Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68617E8C94A11EF8EB16891762E951A.roa
File: A68617E8C94A11EF8EB16891762E951A.roa (raw, json)
Hash identifier: +UHpOYyM/yXrwncbVFstaC4nJmHXHSAwXTPhMTl3tro=
Subject key identifier: AF:7C:75:AA:10:2F:4C:E0:E7:F3:87:02:E4:5E:64:5E:DB:D3:E5:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F38A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68617E8C94A11EF8EB16891762E951A.roa
Signing time: Thu 02 Jan 2025 20:46:33 +0000
ROA not before: Thu 02 Jan 2025 20:46:29 +0000
ROA not after: Mon 13 Dec 2027 20:46:29 +0000
asID: 17561
IP address blocks: 156.225.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62346 (0xf38a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 20:46:29 2025 GMT
Not After : Dec 13 20:46:29 2027 GMT
Subject: CN=6776fb29-6e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5b:74:49:4d:51:62:a3:e7:ae:54:58:15:7a:
b0:58:00:b9:23:29:b7:98:99:ce:af:e9:7e:f2:5f:
f0:3f:8a:43:50:23:f5:7f:87:77:d1:21:b2:c9:29:
9f:34:b7:0d:79:ef:20:b8:17:6e:f7:80:98:36:11:
dd:54:3d:90:eb:e2:73:4c:6e:3a:9f:f9:de:7e:06:
d4:29:c8:d0:a9:90:d2:65:1c:74:2a:0a:c5:88:ef:
38:4a:8c:12:3e:9c:18:31:c4:c8:df:ec:75:3d:f0:
e7:49:34:4d:0d:3a:6f:d4:d0:71:a8:75:9b:ae:e7:
5a:4a:b1:37:17:b5:66:9b:49:b6:25:c0:25:c1:fb:
d6:6d:e0:bb:8b:96:f0:b3:e7:33:b3:84:47:a3:7f:
a6:d4:b6:3d:49:66:92:2a:fa:52:fd:8a:c6:59:f2:
47:75:75:d1:a9:01:24:65:16:52:6f:7d:4e:3a:61:
cd:b0:4c:e5:ec:88:18:1b:cf:61:42:4a:be:0f:cd:
55:0e:14:02:f5:bd:9b:c1:0e:04:d2:bf:23:4a:d5:
05:ea:54:a1:b1:47:f2:f9:e4:85:92:20:9a:fe:e1:
63:f5:d7:3d:e3:1f:61:22:f5:c0:b2:08:90:a3:89:
f6:f3:4c:46:72:24:a9:db:89:32:a2:84:1c:97:2a:
bd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7C:75:AA:10:2F:4C:E0:E7:F3:87:02:E4:5E:64:5E:DB:D3:E5:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68617E8C94A11EF8EB16891762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.75.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cf:7e:74:8d:fc:aa:9e:e5:ac:49:4e:30:4a:fa:5e:83:39:
43:70:53:64:78:49:35:f2:6d:d5:89:21:8a:4e:94:e6:4d:10:
f7:c3:81:e9:06:3f:6f:90:bc:45:0b:6e:22:f6:e8:36:0e:35:
29:00:2b:d4:78:34:5c:a1:77:44:10:d4:51:61:79:83:53:03:
88:20:48:80:9f:41:86:57:b3:8e:12:a8:32:52:15:45:a1:49:
5c:81:ca:04:0b:18:84:b7:d9:72:dd:00:02:f4:0d:07:55:de:
aa:85:a3:b0:77:db:4a:f4:ce:22:0a:f5:91:b2:99:0c:11:ec:
dc:c4:b1:38:30:0b:84:4f:8e:d4:53:50:9b:98:54:2c:5f:0e:
0c:55:cb:64:e8:24:a5:07:c2:bd:11:63:1e:55:ad:79:bd:3b:
c1:30:1f:e9:97:2b:90:ef:43:f9:68:af:9b:94:ab:31:52:31:
45:53:9a:80:5c:5e:03:69:9a:cb:db:f8:a5:33:6c:5e:6b:02:
00:d9:64:eb:09:3c:28:68:ee:6a:8e:9e:3b:b5:ec:be:38:a6:
fb:90:e9:5f:61:90:f9:1c:e0:c8:1a:ef:89:a1:0d:f6:e6:2e:
ff:45:2b:13:23:df:0f:1a:e8:45:cc:7d:93:71:44:18:93:5d:
e4:e4:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:59 2025 by rpki-client