:20 +0000
ROA not after: Mon 24 Mar 2025 15:59:20 +0000
asID: 25160
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76825 (0x12c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 15:59:20 2025 GMT
Not After : Mar 24 15:59:20 2025 GMT
Subject: CN=67bc975c-5a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:6d:01:1e:8c:40:d7:43:f3:5e:32:82:a6:
8b:67:83:5f:8f:88:0a:3f:42:18:25:64:f4:78:26:
11:e9:eb:36:60:21:0c:96:d0:d5:04:d6:58:b7:08:
ec:a0:f4:bd:e7:4c:c5:15:b9:f2:63:fb:d0:27:d0:
a9:a8:96:62:a6:d9:fa:ac:76:6a:c4:e3:2a:96:6f:
b8:54:41:ae:78:2c:f9:cd:56:45:00:77:6a:af:d3:
c5:df:a0:d9:e4:43:27:1c:ba:a1:ac:2c:9f:8c:84:
24:d2:0e:fd:92:d4:88:2e:d6:b8:89:79:e7:4c:03:
e4:a6:9c:b0:d4:b9:5c:e6:53:e9:28:a9:7f:cb:69:
cd:2b:4c:6c:b2:fe:ba:ab:b6:c7:a7:c5:90:6a:64:
fa:40:42:60:20:f2:c0:9e:98:2c:3c:d1:40:a3:75:
f5:1c:f9:e6:d7:6f:74:9d:24:92:9d:80:3e:cb:55:
a7:2b:ac:dc:48:fe:85:f2:27:60:4d:30:9b:e2:0d:
f0:c3:49:42:7d:ce:c6:6e:1d:38:d2:cc:f3:82:56:
91:f0:52:54:40:c6:27:f9:f1:b0:ef:2c:fa:2c:22:
53:b8:b5:64:d6:f0:a0:a5:09:dd:ae:17:47:b1:8c:
30:13:9c:f8:9f:c6:32:46:a3:e0:46:e2:b0:98:e7:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8A:74:3C:3F:24:FA:98:D4:65:09:F3:F8:B4:16:8A:39:DD:2A:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51156F3CF2C811EFB57B9BB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0f:37:7e:dc:45:ae:3f:95:f8:4f:d9:d9:53:1a:92:a7:40:
b9:1a:2d:cd:c4:ca:e8:11:69:59:45:e5:35:c8:41:fa:ca:8b:
d1:4b:cb:0d:3b:bb:02:14:1d:ce:e4:c9:19:85:df:3e:95:92:
27:06:8e:31:1e:d2:38:4f:1b:01:21:ea:07:24:3c:67:b8:25:
0d:5b:ef:03:ff:9e:55:10:ee:ea:05:e2:98:9b:5a:46:97:68:
37:00:e8:c7:6f:24:e6:7c:f2:6b:ac:60:3e:ff:5b:c6:3f:4f:
d7:e1:e8:95:ed:31:d5:41:cf:c5:d4:a1:65:2d:52:e4:dd:11:
81:b4:2e:6c:9c:16:84:25:c4:0a:fd:6a:22:3e:8b:1b:41:8d:
98:86:c8:9a:5e:11:98:d6:29:1b:d1:96:a6:97:15:e5:df:22:
3e:97:38:cc:53:01:db:93:52:15:8f:51:0c:3b:c4:f8:22:a2:
2d:cd:56:00:55:d8:e5:0b:8b:0d:83:c6:1f:11:54:a2:94:f8:
2b:c8:fa:d8:41:45:d3:8f:50:a4:bd:b2:00:40:8f:6b:20:f5:
0e:12:8d:8a:31:55:4b:4b:22:22:cb:6b:9a:3d:6a:ad:96:4a:
00:21:95:50:8f:85:50:aa:57:64:e5:41:62:d0:c6:3c:60:74:
8f:ea:ff:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:33:31 2025 by rpki-client