Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94DB157E03A211F0A0A86850762E951A.roa
File: 94DB157E03A211F0A0A86850762E951A.roa (raw, json)
Hash identifier: NEBk4ZILjlmdrDyXOOy2J6dQsV4JENGm/xdFdoAp0aU=
Subject key identifier: 20:92:39:CF:27:94:9E:77:FB:9D:6F:7F:26:B9:1D:B2:FF:53:F9:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01467B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94DB157E03A211F0A0A86850762E951A.roa
Signing time: Tue 18 Mar 2025 02:42:07 +0000
ROA not before: Tue 18 Mar 2025 02:41:55 +0000
ROA not after: Mon 07 Apr 2025 02:41:55 +0000
asID: 57043
IP address blocks: 156.253.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83579 (0x1467b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 02:41:55 2025 GMT
Not After : Apr 7 02:41:55 2025 GMT
Subject: CN=67d8dd7f-b0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:66:ee:68:72:b8:2d:25:09:64:b3:8d:a8:
57:78:bb:86:fd:7e:cd:b9:87:66:e5:04:6d:cf:14:
f7:23:e0:76:aa:fc:3e:b2:e2:a5:d2:4e:a9:82:18:
c5:e5:0a:eb:38:03:02:fc:b2:94:61:e1:31:78:68:
e3:ba:fd:b2:cc:b4:f5:1d:5e:00:67:71:f1:96:31:
fa:03:83:2d:95:5e:39:14:1b:17:38:2c:14:dc:7a:
3e:e5:6e:41:2e:3c:08:14:d5:64:8a:d0:6e:fc:c5:
31:bb:57:66:a0:de:53:d5:2a:ed:03:3d:cf:a4:98:
35:87:a0:d7:02:6a:28:c0:28:8a:88:56:5c:61:5c:
19:ef:36:d3:d8:f8:cb:78:74:5a:f9:8d:41:a3:ba:
f1:e7:ff:5a:83:48:e9:c1:38:8f:1f:98:42:ab:e8:
8a:9f:87:f9:ba:82:e6:25:04:32:fd:68:90:3b:ba:
b2:2d:91:1a:2a:2a:85:fb:d0:d7:40:ab:e8:34:7b:
9e:81:2a:f8:ab:c3:ff:05:84:17:f8:42:cb:21:16:
e1:74:ea:51:4c:4b:02:93:d5:b5:66:3c:63:d9:96:
97:93:64:d6:11:0c:7a:2f:04:ac:c8:0e:30:5a:80:
4e:c4:98:3d:9e:0d:c4:73:a5:6f:5c:cb:27:54:f3:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:39:CF:27:94:9E:77:FB:9D:6F:7F:26:B9:1D:B2:FF:53:F9:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94DB157E03A211F0A0A86850762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.32.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f6:49:83:79:87:42:6c:70:c3:24:93:13:e4:8c:47:f7:38:
96:c4:9b:20:18:d8:a4:15:85:e6:dc:00:95:95:a9:21:f3:12:
2e:3e:cf:67:89:d2:53:22:ea:05:18:fe:fd:b3:5c:f2:8a:da:
cf:5c:1e:7a:e9:c8:85:75:cc:58:cf:1b:2c:f9:fa:e3:74:87:
d3:6b:ce:92:d0:5b:04:95:12:df:a1:f0:f7:8b:30:74:b6:3d:
57:67:ef:7b:d3:2d:94:b1:5d:86:6d:b7:73:d6:12:10:b8:3e:
7a:93:e9:ba:fb:16:45:0c:7c:af:7a:1b:68:2e:a1:97:54:59:
f2:47:97:5b:22:41:b7:bd:39:1e:62:29:53:ce:36:6d:60:ac:
3a:d4:ee:ff:14:1b:34:3c:e2:39:02:e4:02:1b:30:6d:df:48:
fb:df:72:76:12:5f:2f:61:42:bc:ef:59:df:e0:a5:fb:0b:84:
70:75:96:bf:67:2e:49:a9:b9:67:0c:f9:59:87:ad:22:aa:9a:
88:4f:70:a8:77:cd:5d:59:38:d1:74:e8:04:53:0a:a6:1a:f4:
40:f5:46:b4:c1:a6:c0:d3:ea:51:0f:d2:09:a5:a4:8f:d9:55:
1d:6c:fc:fe:cc:be:77:39:b0:6c:50:71:9d:e6:2e:17:b9:d3:
a6:80:82:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:19 2025 by rpki-client