Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64AA6276F5DB11EF949FF65D762E951A.roa
File: 64AA6276F5DB11EF949FF65D762E951A.roa (raw, json)
Hash identifier: PUSo+/ZqyZbFBjSx6ypTWMu1sYQ3OiiYC3GMrlQzJdk=
Subject key identifier: 7B:77:15:78:F5:6E:3E:2A:13:1B:02:18:D0:CB:87:A7:C4:BA:40:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64AA6276F5DB11EF949FF65D762E951A.roa
Signing time: Fri 28 Feb 2025 13:53:31 +0000
ROA not before: Fri 28 Feb 2025 13:53:27 +0000
ROA not after: Sun 13 Apr 2025 13:53:27 +0000
asID: 138915
IP address blocks: 156.244.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81418 (0x13e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:53:27 2025 GMT
Not After : Apr 13 13:53:27 2025 GMT
Subject: CN=67c1bfdb-04c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:3e:cb:e7:30:8a:0c:8f:ed:d0:2a:b6:10:
b0:e1:5e:8f:9a:d3:05:c9:6c:25:cf:cc:88:19:27:
be:02:ac:86:ce:58:3d:c0:a2:1f:b2:d9:83:0d:a5:
3b:65:5d:e8:1e:f8:57:c7:3e:0f:e1:39:bb:ed:f7:
03:ac:92:ef:18:3d:40:87:fc:e5:11:be:87:44:21:
d9:a7:bd:9d:4a:12:d9:7c:c3:73:df:b3:d6:b4:2e:
9c:0b:e9:a9:6c:7b:62:3a:6b:0f:2f:07:dd:29:09:
c9:a2:70:28:74:7d:51:d2:17:fd:45:e7:58:df:d7:
98:4d:27:b0:79:ff:f6:57:39:c1:b4:aa:26:98:22:
cf:87:6b:cb:84:dd:b9:fb:0e:63:ba:58:ab:b7:97:
2f:6c:53:28:f4:56:5b:67:34:ee:a1:eb:f6:d7:fb:
92:ed:9f:c3:fe:e3:17:92:64:92:de:cb:c6:f4:ca:
96:0b:57:11:bf:c0:70:dd:99:e3:c5:4a:7d:16:88:
9e:7d:a3:ba:32:b0:19:ac:e8:c6:99:f8:ad:5a:f4:
3c:f5:a9:24:37:1a:72:59:8d:1f:2c:28:f6:d9:1f:
50:71:dc:70:9f:fa:4a:29:85:fb:61:51:2c:97:9e:
49:b6:40:91:b8:0f:07:e5:8c:1a:2c:40:a8:6f:fc:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:77:15:78:F5:6E:3E:2A:13:1B:02:18:D0:CB:87:A7:C4:BA:40:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64AA6276F5DB11EF949FF65D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.40.0/24
Signature Algorithm: sha256WithRSAEncryption
14:aa:c4:cb:8c:c3:f0:0d:02:00:e1:de:d7:57:d7:1f:43:d5:
5b:83:3a:30:6f:a7:0c:49:90:b2:d3:f4:0e:6e:0b:42:b2:e0:
78:fb:41:6c:15:3f:06:56:b0:03:1b:ee:a0:6d:13:b9:b2:72:
61:47:d0:41:e1:af:7a:1a:1d:58:a6:14:f6:95:24:c4:0a:2a:
28:ce:a6:bc:01:23:2c:ab:c4:59:43:bd:e3:b2:7d:2d:96:45:
18:9f:26:66:fd:97:bc:95:cf:32:44:24:d1:fc:7b:44:6d:7a:
f4:a7:0d:44:83:20:73:19:11:85:ea:e0:64:06:2c:2d:b1:a2:
74:81:3a:6c:66:a3:fa:ac:2a:52:35:a0:88:7a:ec:d8:99:59:
0e:4b:ab:c1:b7:e6:9b:9d:b5:d7:b0:90:60:59:b2:a6:bd:06:
99:54:76:7a:0b:59:c3:9d:2f:22:5a:9e:c2:54:a4:9a:48:af:
32:e4:4e:12:9f:05:3c:1a:3d:4d:22:4c:8b:1a:72:d8:73:e3:
1a:c4:a2:9f:0e:fe:4f:8e:9a:41:f9:23:71:f8:15:8d:1e:d0:
07:18:9d:b4:37:f7:97:07:b0:75:d2:35:8f:97:b2:1f:77:84:
85:8e:6c:e0:e9:11:01:02:ac:58:f1:24:8d:81:26:76:58:a8:
48:98:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:55 2025 by rpki-client