Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53F08DFAFF3311EF8E48D54D762E951A.roa
File: 53F08DFAFF3311EF8E48D54D762E951A.roa (raw, json)
Hash identifier: vxC1/1lDEZlUFfFcqp9uYH6wg4PgCcHBCrhMYE+QptQ=
Subject key identifier: 76:96:33:2F:CB:D3:DF:2D:95:6F:89:EA:90:0C:56:8C:D1:F0:B0:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014555
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53F08DFAFF3311EF8E48D54D762E951A.roa
Signing time: Wed 12 Mar 2025 11:15:39 +0000
ROA not before: Wed 12 Mar 2025 11:15:35 +0000
ROA not after: Mon 31 Mar 2025 11:15:35 +0000
asID: 4766
IP address blocks: 156.239.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83285 (0x14555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 11:15:35 2025 GMT
Not After : Mar 31 11:15:35 2025 GMT
Subject: CN=67d16cdb-77bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:a3:cb:ab:c6:02:a3:5f:26:23:53:f4:9f:
9d:5f:ed:d8:9e:80:c9:c2:14:ed:30:48:77:38:da:
95:74:57:0c:69:51:70:d7:50:90:a9:ed:44:0f:ef:
be:e9:fd:6f:d8:9a:a9:25:2c:16:60:3f:ce:7b:95:
41:5d:f4:e0:c4:37:70:cc:6a:b0:5d:f2:92:f3:60:
4d:46:72:1a:26:80:38:64:20:ee:31:64:dd:4d:c9:
02:fd:8a:e9:44:73:77:ad:c4:fd:70:f8:aa:bb:a4:
36:04:f8:70:df:bb:77:2f:89:47:52:72:2e:c8:92:
20:8e:ce:02:da:62:e3:44:ae:8c:e3:9f:b4:84:48:
5b:6c:cd:d1:88:20:1d:13:79:21:1d:82:58:98:64:
6d:74:0c:75:61:2a:a3:c4:c3:e6:8c:5e:ff:fe:79:
e9:6e:76:dc:76:cb:5f:26:2b:d4:91:3e:6c:63:a0:
8c:ab:06:65:ae:04:60:13:66:c0:1d:eb:2c:87:29:
28:36:f0:e1:e5:ef:05:b9:04:0e:23:e9:b3:04:78:
bb:3c:11:fa:b8:69:7e:d0:73:ea:c1:4b:00:09:a3:
2e:7b:5e:f0:52:66:26:ab:97:78:12:95:a2:61:a5:
12:1d:b9:82:9a:67:e0:50:9b:0f:ed:e0:2e:e9:0e:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:33:2F:CB:D3:DF:2D:95:6F:89:EA:90:0C:56:8C:D1:F0:B0:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53F08DFAFF3311EF8E48D54D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.19.0/24
Signature Algorithm: sha256WithRSAEncryption
16:58:99:21:64:49:7a:fe:a9:ee:d4:df:d0:57:d8:af:83:21:
40:17:cf:26:68:9f:17:4c:2d:bf:6b:2f:c4:f9:b3:9a:ab:92:
01:c9:4a:a1:dd:14:86:12:0c:ae:98:e0:09:df:d2:0a:e3:9f:
6f:ba:a4:51:74:64:ca:4b:f3:a3:44:be:5b:e3:0f:90:3d:12:
e7:dc:eb:98:1f:19:80:b5:54:ad:f1:1c:67:ed:fe:0f:fe:a1:
26:ae:bd:66:f3:b8:0a:5a:0f:b6:d4:16:5f:7a:8d:61:2a:a0:
26:13:bd:74:e2:f4:2b:39:26:2d:62:a9:a5:ec:6e:50:c4:96:
d4:aa:3f:3d:bc:73:20:40:73:21:47:14:5c:8b:5f:86:29:81:
d0:35:d3:41:4e:14:b5:93:a3:26:e4:6e:66:48:6d:2c:2a:f7:
70:11:1e:f7:00:ca:7b:1b:93:3c:e5:05:fd:4c:a2:3b:70:6a:
f6:a1:05:3a:ff:f7:17:5a:20:bc:b6:01:4f:21:75:34:25:71:
4e:7a:9f:97:b3:f0:5c:d8:ce:70:e7:88:90:9a:e6:78:cd:2a:
6a:7a:e5:4d:83:2b:c4:06:8a:9e:9c:5a:dc:36:d5:c6:2b:54:
a4:c6:85:b5:8a:e0:00:be:50:86:5a:12:17:7c:eb:f4:22:75:
98:ca:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:52:23 2025 by rpki-client