Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963DB5FCF42F11EF9A130151762E951A.roa
File: 963DB5FCF42F11EF9A130151762E951A.roa (raw, json)
Hash identifier: +lvD18TvVJKa/x4Hj80SR0Ki/LyoFRUXF5G86OsHbvg=
Subject key identifier: 54:C4:86:F0:C1:CD:FD:B8:FB:32:BE:37:BF:F4:BC:24:65:CC:D4:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01316E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963DB5FCF42F11EF9A130151762E951A.roa
Signing time: Wed 26 Feb 2025 10:51:09 +0000
ROA not before: Wed 26 Feb 2025 10:51:05 +0000
ROA not after: Thu 19 Feb 2026 10:51:05 +0000
asID: 984
IP address blocks: 156.230.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78190 (0x1316e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:51:05 2025 GMT
Not After : Feb 19 10:51:05 2026 GMT
Subject: CN=67bef21d-e361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:53:6d:54:a9:89:7b:75:20:2b:c7:8d:55:c0:
3a:1d:ba:c8:c4:9d:d5:cb:6a:a5:76:51:10:50:84:
a9:38:54:f4:2f:c8:e7:69:8f:28:4f:c8:6b:48:e0:
52:ed:01:29:9c:bd:5f:40:fd:48:b2:f5:41:29:69:
74:89:6d:a3:24:bb:2c:cb:52:04:8e:04:67:2f:99:
f1:a9:8e:07:2c:70:9b:77:32:c8:88:49:f5:ca:ec:
c8:00:7c:a8:b4:9c:8b:02:02:60:39:95:d8:ac:38:
9d:ce:f4:30:e2:5b:3b:f2:92:29:75:36:ba:91:51:
91:1a:06:4f:12:fa:16:35:ca:13:fc:c8:bd:8e:65:
0d:4d:15:18:48:76:ec:b0:c0:c9:fe:1a:b7:45:35:
be:99:6f:2e:77:71:94:d9:1c:1f:31:28:33:6d:ad:
d4:34:dd:64:87:9b:ea:fd:50:3d:ad:0f:ff:6a:43:
ea:97:32:1b:af:27:15:00:ec:74:eb:8b:c1:68:24:
e3:22:9e:2a:81:0e:48:7c:67:2a:2c:9b:c8:4a:c7:
5e:72:b6:88:a1:74:7f:0e:cc:ee:2b:b7:59:da:4b:
e4:d2:e2:6f:08:9c:68:13:76:f4:24:7e:58:0a:6e:
e8:7a:4e:05:77:88:61:2f:13:56:8f:17:80:f8:16:
c3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:86:F0:C1:CD:FD:B8:FB:32:BE:37:BF:F4:BC:24:65:CC:D4:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963DB5FCF42F11EF9A130151762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.177.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c5:c1:13:f3:28:6e:24:35:d8:79:ac:d9:93:30:a9:1c:b4:
44:12:01:c0:21:46:8c:fc:b7:3e:8c:39:11:55:80:72:6a:fd:
10:c9:e9:67:15:90:0c:8a:66:10:78:6f:72:5b:dc:b5:1f:82:
5b:f0:65:4a:76:1c:9a:c8:b9:d5:88:e4:62:16:c3:ae:bf:7d:
77:9c:c9:2a:4c:d6:bd:06:3d:4e:b3:44:48:92:81:02:c6:69:
ab:95:a5:65:d9:ff:2d:37:41:2b:44:9a:81:43:65:55:fe:73:
81:06:06:27:14:86:04:1e:5a:24:57:81:37:2c:e9:74:d1:10:
d6:97:a9:08:9c:0f:0a:65:0a:37:a9:03:2d:01:89:11:93:98:
4a:ae:87:13:28:2b:06:9c:dc:b1:06:ba:66:77:df:b9:9c:5c:
ca:08:fc:88:b8:35:27:79:2f:69:32:68:f0:40:d2:23:1a:8b:
cc:a7:72:48:05:e9:18:43:23:9b:8a:3c:00:cc:cc:71:2d:7b:
ca:90:7a:15:ee:97:9a:36:cf:48:e7:0b:84:ed:ba:db:a3:ca:
af:7e:d7:38:b2:c5:4e:aa:28:49:2a:a9:be:cf:da:29:0a:e0:
4e:87:04:83:bd:ab:5a:ad:4c:e6:d3:42:2d:0e:53:41:c9:4c:
fa:4b:7e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:00 2025 by rpki-client