Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1429278F46411EF9A795549762E951A.roa
File: D1429278F46411EF9A795549762E951A.roa (raw, json)
Hash identifier: M16tnyC9gk9iiOxb3pl9t15IzJAwJG0CgHwKwIijgnY=
Subject key identifier: 32:72:60:8C:08:10:E0:AD:51:0C:DF:D6:8D:51:F2:42:0F:30:D0:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013569
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1429278F46411EF9A795549762E951A.roa
Signing time: Wed 26 Feb 2025 17:12:12 +0000
ROA not before: Wed 26 Feb 2025 17:12:08 +0000
ROA not after: Sat 19 Feb 2028 17:12:08 +0000
asID: 17561
IP address blocks: 156.233.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79209 (0x13569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:12:08 2025 GMT
Not After : Feb 19 17:12:08 2028 GMT
Subject: CN=67bf4b6c-ac29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:7a:93:8b:c3:61:c5:41:83:50:6c:3b:10:
dc:35:ff:9b:9b:98:0a:8b:2f:b7:47:49:5a:05:9f:
cc:59:e4:72:38:5d:90:c6:72:c3:b3:fa:63:a7:31:
4c:fe:ca:a3:87:f0:fb:b2:24:85:57:3a:2d:fe:8d:
90:59:63:51:32:7b:cd:42:41:3e:b1:a7:73:bf:3f:
55:2b:e8:bc:e6:b4:d9:06:99:30:87:5f:07:5a:e9:
6f:78:85:d0:9c:05:98:08:99:0c:6d:24:a9:71:b0:
99:c0:f5:dd:d9:1d:7f:28:6a:a5:c1:dd:7a:0e:97:
06:7f:c4:58:b3:09:56:94:64:8c:11:c9:39:d0:50:
e2:78:d7:09:d8:26:49:21:e1:37:c9:03:26:db:54:
37:a1:ea:23:0a:4a:83:62:be:d3:f7:99:fa:14:f5:
18:d1:a7:ab:d5:a9:b3:37:f6:22:16:33:90:71:53:
34:b3:34:5c:6a:4b:4c:0d:79:6d:e5:a0:9d:ab:f4:
91:47:d1:17:f8:bf:1d:00:de:ab:08:ea:16:f8:0d:
08:70:e1:8f:93:fb:ec:74:ed:32:cf:a3:f5:ee:db:
1c:8c:77:a9:6d:7f:30:6b:83:57:1f:e4:a0:7a:c5:
a7:5d:30:22:2d:8e:ba:d0:13:7e:2e:55:43:33:69:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:72:60:8C:08:10:E0:AD:51:0C:DF:D6:8D:51:F2:42:0F:30:D0:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1429278F46411EF9A795549762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.56.0/24
Signature Algorithm: sha256WithRSAEncryption
76:39:c2:7b:33:48:ce:af:ad:b9:88:37:f7:96:63:4d:e2:9b:
02:58:1c:45:dc:3b:8d:56:98:99:cf:7f:ca:93:a4:f4:cb:0d:
32:51:3a:a6:37:25:17:7c:b6:fe:27:a9:13:61:58:1a:ce:b8:
17:e0:af:a9:f3:ae:d7:fd:cf:27:43:4c:7f:6e:14:9e:40:f4:
ba:01:56:b2:e9:67:0e:35:51:31:d0:cf:7e:fa:88:23:7e:ff:
17:8f:34:af:97:91:73:c4:2f:94:16:e9:6c:17:d3:5e:c1:ea:
9e:a6:42:7a:3d:be:d4:47:3b:1e:ad:eb:48:c2:d6:03:27:8c:
56:36:e0:f2:8a:f8:24:2d:10:a2:f8:56:ef:a7:ab:39:69:e6:
bb:9f:ea:74:47:73:8d:e4:1f:67:b5:60:eb:0d:a5:ac:9b:77:
b7:26:8b:eb:2a:c0:99:bb:db:9a:2d:59:3f:39:18:30:7a:59:
23:90:0d:d6:e7:45:99:bb:e9:91:aa:3f:19:d2:85:e6:9c:f3:
3b:ba:4d:39:a4:7f:cc:df:cf:b8:cb:27:b2:f3:01:41:a2:cd:
10:a5:a2:a6:ba:97:11:0d:da:48:e7:1a:f9:10:d3:5a:64:d4:
29:ee:23:4e:09:cb:be:6d:dc:f1:f9:15:1b:0f:d6:fe:63:ad:
0e:50:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:15 2025 by rpki-client