Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F941350F4B211EF86D06366762E951A.roa
File: 6F941350F4B211EF86D06366762E951A.roa (raw, json)
Hash identifier: +3pZ67GFI+qY2qAkYRi2OK1hY1mTn3LA0r66JWNxyz4=
Subject key identifier: 33:27:54:E0:2E:B3:64:DD:81:9C:C4:DF:D3:3E:AF:48:BF:0D:93:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F941350F4B211EF86D06366762E951A.roa
Signing time: Thu 27 Feb 2025 02:27:49 +0000
ROA not before: Thu 27 Feb 2025 02:27:44 +0000
ROA not after: Thu 19 Feb 2026 02:27:44 +0000
asID: 984
IP address blocks: 156.247.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80061 (0x138bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 02:27:44 2025 GMT
Not After : Feb 19 02:27:44 2026 GMT
Subject: CN=67bfcda4-4251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:5a:c7:c2:22:e0:23:90:0e:0c:d5:96:be:
c1:0a:4e:93:e3:93:b5:49:2d:02:22:22:a1:1c:d4:
2b:f1:d6:41:f4:e0:1a:f6:48:6c:a5:3d:b7:37:f5:
99:3d:fb:d7:8f:67:0d:7d:89:79:6f:d1:66:05:db:
22:e7:77:e7:33:d2:32:95:8d:a4:4d:34:e3:61:aa:
7c:bf:ed:45:0e:9d:02:45:af:2c:a0:f4:4f:3f:5f:
02:59:f7:69:bd:b8:89:e2:50:7f:f1:db:ab:2d:7b:
6d:2a:47:a6:0b:04:cf:5d:31:56:ad:2f:e6:df:1b:
02:36:b2:07:95:76:4f:9b:61:8e:d9:15:e7:4c:18:
4e:5f:7f:b2:12:10:83:a6:1d:23:0f:4e:73:e4:67:
d4:23:76:6c:34:c3:92:21:fa:af:7f:39:94:87:8c:
01:b8:17:97:47:f0:84:e1:31:9c:92:13:c9:eb:8d:
17:cb:64:5c:0b:04:ec:e6:34:93:51:be:1c:05:90:
be:b4:5d:f1:73:30:74:51:85:04:50:12:b0:1b:0c:
cf:9f:df:8e:76:ae:f8:b8:fc:33:51:f7:0f:f9:bf:
1f:28:ba:89:29:a5:5b:07:e4:62:5e:88:b8:13:96:
b7:3e:b3:b7:b0:87:a2:c2:f3:03:25:06:a2:e0:34:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:27:54:E0:2E:B3:64:DD:81:9C:C4:DF:D3:3E:AF:48:BF:0D:93:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F941350F4B211EF86D06366762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:0a:d6:3d:7f:e7:82:51:db:be:8e:30:7e:d8:cb:eb:d9:8d:
d1:1c:27:15:be:ca:66:fb:da:09:f1:82:d2:e0:df:01:0a:13:
0a:8b:e5:c5:67:9e:19:b1:e6:65:27:b0:3e:0e:2e:78:68:8f:
da:05:71:09:75:a1:8a:e6:93:9a:75:db:20:93:de:e3:f8:54:
4d:e3:22:b7:0a:75:34:cf:8e:b3:0c:6f:60:e8:6d:af:d5:bb:
79:13:52:c9:40:a8:49:33:0f:85:91:f2:47:9d:75:23:4e:cd:
b8:83:9c:a8:6e:87:50:a0:1d:01:a5:66:8a:91:a7:15:d8:4b:
af:f6:f4:31:63:1c:81:14:44:54:ff:ad:df:1d:04:a8:9d:5a:
bd:7e:90:ac:f0:ef:b6:31:56:e9:64:27:88:c8:1b:2b:32:d7:
dd:25:7e:dd:5c:07:fb:99:0f:f9:8e:82:d2:ca:c3:10:ec:fd:
75:03:f3:04:af:1d:3f:36:3e:93:a5:62:83:ad:1c:5e:0f:be:
b9:b2:6c:05:e5:88:dd:2b:cd:f2:1c:b3:af:5d:a0:4d:b3:18:
36:9e:17:9d:c2:3c:d4:ef:ee:35:45:33:e2:a2:0d:4a:cc:2e:
e8:32:d7:90:2d:ab:37:98:ce:3b:09:1a:29:1c:50:f6:3d:f1:
e5:ad:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:57 2025 by rpki-client