Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64F6A7EEF8CE11EF9A63BA74762E951A.roa
File: 64F6A7EEF8CE11EF9A63BA74762E951A.roa (raw, json)
Hash identifier: 7oo7NuMzQj9iMh0Hh/ud1uMOqZmPoyvTVxK58+StvDM=
Subject key identifier: FC:98:CA:64:2D:97:3E:56:E4:21:6B:8A:0B:A0:93:59:12:55:80:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64F6A7EEF8CE11EF9A63BA74762E951A.roa
Signing time: Tue 04 Mar 2025 07:58:01 +0000
ROA not before: Tue 04 Mar 2025 07:57:57 +0000
ROA not after: Sun 11 May 2025 07:57:57 +0000
asID: 3561
IP address blocks: 156.248.88.0/22 maxlen: 24
156.255.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82635 (0x142cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 07:57:57 2025 GMT
Not After : May 11 07:57:57 2025 GMT
Subject: CN=67c6b289-cf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:8f:e4:9d:1c:7d:e5:23:a8:f3:bc:31:4d:
86:1f:e4:f6:cf:a1:c9:7c:30:a1:40:50:94:9b:a1:
a6:4e:97:3b:2b:29:e0:b1:24:1a:6a:66:d7:3d:cc:
87:b2:95:c9:57:01:2f:7d:5a:38:fe:ef:99:dd:bc:
13:b7:90:b8:37:2c:ea:22:44:dd:49:e4:61:73:b8:
7e:4a:9a:36:b2:3c:c2:9f:7b:06:8b:a5:84:9a:98:
09:20:be:fb:9c:4d:45:88:94:de:3f:21:be:a6:64:
69:57:ba:6d:8d:4c:e9:f7:b9:eb:b4:18:74:31:3c:
fe:1c:40:74:d7:32:a2:a6:13:cb:12:90:44:6c:95:
64:2a:56:8a:b5:c8:5b:9d:25:a0:75:dd:01:eb:f3:
99:a7:a5:cb:bf:8c:bf:73:67:8c:e1:64:07:e3:0d:
ce:8d:e7:51:35:d1:06:10:af:86:ac:00:e9:e5:e7:
d4:f7:c8:74:e2:3c:f9:b6:9b:68:f2:b8:62:d9:b0:
6f:46:ec:88:3e:9c:f3:0b:95:3a:8f:50:5b:0f:c9:
25:41:72:b7:d8:48:61:3b:3e:3e:fd:d1:ea:34:29:
89:37:5f:4e:d1:60:e9:78:a5:30:7f:ca:9f:ca:7c:
c8:2d:0d:25:dc:6e:34:2d:8a:35:1b:a4:fe:53:0b:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:CA:64:2D:97:3E:56:E4:21:6B:8A:0B:A0:93:59:12:55:80:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64F6A7EEF8CE11EF9A63BA74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.88.0/22
156.255.4.0/22
Signature Algorithm: sha256WithRSAEncryption
63:5b:92:cd:d4:c4:a3:11:40:0c:e1:d3:24:e7:c3:90:5d:f6:
e3:dd:9b:9c:51:46:9a:32:f9:b6:20:e7:c0:46:02:b0:84:3c:
df:50:7b:37:e7:63:f3:36:93:c0:57:cb:1a:72:87:01:7a:95:
1c:a4:fe:53:f6:03:51:d1:4d:29:50:1a:73:97:28:d0:1c:2d:
61:f1:89:75:7d:99:e1:ea:1e:87:fe:4e:c8:fc:e7:e9:ae:6a:
95:48:7e:8c:e6:8d:1a:56:7c:5c:85:bc:6b:34:7a:d2:9c:fc:
cc:53:8e:2c:21:8d:a6:49:72:7c:d2:61:6d:06:cc:e0:d3:66:
79:6d:de:ff:db:01:9b:eb:33:e4:05:58:95:30:9f:fb:a8:9a:
95:39:d5:df:f6:95:f3:ba:03:5a:a9:68:a8:11:9e:20:52:0e:
63:cb:73:6e:fb:b8:e8:44:ba:14:8d:8f:4a:10:f8:9a:0d:b8:
14:01:79:8f:9a:be:38:94:9c:f3:27:ae:4e:3f:a5:34:ac:e5:
0c:f9:2c:cb:af:e5:6d:8c:76:2d:02:c8:db:1d:c4:82:6f:d2:
50:32:a9:38:c1:aa:1a:dd:da:44:a2:03:4a:24:b8:e1:c3:fb:
2a:70:a1:0d:2d:dc:ac:b0:c2:ec:48:f9:a0:82:7c:66:5f:8f:
c4:3f:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:02 2025 by rpki-client