Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/859ADAD4F42711EFB75CC999762E951A.roa
File: 859ADAD4F42711EFB75CC999762E951A.roa (raw, json)
Hash identifier: zhxePAgtFBFAs/6D9mZtCJmO3CReIPoQMmu+ARDySok=
Subject key identifier: AF:60:DC:F0:F4:65:4C:5D:3E:4C:7D:4D:D7:15:B3:70:02:D3:DC:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/859ADAD4F42711EFB75CC999762E951A.roa
Signing time: Wed 26 Feb 2025 09:53:25 +0000
ROA not before: Wed 26 Feb 2025 09:53:22 +0000
ROA not after: Thu 19 Feb 2026 09:53:22 +0000
asID: 984
IP address blocks: 156.252.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78002 (0x130b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:53:22 2025 GMT
Not After : Feb 19 09:53:22 2026 GMT
Subject: CN=67bee495-ddfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e3:e6:50:cf:8f:70:eb:f1:05:8e:6c:12:23:
f6:d1:41:8b:08:cd:61:6b:94:46:21:36:6a:11:ac:
e7:fd:f4:61:9d:5d:05:ff:64:18:c2:09:23:f0:05:
95:f1:d1:1f:08:b0:0d:0d:92:f4:b7:bc:17:08:ae:
3b:3d:b9:8d:3d:72:a3:c4:52:3e:ed:ec:1e:9b:d5:
66:95:0b:14:93:5a:db:aa:b3:0d:c8:61:34:12:2b:
1a:a7:fc:c5:0f:a7:46:94:8c:84:fb:0a:29:2d:0f:
d2:64:8a:35:1d:d5:0b:ae:10:92:16:4b:43:4f:f1:
99:00:2b:13:cb:0b:d4:a4:45:a4:b9:d2:99:ad:16:
7e:bb:c4:e8:6c:24:32:57:4e:7c:23:58:47:c4:89:
cb:b4:78:af:c2:6d:b4:2a:f9:72:7b:ce:34:35:3d:
6a:b2:e6:ef:13:48:4f:d0:61:2c:90:19:bb:59:4f:
46:61:9d:5c:fb:e0:5d:1f:8e:46:31:13:cc:7a:80:
c2:ab:f5:f6:fe:a3:3b:8e:f4:e5:95:a1:8c:b0:84:
5a:5a:58:35:70:17:65:07:2b:d1:49:09:2a:75:7a:
ab:43:8c:ff:36:97:4b:6d:7c:92:8a:98:7b:e6:2d:
27:b9:63:46:91:af:52:ee:4c:73:65:4e:37:45:60:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:DC:F0:F4:65:4C:5D:3E:4C:7D:4D:D7:15:B3:70:02:D3:DC:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/859ADAD4F42711EFB75CC999762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.72.0/24
Signature Algorithm: sha256WithRSAEncryption
06:71:1f:a0:b1:7b:39:e2:43:01:45:c6:02:1f:ad:50:9c:9f:
58:39:e0:e6:bc:b0:67:79:67:45:ab:8f:ac:f8:6c:c8:64:03:
7e:a5:72:34:e7:44:c6:cf:93:11:b2:fc:79:44:ee:92:c8:d0:
4c:19:1a:11:e6:c8:ff:82:ba:08:4d:40:f0:b4:30:1a:42:8e:
59:cb:ba:e1:c7:18:c8:b3:05:b3:12:75:84:07:8e:3c:33:b3:
fb:bd:44:c4:b2:e3:ce:68:ca:09:2f:66:39:8b:c3:db:57:c5:
04:ce:b4:d5:49:ca:8e:d9:0f:9c:a6:9c:2d:60:39:53:fe:6f:
1e:18:4b:8c:a0:3f:54:79:aa:ab:4e:65:53:65:cd:99:d2:ce:
e3:88:17:8b:db:60:fe:fb:a4:b0:f5:6a:98:67:55:ec:e1:1a:
ab:51:ea:00:86:3e:6e:be:35:13:07:7e:79:7e:74:84:b2:de:
73:c3:56:7b:70:1c:56:79:0a:63:1c:30:37:47:18:74:2d:f9:
ea:c9:c2:29:e7:cd:60:d5:b1:4d:f8:2f:5b:74:35:01:6d:4a:
fc:07:4d:1d:cd:22:55:a5:84:41:e1:29:f6:96:88:55:31:9b:
81:d8:51:81:7b:2f:29:f5:98:65:25:01:71:e2:b5:3d:82:26:
6d:42:16:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:57 2025 by rpki-client