Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4D2C0AE0CCF11F08CA0D889762E951A.roa
File: A4D2C0AE0CCF11F08CA0D889762E951A.roa (raw, json)
Hash identifier: +ClJ3zKXWgF5WiHY8JE0L/Mh5UdN1/o0t14rABgrBYI=
Subject key identifier: C0:CB:23:DE:D1:52:DC:9F:BE:47:64:27:02:62:92:71:22:EB:52:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4D2C0AE0CCF11F08CA0D889762E951A.roa
Signing time: Sat 29 Mar 2025 18:57:21 +0000
ROA not before: Sat 29 Mar 2025 18:57:17 +0000
ROA not after: Thu 08 May 2025 18:57:17 +0000
asID: 49434
IP address blocks: 156.229.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84212 (0x148f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 18:57:17 2025 GMT
Not After : May 8 18:57:17 2025 GMT
Subject: CN=67e84291-28d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:7a:bd:a1:fc:6b:fa:2a:d8:2b:b1:17:8b:
2e:0d:48:b6:cf:0c:cc:24:2c:c3:ae:8e:39:cd:f9:
89:12:ad:9a:f7:e0:fa:90:5d:9b:b7:18:53:01:da:
b9:fa:70:1a:c2:b9:b4:25:8d:46:6f:48:e5:3a:93:
73:1a:35:63:80:93:79:18:68:2d:c6:6b:87:f9:b2:
6c:20:59:5d:6e:56:4b:fa:01:45:53:77:3c:23:fb:
70:39:be:f5:12:f9:87:83:3f:d2:26:3a:1a:96:cb:
ae:89:5c:a5:86:b6:11:58:df:74:dd:d9:05:c3:e7:
7c:8d:7a:14:e6:94:46:7d:8f:db:40:58:82:79:08:
25:64:83:ce:23:85:dc:a2:4d:bb:3b:5a:5c:ee:26:
a9:58:71:a2:ba:3b:c0:e6:d7:41:34:51:3e:77:ca:
3f:0c:1e:41:69:ba:c5:e2:03:2c:b8:67:b6:b0:62:
21:ba:e7:61:a1:17:31:64:73:09:ef:de:6f:01:74:
24:3f:36:00:df:21:bf:e7:d5:9b:37:8b:3c:ad:03:
49:f8:6f:a3:4c:28:a1:92:30:57:58:86:c9:d1:77:
f8:2c:de:ef:73:25:bb:d8:3f:ed:fc:a1:60:3e:6b:
54:98:3e:cf:7c:65:f8:d1:94:30:dd:b5:4a:36:48:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CB:23:DE:D1:52:DC:9F:BE:47:64:27:02:62:92:71:22:EB:52:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4D2C0AE0CCF11F08CA0D889762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:9d:47:be:fa:5c:d6:3a:4b:00:26:90:90:ca:4e:25:d2:7c:
d9:d0:cf:b3:9a:9c:b2:ec:62:49:ba:a5:eb:d1:9e:08:2c:ec:
33:7a:bd:d9:03:6e:a3:65:cc:c3:f9:48:27:c7:7f:a5:79:00:
c6:c8:da:42:9a:18:4e:e7:fb:53:51:7b:c3:7d:24:7b:fb:65:
27:71:f2:fc:b6:63:f2:f4:b5:95:8c:78:87:87:b0:82:fd:c8:
6d:2b:74:cc:96:81:37:f6:4a:57:ec:1c:58:65:6a:cd:20:2b:
7e:15:04:e7:b6:34:e4:42:e2:d1:91:f3:97:6e:c6:37:0e:94:
2d:a8:69:a8:f5:e3:83:35:cf:46:87:09:be:b6:69:b2:8a:7d:
78:59:e9:14:74:65:83:e9:cf:8f:5b:7c:0d:ec:90:5c:dc:66:
9b:df:c7:72:ff:6b:f5:bd:07:5f:ea:11:ae:5b:8e:60:4a:8f:
1f:ed:55:52:e2:8f:32:b5:97:df:28:32:13:e3:71:cb:41:a3:
cc:05:22:aa:8f:71:90:9d:ae:2f:71:ca:a1:07:48:51:f5:cc:
5f:ed:0e:36:53:57:14:fd:bc:4a:9f:5a:e7:0b:78:d8:b0:ab:
93:cf:5a:45:69:d2:de:ec:cc:83:dd:8b:2f:4d:c0:bf:7a:d3:
88:71:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:45 2025 by rpki-client