Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEC14FCF43211EFB9AF4168762E951A.roa
File: CBEC14FCF43211EFB9AF4168762E951A.roa (raw, json)
Hash identifier: 0p0EFPRstHVxFkgVETtDoo2gqe9jdSMWBiKWuF//lFo=
Subject key identifier: C0:24:75:68:A3:90:49:23:00:4C:90:87:C3:2B:9A:DE:03:29:4F:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEC14FCF43211EFB9AF4168762E951A.roa
Signing time: Wed 26 Feb 2025 11:14:08 +0000
ROA not before: Wed 26 Feb 2025 11:14:02 +0000
ROA not after: Thu 19 Feb 2026 11:14:02 +0000
asID: 984
IP address blocks: 156.252.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78250 (0x131aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:14:02 2025 GMT
Not After : Feb 19 11:14:02 2026 GMT
Subject: CN=67bef780-804c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:a2:34:a6:41:20:2c:98:8d:88:f3:92:eb:
48:55:3f:d0:64:72:4c:44:c5:6f:79:20:72:49:b5:
34:f5:2f:ac:c8:15:0a:a8:7e:51:a3:d2:27:b1:a7:
b5:c9:8d:26:c2:f7:1f:dd:d1:83:a1:3c:92:eb:b9:
2e:3e:3c:43:5b:e1:10:8e:c7:5a:c9:c2:52:a4:4c:
6d:cf:02:3c:19:eb:8d:af:e4:9e:5c:f0:24:51:09:
97:a5:80:ce:61:48:1a:01:21:48:42:3a:6b:bb:29:
c5:bd:86:bb:13:44:49:60:83:2b:73:99:ed:cc:65:
01:7f:de:41:6b:4c:8a:be:38:2e:84:dd:ee:55:c3:
0f:7e:c9:30:4a:cf:67:14:64:ed:98:2b:fc:70:54:
78:1e:77:35:c9:d9:3c:5a:14:23:62:7a:cf:47:e3:
1a:b8:c5:92:3d:92:08:16:9c:37:dd:b3:61:77:80:
42:1a:c7:43:ae:05:5d:40:c1:35:a7:0f:fc:e9:a5:
0e:48:6f:46:4b:3a:52:47:6f:4b:f2:8c:51:01:1d:
87:a0:a6:cf:5e:1f:c6:4e:83:6e:59:41:34:28:e2:
d4:67:ea:c5:ec:67:1f:37:3c:a4:93:64:18:e8:26:
f2:f6:16:ea:86:05:27:79:7a:54:1c:be:06:f6:94:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:24:75:68:A3:90:49:23:00:4C:90:87:C3:2B:9A:DE:03:29:4F:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEC14FCF43211EFB9AF4168762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.110.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9d:20:34:6b:5c:5c:ea:7f:e7:f0:37:38:1e:3f:46:01:84:
ef:7d:38:ee:8e:b1:61:5e:0e:d4:2d:fc:64:c7:d2:15:7c:96:
0d:29:35:bc:5f:c0:1f:f7:be:41:41:06:ca:1c:61:fe:e3:ed:
36:05:50:7d:29:45:a0:88:07:85:2f:6f:b7:f8:60:23:89:d3:
62:df:b8:35:8f:39:fa:83:68:f7:74:6b:e7:c2:93:42:e5:83:
27:37:c3:83:83:9b:40:c4:58:1c:24:76:78:40:3e:42:d1:3d:
9b:ef:ee:87:6d:7c:54:c6:be:c6:09:16:d1:95:26:0e:3b:4f:
fd:b6:62:a8:37:88:4e:54:96:bd:fb:a5:bc:c2:1d:06:08:9b:
91:c7:66:6d:57:0b:8b:87:f0:85:1e:ea:a3:24:87:46:bb:2a:
41:ab:62:3f:13:48:b2:eb:38:b0:ef:e2:ae:6f:40:21:7a:35:
26:06:2e:1e:36:9c:2f:4e:6a:4f:22:f8:cc:bb:af:b8:79:dc:
e1:3d:93:1f:e4:dc:0a:7f:2a:a6:80:31:0b:11:0c:01:77:4d:
76:54:1a:cb:8b:93:d5:a9:a3:84:64:21:85:16:dc:46:97:47:
0e:0b:72:ba:b8:c2:7a:ba:5e:6e:80:03:de:30:83:cb:ac:a6:
91:84:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:06 2025 by rpki-client