Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DDDDD28094711F09E423C6F762E951A.roa
File: 9DDDDD28094711F09E423C6F762E951A.roa (raw, json)
Hash identifier: 8L8lfTCgFSz9GHych1Ighj6aMOyFfP/DpudSJLUHjyM=
Subject key identifier: CB:C7:21:E7:BC:BB:F7:CE:56:77:57:71:8D:54:1F:2A:28:36:3B:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DDDDD28094711F09E423C6F762E951A.roa
Signing time: Tue 25 Mar 2025 07:06:04 +0000
ROA not before: Tue 25 Mar 2025 07:06:01 +0000
ROA not after: Mon 14 Apr 2025 07:06:01 +0000
asID: 9304
IP address blocks: 156.225.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83945 (0x147e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 07:06:01 2025 GMT
Not After : Apr 14 07:06:01 2025 GMT
Subject: CN=67e255dc-1c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:bf:b2:5c:8c:06:34:2a:71:b8:ef:3b:e6:
db:04:e3:22:38:aa:63:f6:4a:33:12:b4:16:22:38:
81:d7:a4:dd:72:23:cd:fc:1c:67:03:8b:af:00:d6:
18:28:2f:d4:c7:b6:47:40:05:ed:aa:61:f3:f2:34:
7f:d4:ba:9a:fd:8c:6e:4e:c8:7c:d8:bd:12:61:43:
89:91:17:60:61:81:0d:d7:ce:7a:83:d1:b2:70:ba:
12:1f:89:84:ef:5d:b3:a3:ce:a8:6c:74:73:c1:d4:
88:98:3f:e0:5a:b0:8d:73:20:0e:07:0a:00:9e:5c:
48:6a:c0:03:95:df:44:b3:90:37:72:f3:d1:3a:57:
96:06:ac:ed:10:68:83:17:cd:59:f2:1c:f2:fb:ec:
53:16:b3:65:f3:16:6b:62:e5:2a:0c:56:90:a6:e1:
39:3a:1f:55:3a:e6:ad:bc:00:fb:3a:62:e2:cd:d0:
9c:c9:b4:e3:d1:91:d8:a6:09:5c:1a:5d:87:7e:9b:
5c:a6:a0:d9:2b:cf:02:87:7e:74:8e:a7:9b:6e:fa:
97:ad:cc:e3:17:4d:5c:bd:c8:59:6a:6b:24:01:d2:
0b:15:ac:13:36:ce:08:07:14:23:ba:04:a9:8c:61:
ec:e1:ae:9c:aa:4a:fb:9e:f2:c7:db:e7:a6:bb:0d:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C7:21:E7:BC:BB:F7:CE:56:77:57:71:8D:54:1F:2A:28:36:3B:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DDDDD28094711F09E423C6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.7.0/24
Signature Algorithm: sha256WithRSAEncryption
49:18:2e:30:96:d7:e7:ed:79:cb:8a:37:1f:70:1a:d2:b4:71:
86:43:01:5c:e9:17:3a:44:2e:8d:ff:cd:4d:ee:63:58:26:bf:
c9:ef:ef:e5:ca:62:45:a6:9c:14:b4:e4:52:f9:0e:01:de:20:
58:df:76:6f:bd:67:37:b8:d4:b7:c5:a4:e8:01:ba:2f:ea:a3:
cc:9f:09:e5:c2:3c:59:4f:db:3a:56:93:7d:15:d0:6d:e8:62:
0e:55:f1:b9:a6:37:85:16:57:ae:51:c0:4f:68:23:2d:10:bd:
f3:d5:0f:15:b1:3b:64:8a:67:25:ba:c7:c1:e0:c5:5a:38:c0:
9f:60:68:bb:15:6a:70:89:17:8d:c4:9d:b7:29:47:32:03:25:
2b:2c:86:08:e5:08:af:6f:61:fc:b3:de:93:cd:20:c6:7b:2d:
fc:83:bd:54:3c:21:aa:64:b4:df:56:34:c5:be:69:6e:a7:f7:
a4:4e:37:cc:b9:bc:f2:e5:64:b6:c9:80:17:a1:4e:7f:37:40:
56:76:4e:09:37:e7:84:73:2c:ee:00:a3:3e:9f:e4:75:c4:63:
1c:38:de:57:24:24:61:7b:28:c7:ab:cb:ab:28:de:c0:ae:59:
33:68:db:64:e7:82:99:04:8a:f7:d3:a7:23:37:4c:33:18:e0:
f8:6d:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:39 2025 by rpki-client