Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85234C76F44A11EFBA4C6A90762E951A.roa
File: 85234C76F44A11EFBA4C6A90762E951A.roa (raw, json)
Hash identifier: aaUAjYVKeSMeqDowkKdRKfwWdptw+mAReYT3nZzkPGY=
Subject key identifier: 6B:4E:FD:DD:05:17:91:2A:06:6E:B5:56:3C:C2:AA:5C:BE:BC:91:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013388
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85234C76F44A11EFBA4C6A90762E951A.roa
Signing time: Wed 26 Feb 2025 14:03:57 +0000
ROA not before: Wed 26 Feb 2025 14:03:53 +0000
ROA not after: Thu 19 Feb 2026 14:03:53 +0000
asID: 984
IP address blocks: 156.252.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78728 (0x13388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:03:53 2025 GMT
Not After : Feb 19 14:03:53 2026 GMT
Subject: CN=67bf1f4d-d477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:fb:ee:64:80:9d:67:80:94:27:22:61:db:
26:d8:68:2d:fd:d1:4a:c4:fd:b2:ca:01:15:78:f4:
cf:18:e6:ea:3e:d4:eb:96:97:c3:9a:71:23:3d:e3:
0c:ac:d8:25:ff:44:1a:7a:c1:b4:e4:39:c4:27:ba:
ae:de:bd:41:56:ce:b0:cc:f6:3f:df:ad:2b:90:65:
25:f8:86:58:e7:1a:be:c5:54:f6:ff:ac:c6:dd:f2:
15:ef:a3:ba:82:f4:db:f1:7b:93:9c:65:e5:7b:c1:
41:7d:23:3b:64:31:5f:e9:e5:5f:d8:87:12:48:65:
23:82:5e:71:e6:83:11:70:36:a0:86:a0:4c:e7:da:
14:9e:b1:5f:3a:23:8f:1f:2e:bb:5e:99:de:eb:14:
27:5a:d5:0c:09:a7:c0:64:84:69:00:81:33:06:bb:
01:7e:3c:6a:de:47:22:00:7d:46:4e:d6:b2:87:37:
c0:53:40:b9:a3:c3:09:50:f1:c7:af:2c:d7:84:2e:
c1:ce:4c:87:40:4a:0b:fe:af:fc:fd:91:f4:1a:65:
02:c6:2a:7d:40:fe:64:e7:d6:8d:2e:13:4c:ee:16:
3d:5e:25:f4:11:d8:73:87:26:77:dc:bf:93:56:e2:
c3:fc:bf:a0:1a:33:54:16:aa:da:f6:6a:58:ea:98:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4E:FD:DD:05:17:91:2A:06:6E:B5:56:3C:C2:AA:5C:BE:BC:91:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85234C76F44A11EFBA4C6A90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.183.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2e:ba:c9:8e:d7:77:74:d1:41:55:52:81:ae:a8:bd:bb:ac:
0c:7d:13:8d:db:e5:3a:0b:dc:3a:c3:68:a5:03:00:02:81:de:
fc:29:b4:1f:a3:0f:a0:33:d4:a0:23:bb:20:4f:d0:14:62:8e:
c8:d6:3c:7d:88:07:6e:45:35:63:03:61:71:65:0c:11:ad:f6:
2b:04:ab:72:04:17:bd:49:e5:d4:d8:bd:3f:95:eb:1e:52:33:
78:87:09:6f:82:92:d0:f6:db:c8:c6:2d:01:d3:75:3d:47:c7:
ed:20:79:2c:b3:d7:83:f4:83:52:c4:de:d3:49:4f:64:2f:b7:
3a:b6:8a:dd:93:52:93:76:73:b5:2f:29:7c:ba:03:25:6e:8e:
8d:a5:ab:ee:0d:ff:35:5e:cf:52:cc:75:28:73:77:9e:7a:85:
56:31:f5:56:9d:95:9e:78:92:dc:bb:78:e5:df:c6:e0:bb:87:
e2:5c:50:b6:e4:e8:9d:d7:b7:7d:46:70:67:27:6a:72:33:f3:
f0:ed:41:8a:2b:4d:23:81:06:46:48:e2:52:0b:06:d9:41:cf:
cd:b0:bb:fd:eb:a7:19:d1:dd:0b:84:cc:0a:ba:f6:60:e5:8c:
f6:f7:5a:77:93:5b:53:33:0c:5f:86:b5:d9:55:c1:bc:7d:b5:
59:8b:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:25 2025 by rpki-client