Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F5C53ACFF1311EFBBECF882762E951A.roa
File: 9F5C53ACFF1311EFBBECF882762E951A.roa (raw, json)
Hash identifier: pU9pDaZc+xHroJxyywGEkR2r57Yh6xwsA9pmz54q4Rg=
Subject key identifier: 78:D9:1D:BB:50:9A:D0:E2:41:36:F4:40:30:A5:98:E5:36:BA:62:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F5C53ACFF1311EFBBECF882762E951A.roa
Signing time: Wed 12 Mar 2025 07:28:41 +0000
ROA not before: Wed 12 Mar 2025 07:28:38 +0000
ROA not after: Thu 17 Apr 2025 07:28:38 +0000
asID: 12849
IP address blocks: 156.229.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83195 (0x144fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 07:28:38 2025 GMT
Not After : Apr 17 07:28:38 2025 GMT
Subject: CN=67d137a9-91b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:52:1e:df:aa:23:a6:08:28:10:0d:0b:52:
1b:c6:86:56:83:99:bd:82:c2:1d:5c:00:09:e6:a1:
b5:d9:b8:d3:f7:69:63:38:87:86:7e:44:18:e7:65:
a1:00:95:d0:ce:68:6a:52:78:91:c1:63:2f:c8:43:
ad:87:1c:0b:ee:c0:a4:9c:2f:1b:a3:38:2f:ba:b4:
14:05:3d:af:a8:f9:11:e1:ca:a4:e6:a6:98:cf:2f:
b2:ca:9b:e0:2a:a4:49:61:b3:0f:a5:39:55:0a:a4:
5d:45:90:71:8b:bf:46:10:d7:9f:05:1e:61:bd:f5:
fd:b6:1e:ab:d6:b1:a1:cc:e8:62:d2:6e:6b:d8:8a:
e9:fe:14:c6:e7:c9:8a:ef:88:08:a9:87:91:83:2a:
92:02:3e:37:36:dd:b3:9b:c3:34:7d:6d:ca:66:5f:
d4:b8:69:55:39:e4:25:30:c1:b6:9c:7b:79:42:3e:
e2:d1:4f:da:66:f1:e5:c3:a8:41:54:4f:1e:2a:24:
28:90:fd:63:a1:b1:ef:a2:42:e0:1c:cb:7b:40:97:
1b:8c:8a:a7:e8:73:57:7b:c4:7c:26:f5:ea:0c:4d:
f4:7c:29:55:6a:da:85:da:2b:b1:0f:9d:02:0c:32:
98:03:c2:34:03:b2:55:9c:c2:ff:e3:3f:2d:90:34:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D9:1D:BB:50:9A:D0:E2:41:36:F4:40:30:A5:98:E5:36:BA:62:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F5C53ACFF1311EFBBECF882762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8e:37:89:db:af:08:f7:f3:2a:20:95:be:18:b9:1b:05:53:
3e:92:0b:67:3d:1b:03:d1:33:0b:e1:ff:b3:3a:63:ba:c2:a1:
e9:19:bb:71:2b:a8:6a:6e:be:b6:23:6d:98:08:8a:ad:18:3e:
47:d1:e0:c6:14:11:ce:82:6c:5f:71:3a:27:6b:60:92:7d:be:
db:33:b2:a1:98:df:db:49:91:c7:fc:4e:a9:57:c6:ff:58:f7:
6a:5e:0a:ef:fd:e3:53:60:10:a4:fc:b4:b1:c5:5e:ca:54:f9:
e1:2a:6b:c8:a8:ca:06:31:03:5e:b1:6e:b6:12:03:ba:06:5b:
62:d0:05:2f:f6:63:b8:87:5d:0f:db:56:88:42:f2:f5:20:e9:
e3:be:d9:fc:fa:5a:75:1d:10:78:c0:db:83:9d:56:b5:11:4b:
71:6e:37:06:af:06:8b:39:ff:59:a1:4c:a2:96:f1:bd:38:0c:
7c:5c:cf:ec:c7:67:fa:d5:59:c7:4a:42:ac:22:23:f1:f9:3d:
66:6a:1a:9d:25:f2:4d:13:29:98:d3:02:7b:51:2c:8d:f6:13:
bf:0f:e5:9d:60:80:3b:e5:b7:7d:7d:73:28:54:4b:07:c8:9c:
b1:76:4c:b4:35:52:9e:d1:33:70:67:d9:a3:92:2d:90:8b:00:
60:20:b0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:15 2025 by rpki-client