Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BFF2E2CF44B11EF9D904D95762E951A.roa
File: 5BFF2E2CF44B11EF9D904D95762E951A.roa (raw, json)
Hash identifier: vKqL32MHe9TqdEne78BqZusZYT7vo2GUgPdui1cuPU0=
Subject key identifier: B9:80:34:AC:6A:4B:84:73:5C:BB:B3:AF:AA:6F:B4:7D:D4:14:2E:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013398
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BFF2E2CF44B11EF9D904D95762E951A.roa
Signing time: Wed 26 Feb 2025 14:09:57 +0000
ROA not before: Wed 26 Feb 2025 14:09:54 +0000
ROA not after: Thu 19 Feb 2026 14:09:54 +0000
asID: 984
IP address blocks: 156.231.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78744 (0x13398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:09:54 2025 GMT
Not After : Feb 19 14:09:54 2026 GMT
Subject: CN=67bf20b5-6b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:c0:ae:f1:f1:b5:be:09:10:77:9a:5f:c2:
6d:94:84:93:cd:d8:30:95:4f:b3:5d:8b:e4:77:8d:
86:e8:21:6e:b1:89:2b:c3:d1:0d:6f:66:91:97:e6:
8a:91:c3:f4:c0:ad:f3:a9:15:d2:ae:26:14:0c:5f:
92:b2:52:4e:75:6d:54:f3:59:4d:74:86:5b:22:8a:
f2:10:da:97:58:2b:ae:ed:03:e1:23:7e:b4:90:c1:
91:cc:d4:90:50:18:c9:9a:d6:18:f6:03:60:98:68:
d8:ef:84:57:27:20:f5:d3:c7:64:0b:97:6b:49:fc:
ac:59:14:38:ce:af:73:5b:7c:29:6e:d6:ec:6f:33:
6a:e8:74:43:7b:3f:31:b0:04:1d:01:f2:2a:ac:95:
bd:f5:f8:86:ce:96:0a:0c:15:dc:49:d2:40:a2:cf:
3e:97:aa:38:e3:c4:7d:3c:ac:9a:cb:a7:39:9a:5b:
35:bf:0a:13:26:95:82:a4:f6:b4:1e:8f:29:a8:f7:
38:51:b0:b8:92:10:5d:e3:48:04:ac:d3:59:a8:6f:
d5:e3:2b:00:32:9d:2d:ea:3b:a5:fb:ae:ac:ca:25:
35:ed:f5:8c:54:28:da:c9:62:2f:e3:f9:c5:48:bd:
d4:92:39:d0:9d:b0:94:80:c9:ec:ee:f7:c9:86:38:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:80:34:AC:6A:4B:84:73:5C:BB:B3:AF:AA:6F:B4:7D:D4:14:2E:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BFF2E2CF44B11EF9D904D95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.169.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:36:e9:4d:29:12:d7:c7:75:f7:7b:c5:88:53:2c:26:43:b1:
91:f6:fe:93:ba:29:70:28:b7:2b:6d:45:f6:c7:4d:cb:95:85:
27:a4:b0:3e:44:46:14:1e:02:ec:73:19:89:c8:82:29:df:5c:
f1:e1:0c:2f:9f:7f:d6:d6:ed:ff:1f:5d:bf:0b:fc:d3:93:77:
6c:99:75:a5:1c:a4:5b:6f:df:ba:29:44:cd:21:52:39:96:d6:
f3:82:9a:b5:20:2f:f3:83:f7:d6:03:8d:76:30:79:69:ca:17:
15:fd:7a:fd:6a:11:ee:52:2a:b7:ab:36:97:88:10:bd:b0:07:
65:48:46:7b:54:a3:22:91:db:88:7b:aa:85:54:7f:dd:65:0d:
56:fb:63:41:71:6e:9b:14:1b:63:cf:d8:25:11:eb:bf:80:9a:
6b:b0:5f:e1:fc:b9:47:d0:91:5d:d4:0b:be:84:05:43:65:4c:
c1:d1:1a:7f:f5:56:39:c8:7e:fc:3b:77:03:83:51:6c:b5:4c:
46:d0:49:41:cb:e9:eb:ea:42:bc:c8:dc:c9:7f:3c:8a:c7:49:
07:dc:dd:10:a0:77:4d:ae:c4:55:e0:9d:a8:ea:42:8b:f0:82:
15:5b:67:48:a6:82:27:61:49:b9:e8:6c:1f:85:cc:8d:14:c7:
f7:2d:05:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:38 2025 by rpki-client