Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1B619E017E11F0A573378E762E951A.roa
File: 6E1B619E017E11F0A573378E762E951A.roa (raw, json)
Hash identifier: kuET2g9a3lf1L62aEJKNyE4dqewwO300sxCUFfGKziU=
Subject key identifier: C7:97:E6:75:DC:6B:FF:B5:3F:67:67:CD:E0:D2:01:B2:65:97:D7:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014630
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1B619E017E11F0A573378E762E951A.roa
Signing time: Sat 15 Mar 2025 09:18:17 +0000
ROA not before: Sat 15 Mar 2025 09:18:13 +0000
ROA not after: Fri 11 Apr 2025 09:18:13 +0000
asID: 214967
IP address blocks: 156.229.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83504 (0x14630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 15 09:18:13 2025 GMT
Not After : Apr 11 09:18:13 2025 GMT
Subject: CN=67d545d9-5939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:1b:6b:c2:c1:22:2e:97:77:b3:51:0d:81:
91:6d:aa:32:69:59:a0:18:03:28:d4:8a:e1:35:80:
62:b6:33:16:17:7d:a1:75:81:19:d6:bf:38:52:e0:
ab:7d:df:e5:e7:7a:68:89:6f:3e:aa:2c:bd:e6:0b:
81:f5:a6:a1:d1:39:37:59:23:7d:03:e5:e2:e2:ab:
61:77:89:17:64:62:ad:2e:0e:fb:99:c6:91:fe:e7:
89:bc:99:47:21:30:57:5f:26:59:9d:65:a0:bf:4a:
de:8f:3b:13:38:f1:81:b8:c3:b9:1f:8a:b2:db:03:
8f:51:98:48:18:2b:4b:90:cf:be:b8:4b:a1:70:e1:
f0:16:7b:60:73:63:62:2a:91:38:1a:c7:e1:20:28:
7b:72:90:4a:1e:23:94:a4:fd:4b:0c:6c:8c:8b:95:
97:e0:7e:91:93:58:6a:45:dd:74:ab:12:d9:a5:b1:
fa:e0:97:60:c3:a8:17:17:a9:7c:be:4e:52:91:9e:
11:49:11:5c:32:c0:9e:3b:5f:ee:74:4f:34:3b:e3:
32:bd:7f:44:62:39:c5:bc:70:3c:ae:22:9a:03:51:
e0:4a:8a:42:c3:11:93:91:e7:5a:84:40:e2:f3:e8:
4e:16:e3:a6:a4:ac:54:5d:a7:bf:4e:61:e4:86:5c:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:97:E6:75:DC:6B:FF:B5:3F:67:67:CD:E0:D2:01:B2:65:97:D7:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E1B619E017E11F0A573378E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.54.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fa:29:8f:d7:34:65:81:9d:f2:cc:1e:d9:33:3e:a9:bc:c8:
73:17:6a:2e:a8:e0:83:9e:84:7c:ba:18:72:d8:68:d0:89:6e:
a0:26:dd:c3:f3:4e:1c:66:cd:57:66:9a:32:54:bd:be:36:94:
73:b7:0c:cc:aa:bb:a2:0a:d0:0a:1d:82:a2:56:f3:9c:e2:d3:
d7:98:ce:72:f6:32:8f:1a:95:19:ab:c4:61:86:ac:a6:5d:55:
a0:06:29:a0:f2:8f:a8:c4:a0:96:d1:1a:1b:6b:ef:1d:f3:eb:
8e:2e:92:aa:ca:b8:25:85:44:2c:2a:ba:8b:92:24:45:a5:19:
f3:1e:a3:c9:83:56:91:7e:28:ac:db:a3:44:cb:01:12:1f:4d:
0b:bb:12:df:06:f8:76:78:c8:00:0a:f9:b4:99:a4:bd:c5:a9:
bd:aa:31:bc:b7:d0:d1:f3:3f:b9:0c:fc:15:55:19:6e:e5:1e:
a2:14:58:ea:b4:46:88:cc:a2:66:be:3e:eb:07:5a:ac:3f:ae:
54:7d:bc:93:7f:0d:15:75:fa:3a:40:ca:ff:e1:99:ca:60:86:
9d:63:1f:05:6f:c1:80:c2:b2:76:87:40:4a:d8:52:a1:a7:da:
db:51:a6:7a:6b:0a:9a:80:e1:6f:05:10:28:66:b0:3d:c2:0d:
e5:84:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:39 2025 by rpki-client