Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B7011D4F44C11EFA536D49E762E951A.roa
File: 8B7011D4F44C11EFA536D49E762E951A.roa (raw, json)
Hash identifier: T7Tn0vOkxVeV6/EmzVGFrBajwFf967TdK49TXRSVdfs=
Subject key identifier: DD:44:59:F5:96:CD:98:5C:4A:DF:CA:E3:41:50:4D:C7:CB:B6:26:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0133AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B7011D4F44C11EFA536D49E762E951A.roa
Signing time: Wed 26 Feb 2025 14:18:27 +0000
ROA not before: Wed 26 Feb 2025 14:18:23 +0000
ROA not after: Thu 19 Feb 2026 14:18:23 +0000
asID: 984
IP address blocks: 156.231.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78763 (0x133ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:18:23 2025 GMT
Not After : Feb 19 14:18:23 2026 GMT
Subject: CN=67bf22b2-de5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:59:e0:7e:b1:6d:2b:ff:e9:86:50:2d:48:
3a:ed:9a:a6:ca:33:70:b6:ee:ce:4a:79:96:d8:40:
2c:fd:23:d2:b8:7e:76:45:a1:88:e7:92:02:72:10:
08:4f:a8:1d:dc:22:7a:1c:c9:5c:f6:2c:70:38:ff:
3a:fd:b9:2a:33:85:5c:b5:80:cf:7a:ac:4a:03:b4:
54:c4:d7:6e:51:52:a7:2a:4e:79:52:30:1d:83:85:
c0:bf:11:a2:cc:8a:1e:d5:9c:24:0b:b6:57:1b:c4:
70:e9:95:c1:9f:df:b7:0c:ae:c6:8c:e6:51:d4:d6:
c5:0b:c9:fd:5e:93:07:f4:25:17:4f:84:41:6c:44:
6f:8f:34:f9:a4:48:8a:af:50:b1:2c:14:93:e3:f7:
ab:f3:cc:98:58:69:76:3a:9a:4b:2b:b9:cf:30:80:
b8:cb:e2:1c:25:cd:73:c1:f2:89:ed:b8:e5:b5:71:
c8:ac:8c:89:42:85:0d:48:f6:13:15:27:8f:50:2c:
58:b6:a0:e3:92:a0:6f:e6:a0:a7:76:ce:42:b3:ad:
e9:50:e6:5e:b2:eb:14:1b:73:d3:27:da:63:eb:f0:
a3:af:a7:21:d9:49:e2:bc:92:6e:0a:07:08:93:c0:
d2:af:c1:de:f7:87:39:4a:e9:47:12:f7:97:60:5f:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:44:59:F5:96:CD:98:5C:4A:DF:CA:E3:41:50:4D:C7:CB:B6:26:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B7011D4F44C11EFA536D49E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.175.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c3:f3:89:62:b0:8e:c8:fa:f0:5b:7e:48:a0:15:05:16:e0:
c6:b9:7f:28:fd:62:51:87:0d:ce:e9:2c:5c:60:83:0c:aa:ad:
39:89:18:58:37:2f:91:f8:81:17:8a:fd:c9:5b:5d:9b:92:2c:
4a:8a:13:02:10:dc:92:70:5b:d8:2c:00:b8:e9:98:62:7b:96:
85:9e:0c:2b:bc:b0:a4:f5:69:fd:dd:b1:6e:d2:e1:28:40:78:
d4:fe:b1:58:e2:01:14:b7:2e:cb:fd:21:ad:93:aa:2f:6b:e0:
7a:7e:d1:5a:d8:6e:f1:78:b8:96:8b:5f:bc:82:6d:6e:1e:80:
0b:77:9a:8f:1e:f6:9b:bf:2b:5d:da:5f:68:44:cb:e0:22:49:
de:34:3a:00:e3:4f:cc:d5:fd:af:58:09:b8:e4:2f:51:47:d2:
15:dc:1f:07:dc:74:be:82:7d:1a:ba:3a:28:db:d3:91:dd:e0:
85:93:e9:06:4b:ab:4a:75:99:a2:e6:62:63:9b:a5:7c:cc:43:
2c:96:a3:9c:98:7f:01:b0:f1:f0:6d:4d:c1:82:f2:66:8b:01:
e1:9a:bf:d2:9b:d4:ab:77:b8:54:27:38:bf:1d:49:d1:f5:4a:
49:22:81:80:39:40:3b:cc:35:99:77:cd:60:19:bb:e1:03:1a:
94:78:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:40 2025 by rpki-client