Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7EB0076FFE511EFBFA1234C762E951A.roa
File: B7EB0076FFE511EFBFA1234C762E951A.roa (raw, json)
Hash identifier: zRBUJQbkndwMlYRX3yKR73TyXaIIclTYiuYWn3wiJUs=
Subject key identifier: 4B:B5:01:C7:10:38:88:BD:F0:D1:96:67:C9:C5:E7:9E:A7:09:74:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7EB0076FFE511EFBFA1234C762E951A.roa
Signing time: Thu 13 Mar 2025 08:32:37 +0000
ROA not before: Thu 13 Mar 2025 08:32:33 +0000
ROA not after: Fri 09 May 2025 08:32:33 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 24
156.234.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83360 (0x145a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 08:32:33 2025 GMT
Not After : May 9 08:32:33 2025 GMT
Subject: CN=67d29825-b5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:cb:54:aa:24:ff:85:87:d9:16:b1:03:04:
29:e5:0b:20:20:97:21:35:15:15:6d:48:e8:b3:e6:
10:fb:0f:07:fe:54:35:1b:c9:8b:5b:2b:7b:35:66:
2c:92:a4:f5:99:70:20:3c:f4:61:9d:dc:d2:0c:e7:
2f:d8:c2:f2:6a:54:67:22:b5:b4:ff:e1:e9:36:cd:
ff:7f:0b:3d:26:d9:f0:77:4d:a3:86:3b:e6:84:74:
8e:4e:b9:51:15:81:51:13:33:ac:89:a8:84:5d:ab:
09:de:12:dc:9b:10:aa:24:e7:04:34:3f:3a:32:b4:
a8:e6:58:3c:83:1e:0b:5d:61:96:f1:33:e2:35:79:
ad:2a:9b:6b:ee:84:52:7b:7b:b4:2d:60:1d:98:d7:
6a:80:27:4f:c1:e0:f3:50:cf:89:d4:9b:36:e6:9d:
97:f4:2b:08:ad:0f:12:23:13:3a:8b:be:dd:a1:f8:
ff:15:57:5a:9d:69:39:94:dc:05:fd:1c:51:11:30:
36:bc:09:0f:74:56:e3:0d:02:39:02:31:3c:d5:98:
71:83:c7:40:c1:77:1c:3b:8d:93:d1:3d:99:a1:5d:
ac:c9:05:3d:9b:6d:c4:4f:3b:13:58:8f:58:34:aa:
de:f9:fb:97:43:8c:9c:9b:ea:cf:73:48:67:e1:da:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B5:01:C7:10:38:88:BD:F0:D1:96:67:C9:C5:E7:9E:A7:09:74:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7EB0076FFE511EFBFA1234C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
62:bb:5d:25:18:7a:9d:a5:98:d1:5d:46:03:b8:ac:20:eb:59:
3c:5d:6a:63:ea:fc:72:d0:1e:a4:7e:de:a9:88:f5:9a:bf:7e:
51:b4:32:ca:89:8b:73:61:77:70:f6:a3:cd:78:03:79:a1:a0:
df:80:30:97:62:8c:7c:50:ea:b1:14:31:4d:fb:8c:fc:c0:bd:
ce:2b:18:46:42:6e:e7:4a:01:dd:a9:22:d1:23:6b:11:2f:3e:
ee:91:b5:c0:5f:f0:52:d9:45:16:46:00:96:6f:c7:97:ba:32:
34:1d:6c:87:eb:75:c3:c4:6d:dc:78:3f:52:3e:c0:05:64:e8:
67:8b:41:6f:b6:92:ee:a1:74:26:48:fe:61:29:13:17:2c:ee:
16:7c:de:d5:15:f3:59:bd:a9:c0:3a:f7:3a:a7:7b:76:e9:e7:
af:d7:61:ff:13:01:52:a5:57:a8:02:9f:c5:4a:ff:4d:1c:0e:
4d:33:7f:32:5d:8d:3d:4a:ff:b3:9f:73:0f:e4:cb:58:90:ee:
6c:d0:ee:0d:df:0b:58:4f:0f:ce:ed:b4:10:ec:ca:a0:22:82:
5d:cc:bb:87:55:c4:65:3b:6e:b6:03:0b:46:c2:56:0d:3a:f0:
be:cd:61:92:c8:12:97:41:4e:d3:1f:df:b0:f9:82:04:b5:3a:
d1:83:cf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:01 2025 by rpki-client