Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E0F92A4E06C11EF8E4EA09B762E951A.roa
File: 9E0F92A4E06C11EF8E4EA09B762E951A.roa (raw, json)
Hash identifier: fzYIa9+OwxEq6NWAo3nnTNVBf6W4nVk6rWc3QgcypLQ=
Subject key identifier: A6:AF:D8:BF:3E:53:DF:43:7E:FF:14:8D:04:6A:F2:29:CB:ED:8E:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011867
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E0F92A4E06C11EF8E4EA09B762E951A.roa
Signing time: Sat 01 Feb 2025 07:17:39 +0000
ROA not before: Sat 01 Feb 2025 07:17:35 +0000
ROA not after: Thu 01 May 2025 07:17:35 +0000
asID: 328608
IP address blocks: 156.229.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71783 (0x11867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 1 07:17:35 2025 GMT
Not After : May 1 07:17:35 2025 GMT
Subject: CN=679dca92-53cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:9b:c5:d2:a4:50:76:c5:76:6a:b5:14:2b:
70:9c:ac:c8:c5:18:a4:61:eb:93:a3:11:a4:d4:cc:
66:9b:42:3d:34:9f:5c:47:21:2e:81:4e:c7:fc:13:
ae:30:2b:b7:9a:5d:64:61:e7:fb:3d:59:4b:fe:fb:
86:04:c2:60:6b:3d:87:40:44:f5:a6:25:cd:17:e0:
3e:d0:b9:ec:74:be:b8:82:ad:cf:04:f4:80:66:4c:
49:95:52:f4:4c:9a:de:40:87:d4:4a:84:b3:8e:8f:
9e:2a:ce:fe:48:c3:07:55:c9:88:c5:07:d4:c7:8e:
fa:95:03:82:2c:fd:75:11:2b:34:3a:e7:9c:20:d3:
54:d2:37:9d:a2:b2:c6:12:b8:1c:e9:87:05:5c:32:
16:89:42:61:7c:2d:87:06:f3:ba:56:aa:88:5a:c7:
dc:bd:0b:48:ed:b1:38:b0:e1:4d:82:04:de:4a:ef:
f2:ab:45:51:a8:44:ce:35:44:d4:74:f5:ec:cf:86:
e1:ec:64:46:59:cc:fe:52:4c:32:d9:aa:a5:8c:ca:
91:10:ab:32:93:3f:61:02:fa:6c:aa:e4:3e:17:a5:
66:0c:95:f7:0d:24:c4:01:84:99:99:f0:cd:b3:fa:
f1:a0:3f:99:47:a2:cb:79:ff:ad:a5:8a:1a:25:b6:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AF:D8:BF:3E:53:DF:43:7E:FF:14:8D:04:6A:F2:29:CB:ED:8E:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E0F92A4E06C11EF8E4EA09B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.174.0/24
Signature Algorithm: sha256WithRSAEncryption
64:4b:49:14:51:ab:e8:4f:70:f9:4c:50:23:63:94:69:7a:66:
15:4e:85:05:6d:ca:36:a9:a0:05:4f:dc:b5:10:1d:33:53:7f:
c0:2b:a6:2f:d4:c2:8d:47:35:9b:c5:96:bb:3f:e7:0c:32:2e:
03:a3:56:03:ad:3d:be:7d:dc:f7:55:fe:b2:a5:c9:48:2d:c3:
b8:04:83:e2:8a:f6:18:fd:7b:d5:bb:31:ab:77:e8:46:03:e1:
06:db:38:9f:bd:15:2b:41:93:7e:a9:c7:90:18:d9:4a:60:d2:
24:56:3e:a7:41:62:23:23:bc:b5:54:b5:10:9e:06:a6:34:4e:
11:bb:73:59:84:41:9b:25:2b:b1:54:58:67:a6:7b:47:21:5e:
5b:27:7b:29:87:79:b0:82:59:67:87:1d:42:57:30:28:5e:8a:
1d:c1:0b:c5:f3:56:27:49:0c:5f:84:e8:55:de:5b:18:6f:65:
03:5f:fd:96:28:ae:29:ad:35:18:82:c1:c5:ad:5a:b4:fa:d3:
ab:49:94:cd:9f:02:07:3b:58:cb:56:14:10:84:b9:db:9e:73:
7e:55:7a:79:54:de:5c:c0:4d:35:a2:bb:e6:f7:90:85:12:cf:
1c:3a:5d:40:1e:b3:1c:bb:4d:94:38:8f:1d:d0:19:27:bf:df:
0f:5f:79:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:27 2025 by rpki-client