Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8090F530F46511EF92300D4E762E951A.roa
File: 8090F530F46511EF92300D4E762E951A.roa (raw, json)
Hash identifier: c1sbAp/U0Wk7g3BRzv9diYEFig4ys0QVW38qtmMaieo=
Subject key identifier: 52:08:C2:B3:3F:21:EC:DB:C2:83:57:FD:DE:AB:12:B2:FC:75:21:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013575
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8090F530F46511EF92300D4E762E951A.roa
Signing time: Wed 26 Feb 2025 17:17:06 +0000
ROA not before: Wed 26 Feb 2025 17:17:02 +0000
ROA not after: Sat 19 Feb 2028 17:17:02 +0000
asID: 17561
IP address blocks: 156.250.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79221 (0x13575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:17:02 2025 GMT
Not After : Feb 19 17:17:02 2028 GMT
Subject: CN=67bf4c92-8477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:4a:71:7f:93:73:b8:82:75:b2:41:45:fb:
00:ca:39:ec:f8:75:48:dc:c7:f5:e8:0b:72:4d:dd:
48:f4:e3:c5:bb:e3:82:00:9c:93:9d:67:58:60:56:
12:05:d9:8c:d6:90:ca:10:ee:98:46:97:b9:4b:2b:
81:b4:67:cd:2a:2b:93:f0:1b:44:20:06:39:8d:7e:
58:37:bc:8e:a1:2f:7f:3d:14:2a:68:4e:ef:fc:32:
65:86:1f:85:59:67:a3:34:2d:d0:d2:d6:83:10:62:
52:cd:72:de:31:dc:1f:63:4d:bd:1e:a7:eb:c6:ba:
f8:ad:2e:ec:1c:0e:44:df:d3:82:25:bf:c7:6e:2d:
a5:cb:fa:d3:44:9e:0e:75:0e:58:40:70:72:aa:db:
ea:22:c4:ff:01:4d:74:39:37:af:34:4d:47:23:95:
0c:53:20:2d:df:4c:a6:c6:33:99:bf:d6:25:64:04:
a4:d5:04:dd:c6:60:d8:e2:0c:cf:ea:6d:32:70:73:
e6:18:58:9c:a1:cb:84:dd:38:f8:06:f5:c5:fa:f5:
44:b6:7d:84:8f:da:d4:3b:c3:7d:60:4e:4a:6c:02:
95:6e:4a:69:0a:b3:ef:f4:c6:4b:85:c4:c3:21:90:
55:31:90:58:fd:7d:03:8e:c0:9e:a3:64:69:f2:fa:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:08:C2:B3:3F:21:EC:DB:C2:83:57:FD:DE:AB:12:B2:FC:75:21:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8090F530F46511EF92300D4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.58.0/24
Signature Algorithm: sha256WithRSAEncryption
80:34:9f:dd:c8:c5:8e:60:f2:21:61:c4:57:b4:b6:74:93:67:
95:14:6a:b1:29:4d:5b:3c:f1:f1:9a:5e:69:9a:7c:75:02:cd:
3a:05:19:a1:fd:a8:5f:ef:60:a4:da:e1:a1:7c:e1:c0:e2:33:
28:b2:cc:c4:2e:3a:a3:f6:57:6d:9c:34:50:c0:cd:28:8d:3b:
8f:f2:b0:bd:e4:d7:f7:5a:68:8c:d2:7f:d8:3d:79:78:2b:4d:
3e:67:da:7b:40:9f:32:39:95:bc:7f:10:6f:dd:b2:2e:1b:54:
f2:d0:65:52:eb:53:b2:c3:66:db:c6:0d:8e:ac:4d:d0:bd:aa:
11:63:bf:d5:4a:5a:9b:41:c0:32:73:9a:e2:42:82:a8:75:0e:
a9:98:e5:2c:97:98:6f:1e:e6:d3:0b:08:09:c7:1d:e4:59:53:
33:7b:7a:66:a7:45:67:87:5a:0f:14:d4:b8:b8:ea:60:6e:97:
e1:c7:09:03:09:b4:3f:d2:7e:8e:3b:6b:e3:0f:8b:3f:8f:b6:
d2:1a:bf:67:21:a0:0e:d8:52:08:5c:40:2a:96:37:2b:b4:61:
44:f8:ce:18:dc:87:79:6f:66:b1:0d:af:a6:e9:e1:a1:e6:db:
5e:e1:9c:c4:6d:05:d7:30:c0:84:80:c1:5e:4b:19:fd:02:73:
a2:3c:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:36 2025 by rpki-client