Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0998254F42111EFBE923B70762E951A.roa
File: B0998254F42111EFBE923B70762E951A.roa (raw, json)
Hash identifier: hRo/FGof/ZfGHiYIAiDohs3RjPWbZrse9TGUmrCG9uE=
Subject key identifier: 71:6B:CD:27:62:21:49:6A:23:9E:5C:02:F1:28:62:5B:63:3F:CF:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013051
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0998254F42111EFBE923B70762E951A.roa
Signing time: Wed 26 Feb 2025 09:11:41 +0000
ROA not before: Wed 26 Feb 2025 09:11:37 +0000
ROA not after: Thu 19 Feb 2026 09:11:37 +0000
asID: 984
IP address blocks: 156.252.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77905 (0x13051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:11:37 2025 GMT
Not After : Feb 19 09:11:37 2026 GMT
Subject: CN=67bedacd-acfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:7e:45:09:5a:93:96:20:8c:91:4f:8c:f9:
65:ef:ef:f0:f9:31:1e:d2:91:e3:e0:93:93:fa:42:
aa:b4:9d:0f:75:5a:4f:c2:7f:43:15:c4:1f:39:f9:
b0:8e:41:ec:67:77:65:69:3f:0f:4e:05:3d:fb:e9:
7a:84:88:56:9f:be:ed:26:02:c9:f8:79:fa:d9:69:
5e:ca:dc:08:34:3f:c2:db:96:54:37:6e:21:1b:00:
c1:4a:74:7f:22:d7:73:58:1e:a6:95:78:fe:d3:19:
8a:33:b7:ed:5e:11:46:32:70:43:74:70:6a:06:4a:
00:7a:29:22:27:15:74:a2:cd:3b:08:cf:3c:2c:42:
e7:80:30:2d:ff:64:d5:46:6a:34:25:a7:aa:47:9d:
23:50:85:10:bc:86:17:91:b6:72:d4:f8:9f:de:bf:
1f:58:1d:9a:4d:af:4d:8d:ff:fb:cc:7a:e8:4f:6b:
4e:52:07:da:0e:4f:42:fe:04:0e:e2:fd:e8:ad:d2:
44:a0:57:f0:0b:36:33:7b:eb:dc:4d:79:8c:9e:c7:
33:95:02:f6:89:a1:c8:01:bd:f6:f8:23:b2:f0:c7:
92:8f:cf:1d:04:03:cf:e4:ae:e2:e3:67:b4:a7:ed:
d9:08:2e:0c:ec:fb:b6:c1:17:ba:5e:fb:62:d2:19:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6B:CD:27:62:21:49:6A:23:9E:5C:02:F1:28:62:5B:63:3F:CF:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0998254F42111EFBE923B70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e9:a8:74:84:e8:f0:37:d8:b9:fe:f9:dc:c5:e1:56:93:28:
53:a1:f1:a2:0f:42:b7:8f:d9:88:1c:ef:25:c3:2a:5c:b8:1e:
62:19:31:ab:32:7d:45:47:72:08:0a:2a:e4:c3:65:56:2c:be:
a3:9d:fc:2e:40:28:8e:ff:76:83:06:a0:d7:ab:24:40:bb:24:
21:1f:41:63:47:8b:8b:5c:6b:d3:46:ab:b7:dc:03:2e:9b:3e:
80:13:ec:80:e4:be:f0:de:c0:f7:d7:20:4b:b1:31:e0:09:ea:
8e:b5:ac:c1:6e:dc:dc:d7:96:a9:bc:88:c8:1d:93:6e:2e:0a:
85:2c:3d:b1:63:39:c0:e1:36:b5:eb:06:56:40:0a:2a:cb:6a:
26:69:27:cd:d7:59:a2:25:a9:cb:59:fa:64:0d:ea:cc:d8:4c:
10:11:20:58:99:2a:ee:4d:7a:2e:c4:df:b7:0d:35:d6:66:9d:
88:d3:02:b0:fc:9e:cc:9b:90:95:92:2a:e2:dd:90:67:89:02:
d8:52:b5:19:36:38:ce:aa:80:e1:66:ca:7d:a2:8b:5d:a5:cb:
3b:0f:5b:17:a7:e7:47:69:5c:e3:b2:9b:0d:ad:ea:d2:dd:25:
92:5f:f2:08:b1:d3:fd:d8:bf:93:64:68:e9:ae:a6:8e:de:94:
77:90:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:16 2025 by rpki-client