Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/775AEF96F46211EF9B5DAEB5762E951A.roa
File: 775AEF96F46211EF9B5DAEB5762E951A.roa (raw, json)
Hash identifier: RgtktkEwby1Rh6Lke8X9Yzm2lSE3462CkUJhnpehwWk=
Subject key identifier: 06:5B:90:FC:1F:0E:E9:35:20:28:C1:CB:2B:21:9D:A5:2B:4B:57:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013539
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/775AEF96F46211EF9B5DAEB5762E951A.roa
Signing time: Wed 26 Feb 2025 16:55:22 +0000
ROA not before: Wed 26 Feb 2025 16:55:18 +0000
ROA not after: Thu 19 Feb 2026 16:55:18 +0000
asID: 984
IP address blocks: 156.245.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79161 (0x13539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:55:18 2025 GMT
Not After : Feb 19 16:55:18 2026 GMT
Subject: CN=67bf477a-f670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:72:a4:4b:a9:0e:02:2d:5e:9f:98:cb:e3:
1f:c8:0d:ac:75:75:4a:db:8c:67:24:b2:73:50:13:
6b:5b:25:a0:ac:e3:31:98:ef:ab:e3:44:d3:40:6c:
a5:6c:5e:64:9e:23:ee:3e:6b:01:ef:bc:96:80:29:
52:7f:9b:f5:63:2f:20:98:78:bc:4f:1c:92:73:7e:
d6:92:45:d7:4f:bd:bb:77:c3:f1:7b:3d:f6:43:15:
3b:01:66:7d:a4:15:a0:13:05:41:54:06:db:0c:d6:
2d:a2:1c:22:56:73:cf:c9:7b:2c:f2:ff:20:6b:9b:
9c:d9:ef:ef:b6:d8:7a:4b:de:71:d1:03:a0:fd:d8:
63:f1:6d:cd:d5:aa:41:2b:f1:5d:57:b4:8a:e4:92:
47:9d:6a:1c:ce:97:10:52:fb:a5:1f:ba:3b:b9:3d:
0d:58:ed:b2:77:ec:2c:82:53:23:f7:87:4a:74:c8:
c4:9a:41:5e:48:b6:f0:df:1b:a0:3a:19:60:7f:80:
4f:c2:7a:d4:8f:a9:a2:29:e7:d4:1a:5e:38:6d:a3:
b2:f2:bf:4c:8f:0a:ef:b9:e7:66:0c:57:33:c0:5e:
0b:31:e1:d2:b2:a7:ed:e7:b1:8e:f6:79:af:9f:be:
ff:3e:d0:cb:06:ad:ca:aa:02:26:71:9d:f1:5e:98:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5B:90:FC:1F:0E:E9:35:20:28:C1:CB:2B:21:9D:A5:2B:4B:57:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/775AEF96F46211EF9B5DAEB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:8e:00:a5:8a:ef:64:08:e9:b7:34:fd:b8:ad:3c:4a:fb:ae:
c6:57:99:0f:76:a9:be:59:94:6d:73:17:78:7e:f9:0f:60:b9:
93:09:d4:f6:cd:5c:18:5c:f0:8a:f7:4d:88:c1:8b:41:36:c2:
c6:ba:35:66:12:8d:25:72:3c:24:8f:ef:ee:85:ba:eb:b7:98:
8e:a6:63:0b:a4:43:9a:17:c5:96:82:79:8e:04:b2:d3:51:25:
ff:5c:9e:6d:69:9c:84:dd:a4:4c:cb:b4:d0:9b:ec:54:a0:b9:
c4:5b:24:cc:a4:5a:e8:6a:22:d0:3a:74:5c:99:e4:45:e9:9e:
48:20:3b:11:36:60:90:9c:62:fc:c7:f8:a0:75:8e:26:45:60:
1c:ed:b8:7d:7b:01:30:8f:bd:62:16:de:9d:61:58:17:bb:c3:
7a:fd:69:55:95:d4:47:e0:6f:e8:c6:4c:4c:1b:09:16:66:79:
cc:ed:ad:c0:de:f9:00:9f:b2:f9:86:00:02:91:8e:9a:65:fa:
93:4a:3c:c9:c6:fc:e6:fa:4c:15:70:c9:6f:52:33:24:0e:09:
6c:63:d6:90:8f:e2:9b:bf:a1:45:fc:c9:3d:f7:aa:a8:2a:ac:
44:8e:83:19:18:e1:2b:a3:6e:62:9b:49:04:f7:90:18:82:bd:
35:2b:bc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:06 2025 by rpki-client