Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73EB39BEF47711EFB3219148762E951A.roa
File: 73EB39BEF47711EFB3219148762E951A.roa (raw, json)
Hash identifier: niP4E2GtvBK1bQboKPwVMeLyjOe81AvtpOvmnIuPDL8=
Subject key identifier: 25:DA:CF:45:1E:06:75:E7:5A:3D:93:5D:37:BF:C1:B3:05:70:79:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013703
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73EB39BEF47711EFB3219148762E951A.roa
Signing time: Wed 26 Feb 2025 19:25:36 +0000
ROA not before: Wed 26 Feb 2025 19:25:32 +0000
ROA not after: Thu 19 Feb 2026 19:25:32 +0000
asID: 984
IP address blocks: 156.247.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79619 (0x13703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:25:32 2025 GMT
Not After : Feb 19 19:25:32 2026 GMT
Subject: CN=67bf6aaf-4305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:28:ec:65:d2:bf:e9:8b:e7:03:0d:f3:2d:
f5:3f:e1:73:ed:10:c0:c2:76:0d:8c:32:fa:e5:1c:
1c:a6:3b:9b:80:c7:c1:3d:99:56:ca:14:2c:f6:d2:
d0:b2:e3:0e:79:c4:11:72:29:1c:4f:44:a4:ff:ed:
b6:35:4c:3d:f6:01:68:d7:d2:23:db:1f:92:a4:cf:
eb:62:8e:69:b4:82:7e:eb:74:8f:66:db:72:ab:94:
43:c5:9e:7e:f2:3c:f0:b4:03:78:19:5b:3d:5f:a5:
7d:b8:0f:20:11:6a:fc:b3:fb:bf:8f:0e:95:2e:8c:
25:9b:12:59:28:66:d5:e7:1f:62:04:14:20:f8:78:
e9:b8:49:41:2f:95:2d:0e:99:e9:1d:a3:a9:41:45:
6d:3f:fe:42:9c:42:12:f5:3f:ca:87:9b:57:a9:88:
40:9f:a9:2f:ac:4a:88:88:cb:c7:2b:a0:e1:d0:27:
dc:7e:7c:18:de:a5:40:ff:85:8b:f6:6d:f5:d4:68:
9c:87:2a:1e:4a:ec:de:31:0c:0c:34:9f:20:75:d2:
41:1a:50:fb:a6:62:99:73:45:f0:93:1c:91:d7:1c:
59:ab:d8:1b:69:d7:47:b0:7f:ae:bc:fc:36:82:4e:
ab:d1:c1:31:d2:53:c1:b4:f8:d9:be:4c:a8:34:a1:
77:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DA:CF:45:1E:06:75:E7:5A:3D:93:5D:37:BF:C1:B3:05:70:79:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73EB39BEF47711EFB3219148762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.31.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:9d:b9:5d:3d:34:1f:4f:20:3a:94:a9:e6:6c:f0:f1:a5:d6:
fd:94:bf:77:61:bc:7c:94:6c:9d:1f:f4:80:fb:df:eb:62:b6:
89:5a:d7:13:7f:c4:c9:bf:92:59:a6:e3:cd:db:76:5c:5f:35:
76:89:62:b5:f9:c3:b5:2a:7e:a6:9e:0b:dc:09:6b:4a:b2:82:
69:1a:17:17:85:a2:06:bb:9b:76:cc:d8:c9:b7:70:86:8b:f4:
cd:e3:f9:7f:89:7a:e6:fa:13:ef:81:3a:a4:5d:55:06:07:f0:
f6:25:63:ae:8e:22:f8:47:c4:6a:56:3b:73:6d:ff:c1:f7:98:
64:7a:4c:50:1e:98:9b:36:a0:10:88:23:51:78:21:d8:a7:f2:
af:f1:eb:ac:f6:aa:aa:6c:de:55:5d:45:5c:09:fe:1c:8d:b8:
52:11:e2:56:e7:6b:e0:c6:6c:2c:8d:01:d4:4f:a5:d9:cf:03:
00:20:fc:8f:3b:07:61:2c:f8:30:20:db:4e:d0:53:d4:d3:bc:
cd:b6:19:51:d5:52:b6:fb:cb:7a:49:3b:9b:eb:88:20:af:5d:
b6:bc:eb:d4:fd:91:de:f2:7b:5e:6c:3a:3d:28:91:60:c0:fc:
a9:9e:80:d7:f4:f4:5b:e1:17:a1:c4:10:9b:30:a5:f0:ce:88:
ef:8d:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:26 2025 by rpki-client