Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9391746F88911EF9B438E8F762E951A.roa
File: B9391746F88911EF9B438E8F762E951A.roa (raw, json)
Hash identifier: RqIfFLeStS2wtGWmC8RM1OLxf2bw58v+FOleVfvn5+E=
Subject key identifier: 05:67:E8:3F:B0:ED:28:A0:8C:D7:BD:DA:EE:38:F9:D1:76:0C:28:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014285
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9391746F88911EF9B438E8F762E951A.roa
Signing time: Mon 03 Mar 2025 23:46:27 +0000
ROA not before: Mon 03 Mar 2025 23:46:23 +0000
ROA not after: Sun 13 Apr 2025 23:46:23 +0000
asID: 138915
IP address blocks: 156.244.29.0/24 maxlen: 24
156.244.38.0/24 maxlen: 24
156.244.47.0/24 maxlen: 24
156.244.53.0/24 maxlen: 24
156.244.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82565 (0x14285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 23:46:23 2025 GMT
Not After : Apr 13 23:46:23 2025 GMT
Subject: CN=67c63f53-1266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:e2:d6:33:42:3b:aa:75:d8:bb:7a:f1:80:
49:be:17:4d:82:cd:4a:cb:e9:ef:5a:97:e5:d6:55:
fd:f2:76:1e:8e:25:cc:17:c0:fc:a1:16:6b:e0:4b:
cb:e7:cc:03:e2:95:f8:8c:75:a0:ae:06:a3:3c:dd:
45:1e:ed:ce:3f:19:5b:56:96:86:7a:2a:b1:f7:4f:
f1:6a:85:a8:fc:a6:a9:0b:fc:36:62:0c:cf:e6:ed:
a5:59:d9:b7:cf:44:a0:41:29:74:1c:f6:c2:7a:86:
d5:34:80:ab:3e:5d:c1:a5:3d:5d:1f:90:3e:6f:78:
38:41:f6:e6:12:70:83:74:79:08:8f:8d:ae:f6:82:
a2:f4:dd:84:01:55:35:63:80:ea:b6:70:c1:84:6c:
36:aa:c0:ef:51:b6:1c:ab:7a:b7:2d:33:14:b8:ea:
20:0c:45:10:3e:0a:17:52:0b:f7:d1:ad:65:fd:dc:
4a:18:63:06:14:2d:9e:4a:b8:e9:66:a3:cc:28:4e:
2d:78:76:3e:dd:46:f4:06:a3:51:ff:0d:27:30:89:
88:fd:10:e7:bd:5c:3a:aa:e4:cd:8a:d3:bc:8f:21:
8c:94:ee:a7:1a:65:22:00:70:3c:84:7c:3d:4c:7a:
70:fb:92:25:a2:a0:b8:6e:6e:99:0b:82:3f:6f:f3:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:67:E8:3F:B0:ED:28:A0:8C:D7:BD:DA:EE:38:F9:D1:76:0C:28:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9391746F88911EF9B438E8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.29.0/24
156.244.38.0/24
156.244.47.0/24
156.244.53.0-156.244.54.255
Signature Algorithm: sha256WithRSAEncryption
97:e6:0e:4e:7e:24:aa:eb:da:af:eb:e2:ea:3c:fb:78:12:ed:
4a:f4:ac:28:30:d5:7d:6d:f9:81:35:33:e1:a7:1a:4a:df:5e:
e1:ec:11:16:ba:12:c3:2b:d3:65:cf:7b:79:06:5b:0a:23:75:
0e:24:af:c5:9d:72:12:08:2a:50:88:f6:03:12:23:0e:c9:77:
a0:44:11:d5:a5:51:3c:81:2b:11:dc:b4:8a:7d:25:0a:d1:af:
dd:83:84:28:62:b8:52:9b:ec:d1:fa:63:f1:2e:3b:38:a9:c9:
8e:46:e4:18:84:ae:e4:4d:54:d2:65:ce:ef:d1:1c:b0:a4:94:
27:ce:0f:96:48:1f:0c:b1:3d:90:ef:97:20:49:18:86:b7:aa:
f9:a4:24:8d:e5:dc:fe:a2:4f:1b:95:45:13:95:2b:11:34:a1:
95:50:0b:c6:88:ca:26:85:16:6b:c1:41:e6:6c:00:51:db:68:
51:cf:bc:27:63:6d:b8:b3:ee:22:00:0e:96:d1:91:af:13:11:
1d:ab:04:f8:74:96:c2:77:4f:d8:59:8f:7b:39:a2:66:af:d8:
d1:ef:88:d1:7f:b4:78:2e:1b:46:34:fc:4d:dd:70:d7:cf:a7:
ab:e1:e6:b0:0f:95:9f:16:e9:4b:36:4d:07:0a:88:e8:5e:6d:
48:5d:2c:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:06 2025 by rpki-client