Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/583D5F500D3411F0A5BCBC7B762E951A.roa
File: 583D5F500D3411F0A5BCBC7B762E951A.roa (raw, json)
Hash identifier: IPb91jS5wq9bGFy3rjWodjwhpaaj5/ZVHy4N9ZA+uMs=
Subject key identifier: 49:01:20:1E:AD:71:C6:FE:51:79:B6:19:CC:19:A7:31:20:37:3B:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014938
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/583D5F500D3411F0A5BCBC7B762E951A.roa
Signing time: Sun 30 Mar 2025 06:58:12 +0000
ROA not before: Sun 30 Mar 2025 06:58:08 +0000
ROA not after: Fri 02 May 2025 06:58:08 +0000
asID: 213707
IP address blocks: 156.225.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84280 (0x14938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 30 06:58:08 2025 GMT
Not After : May 2 06:58:08 2025 GMT
Subject: CN=67e8eb84-e15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:e5:14:cb:03:b2:9b:72:6b:df:44:81:1d:
c0:4f:1f:48:c3:55:25:e0:b8:a5:e1:5b:a9:a7:a5:
86:6a:36:d6:22:1a:1c:eb:ab:67:a3:ad:2f:25:19:
de:50:38:75:0e:0b:4b:0c:9a:11:f5:9d:d3:ab:07:
8e:1d:c4:60:4a:1c:98:e4:a8:04:c3:2c:0a:aa:18:
be:6e:76:04:cf:ac:44:b5:e5:59:71:6b:4c:2d:ed:
f0:62:31:b9:5c:63:3b:78:63:b7:a4:f0:1b:cd:17:
3b:66:d4:cd:ca:f9:7a:64:df:99:80:42:50:81:37:
e6:6c:61:0d:f0:82:f1:eb:43:f2:78:14:af:6c:de:
6d:99:53:be:44:e9:b9:e1:bb:f4:b1:b3:8c:54:ec:
60:41:e1:d3:f6:94:92:87:7a:f0:c0:73:54:ba:70:
87:65:70:ce:67:fa:ed:6b:c2:62:04:fa:95:8f:0c:
e1:73:ce:f5:c5:04:e1:ec:87:07:0e:63:56:2f:df:
dc:5a:9c:a9:c3:5e:39:45:39:c0:1c:8b:7e:d2:28:
9b:0e:68:00:d3:e1:fd:4a:ae:e3:c1:02:a8:91:26:
41:44:4b:8b:ed:59:d9:da:62:9c:54:6d:54:90:7f:
00:2d:a1:fc:a5:ec:ba:4b:3d:e1:ce:5b:7f:28:1f:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:01:20:1E:AD:71:C6:FE:51:79:B6:19:CC:19:A7:31:20:37:3B:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/583D5F500D3411F0A5BCBC7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.41.0/24
Signature Algorithm: sha256WithRSAEncryption
48:65:55:45:5c:55:c4:d6:40:2c:4f:24:58:79:e8:5a:86:e4:
93:a5:ec:13:f0:a6:b7:58:56:98:13:10:8a:ba:98:c3:82:4d:
b0:c5:e9:a1:9f:4f:d0:5d:1e:46:bf:03:4f:88:74:40:ce:a5:
c0:6d:4b:c9:ae:24:73:bd:fb:90:b2:6b:d5:98:03:ed:92:b9:
34:8a:4a:69:a8:e2:b0:55:ce:74:0c:f7:21:c9:35:53:87:d9:
c2:fd:79:be:9a:38:54:e9:30:ae:76:d0:e6:cc:fa:39:16:d5:
8d:40:e1:a2:61:18:29:13:9e:15:23:13:a1:db:d2:e9:66:44:
95:4c:64:77:28:2b:bb:2a:ea:5f:24:6c:12:88:eb:3c:b9:f3:
fc:5f:14:14:dd:84:95:80:fa:72:64:15:1c:9f:66:d3:3a:48:
da:eb:03:c9:a5:2e:49:20:a8:09:f8:6c:81:36:96:e2:cc:ff:
4e:a4:46:b4:4e:8d:e5:15:e3:c8:6d:cc:8d:22:b1:34:21:97:
9a:a3:8b:8a:bb:20:62:1a:4b:f5:4f:12:be:c5:33:fb:86:9f:
74:06:0c:97:f7:c4:e1:38:a8:1c:d9:2b:8a:ea:ac:07:07:a3:
2a:6f:c0:51:59:5b:ff:1a:94:33:bc:60:7c:0c:24:74:cc:fd:
b4:60:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:44 2025 by rpki-client