Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FD0E8F6F44011EF97E49D49762E951A.roa
File: 6FD0E8F6F44011EF97E49D49762E951A.roa (raw, json)
Hash identifier: XFa0U7yKvkj5V8Itt7DrNdFMY/ZqhGnJLI9WK9kd1hA=
Subject key identifier: FA:E3:1E:87:BA:62:D1:7E:A8:CE:44:74:9C:FB:FA:65:BE:4E:40:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0132C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FD0E8F6F44011EF97E49D49762E951A.roa
Signing time: Wed 26 Feb 2025 12:51:46 +0000
ROA not before: Wed 26 Feb 2025 12:51:43 +0000
ROA not after: Thu 19 Feb 2026 12:51:43 +0000
asID: 984
IP address blocks: 156.245.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78529 (0x132c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:51:43 2025 GMT
Not After : Feb 19 12:51:43 2026 GMT
Subject: CN=67bf0e62-6e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:92:c8:88:86:63:22:8b:20:8b:53:83:e2:
d2:57:a0:f4:d1:d2:bb:49:34:21:06:a8:5d:14:9e:
71:47:88:ca:d3:e9:aa:a0:95:04:7d:26:8a:7e:fa:
78:2e:77:db:9c:67:e1:41:3c:81:7d:48:07:2e:5b:
3f:92:31:e6:f9:2f:bc:4c:63:e5:40:b3:7c:b0:9a:
01:47:81:89:d9:26:4d:67:91:54:22:c4:d8:6c:9b:
64:17:27:55:27:3b:4e:76:23:60:fa:f2:2a:b2:57:
f2:54:d1:08:90:47:cf:d2:3d:f4:1e:2e:96:1a:53:
b7:c8:e5:e3:aa:35:7a:19:9f:d0:80:aa:8b:04:92:
00:08:79:82:7a:da:f3:b4:2e:6b:7a:1a:53:d9:e6:
3b:1d:14:ac:ab:37:c1:6a:8b:d1:80:a9:bc:47:13:
80:3c:72:ef:f4:af:c5:a8:43:cb:ed:8b:f4:e6:f7:
3a:38:35:17:aa:95:be:4c:1c:65:1c:b1:4b:a2:8d:
67:06:5c:60:df:cc:4d:04:b4:3b:1c:e5:45:fc:4a:
ae:74:1c:cb:91:5b:94:57:1a:67:c1:6b:2e:a0:39:
e6:d3:14:94:af:98:a3:2a:8f:f5:d3:c4:16:1d:d0:
f8:86:69:47:24:ee:29:41:36:70:1b:5a:7a:5d:bb:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E3:1E:87:BA:62:D1:7E:A8:CE:44:74:9C:FB:FA:65:BE:4E:40:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FD0E8F6F44011EF97E49D49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.230.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:45:6f:30:82:da:35:93:0b:85:9b:da:43:e6:7d:ab:3f:87:
a8:83:2e:66:87:2c:b1:e9:df:35:00:66:fc:09:42:57:dc:a8:
51:a7:42:7f:b6:87:9a:18:40:2a:74:e6:02:f4:77:4c:58:41:
f3:45:d8:d9:63:d5:81:ef:cd:0c:0b:88:63:a6:63:12:83:73:
ce:07:ca:25:0c:da:c6:59:02:71:40:1d:11:fb:2a:82:20:63:
b9:86:33:7f:d4:1e:8f:39:f1:37:3d:5f:d3:3c:fa:c5:60:28:
73:a3:bd:89:14:21:2e:05:96:e8:fd:e2:b7:6d:89:8b:70:c9:
c4:f0:63:3b:5d:fa:80:0a:06:a9:f2:60:38:5c:02:43:b6:84:
cd:cb:83:19:73:d7:c9:a1:6e:c0:0a:e6:a7:68:9e:34:0e:44:
9f:9d:e3:6d:ff:67:ef:4c:7e:e8:a3:48:a9:42:3c:82:c5:3f:
5d:ac:06:65:a3:7f:cd:9f:2e:69:e3:5a:d4:11:87:0c:a4:b7:
8b:42:c1:eb:45:8a:dd:c0:03:36:b2:82:c3:e8:3e:ae:17:8a:
99:75:cb:a3:ac:00:64:64:22:86:1c:5b:7b:16:21:01:26:7f:
c9:e8:32:d1:12:c8:33:e2:c5:b7:e1:1a:da:61:1d:cc:f7:d9:
42:f3:50:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:04 2025 by rpki-client