Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1ACE52088411F09177EB45762E951A.roa
File: 6E1ACE52088411F09177EB45762E951A.roa (raw, json)
Hash identifier: uFSxel8DJnM3l/X0isuk7DN9X+HyOUS7v1+X1MNs6Dg=
Subject key identifier: F4:13:CA:87:72:68:AE:CA:14:91:7F:1A:EE:1C:9C:B4:51:4B:45:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1ACE52088411F09177EB45762E951A.roa
Signing time: Mon 24 Mar 2025 07:48:52 +0000
ROA not before: Mon 24 Mar 2025 07:48:49 +0000
ROA not after: Wed 30 Apr 2025 07:48:49 +0000
asID: 61112
IP address blocks: 156.226.168.0/23 maxlen: 24
156.226.170.0/23 maxlen: 24
156.226.172.0/23 maxlen: 24
156.226.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83922 (0x147d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 24 07:48:49 2025 GMT
Not After : Apr 30 07:48:49 2025 GMT
Subject: CN=67e10e64-d08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:20:48:39:7b:dc:36:fe:ae:a2:c9:3a:88:
62:60:5c:7b:05:03:1f:e4:52:c4:46:2c:4c:de:7a:
56:ba:fe:c5:83:9b:13:c4:3a:4f:eb:39:57:7c:a7:
96:db:ec:f5:59:78:ba:8f:ac:1a:d9:78:5d:9e:71:
30:6d:48:e2:e1:71:03:2a:e3:21:3a:d6:48:0b:ac:
8f:0e:6b:e7:66:ba:c2:0d:a2:8d:c4:24:10:45:b7:
d2:ba:12:44:84:a6:de:bd:8f:08:09:6f:94:42:6d:
a2:76:5c:b8:d4:d5:8e:59:db:9f:ff:4e:ed:3b:74:
39:01:38:71:8e:22:92:b4:02:76:65:bc:64:d6:a5:
36:4b:16:58:e4:21:4e:53:b5:01:d5:d1:20:22:05:
c3:5e:43:22:db:eb:89:ea:4f:a5:02:43:d0:79:d7:
a9:6f:0d:4b:26:7f:75:38:99:43:9b:62:fa:6b:1b:
59:3a:ab:3b:b6:a9:4d:14:d6:99:22:b0:86:db:03:
f6:69:44:ea:0e:99:77:ca:f6:a4:e9:13:ac:23:6a:
9f:c3:2d:8b:99:22:f7:64:79:a1:42:7e:93:4a:24:
ed:0d:92:23:03:53:eb:09:82:5f:12:95:5d:97:fd:
43:f7:16:7c:d7:50:b3:21:ec:8b:fc:02:60:55:11:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:13:CA:87:72:68:AE:CA:14:91:7F:1A:EE:1C:9C:B4:51:4B:45:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1ACE52088411F09177EB45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.168.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:09:e6:cd:cd:ab:7f:84:20:57:7f:96:a8:36:5b:67:14:8f:
b5:43:cf:00:bc:a3:1e:8e:e3:35:ba:28:8e:d9:91:ba:23:5a:
b2:2a:3f:5d:d2:3f:00:56:a7:5f:19:c3:8b:fb:1e:b0:4f:86:
d3:26:45:9c:63:f4:ab:91:c8:d4:e9:50:99:24:f2:82:f4:49:
c3:ca:ab:8e:eb:42:65:ca:43:67:44:b4:c5:6c:59:02:b0:6d:
f8:d7:56:63:a2:ca:6f:3f:a0:cc:0d:d1:48:81:06:13:91:f9:
fd:15:68:d1:0e:d7:2e:94:b0:6c:e0:b6:e4:be:2a:28:06:58:
d6:da:ff:27:c4:f4:ae:d3:9a:ac:87:c4:0f:4b:61:7b:3f:56:
a3:c3:57:41:ab:38:f0:68:22:05:83:c0:34:a0:84:6e:d7:c0:
98:06:a9:cd:48:46:11:25:18:e5:66:9d:2a:b2:48:2e:5f:f5:
a3:96:0f:95:fa:dd:12:57:e1:b8:d7:b6:fa:8e:1e:03:a9:19:
0d:8f:aa:57:64:a2:84:32:7c:6a:f0:32:19:03:49:1d:54:5e:
5d:67:ea:92:73:e2:b5:83:76:ca:f4:cd:23:77:ef:b9:6a:9e:
99:95:25:da:1e:1c:f0:cc:3f:cd:68:c8:3a:26:2a:22:84:df:
de:7c:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:53 2025 by rpki-client