Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B300C286057F11F0BAB04555762E951A.roa
File: B300C286057F11F0BAB04555762E951A.roa (raw, json)
Hash identifier: jDULFhkfiwlHr0gJYHVHf+tO9HpMpgljuGPWO8TQuOQ=
Subject key identifier: D2:B8:C6:58:B4:6D:DA:83:77:0F:E9:CD:A4:7F:FC:E8:32:CE:FE:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014736
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B300C286057F11F0BAB04555762E951A.roa
Signing time: Thu 20 Mar 2025 11:37:27 +0000
ROA not before: Thu 20 Mar 2025 11:37:23 +0000
ROA not after: Sat 26 Apr 2025 11:37:23 +0000
asID: 272149
IP address blocks: 156.241.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83766 (0x14736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 11:37:23 2025 GMT
Not After : Apr 26 11:37:23 2025 GMT
Subject: CN=67dbfdf7-f59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:8e:30:8b:4c:a3:51:e9:f7:05:1d:a8:0c:
12:81:98:92:ce:40:04:5d:5a:b3:7f:86:49:f8:29:
22:21:08:11:57:f0:c8:72:76:10:01:4f:9e:cd:70:
4e:23:57:f6:68:d5:92:9a:02:48:ca:bc:44:26:a4:
bc:70:36:9d:bf:e1:9d:c7:3a:f6:a7:64:cc:ca:be:
9a:41:e7:4c:97:c3:7d:0c:5d:54:ad:57:3d:91:6e:
18:77:57:51:e5:71:a2:b4:6f:20:e9:87:4d:7f:de:
0e:fd:d2:9c:3d:96:d0:1d:af:3e:78:1b:ef:ae:da:
03:d0:4e:c7:81:cf:4c:d8:a5:cf:8a:8d:8b:ea:cd:
da:98:8b:63:43:fb:93:a8:19:6e:1b:23:cf:3d:80:
ac:67:4c:44:9e:d7:ba:56:2b:a3:da:4b:6d:27:0c:
9f:53:5c:2f:95:52:87:77:ae:ce:93:d8:b9:6c:ba:
12:fc:b1:9b:cc:b1:72:f9:49:78:fa:97:b7:2f:e6:
94:4d:a7:f4:3d:5a:c0:54:69:81:2c:96:a0:db:28:
ae:96:c3:80:ff:85:41:11:d8:31:4d:ec:3d:5e:69:
28:03:a9:23:0e:38:6b:ed:b7:23:d1:fc:ce:5b:80:
bd:cf:b7:c5:0b:bb:91:9f:c7:08:37:5e:11:cf:23:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:C6:58:B4:6D:DA:83:77:0F:E9:CD:A4:7F:FC:E8:32:CE:FE:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B300C286057F11F0BAB04555762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:59:1d:2f:44:92:87:fd:60:7c:f0:bb:0e:05:5e:38:a3:31:
01:23:3f:4f:73:c5:e4:25:b8:53:a2:56:9e:9b:43:02:9c:a2:
8c:58:72:a0:9e:28:7c:be:96:b2:26:f7:41:b4:c7:3b:da:9f:
18:d5:33:aa:1a:e3:55:6b:a0:d9:4d:4a:37:52:f3:c0:b5:43:
e7:6a:7e:10:b3:f3:69:2a:3f:96:21:99:ca:c3:b2:51:2d:dd:
0a:d7:f9:e2:3c:f8:dc:d3:53:f1:a0:00:a3:32:87:80:6d:d6:
ab:d7:a3:cc:05:e3:1a:03:35:b6:1f:d5:3e:51:ca:42:86:f4:
14:be:20:dc:f8:5d:8f:bb:6d:b7:94:19:09:a1:52:75:a6:63:
7d:a8:ba:bb:75:b0:6b:48:41:e8:08:3c:57:db:b6:91:96:9d:
25:27:91:aa:d2:ba:57:58:e6:11:0f:1e:49:02:e2:b0:42:0f:
0c:20:6e:6a:dc:07:1d:79:b7:13:2d:c5:79:9f:52:22:d0:77:
8c:07:23:6d:f1:59:4a:f5:8b:cd:ca:44:6d:39:56:79:1c:33:
6f:19:64:54:62:4c:75:2f:ea:38:96:2d:26:0b:5b:48:20:ba:
64:26:0e:b7:81:dc:e2:37:5e:80:a6:76:b6:96:d2:f7:19:9b:
b7:19:9d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:04 2025 by rpki-client