Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20F74B4F34211EF8454A780762E951A.roa
File: D20F74B4F34211EF8454A780762E951A.roa (raw, json)
Hash identifier: c0ZOvYN9RB33QlyJmX85QQ+6Qft4Jg1A0dhXCSnRTT0=
Subject key identifier: B9:FD:9A:87:A1:46:29:3E:4D:CF:9A:5C:79:C3:06:07:F5:04:51:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20F74B4F34211EF8454A780762E951A.roa
Signing time: Tue 25 Feb 2025 06:36:19 +0000
ROA not before: Tue 25 Feb 2025 06:36:14 +0000
ROA not after: Sat 19 Feb 2028 06:36:14 +0000
asID: 17561
IP address blocks: 156.249.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77190 (0x12d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 06:36:14 2025 GMT
Not After : Feb 19 06:36:14 2028 GMT
Subject: CN=67bd64e3-cd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:71:49:43:3c:21:65:ba:84:a2:0e:c1:6f:
74:8a:de:91:4d:a8:2f:10:c5:cd:a9:6c:1c:5f:d3:
5f:45:1d:6e:ea:12:52:19:e2:84:76:64:e6:4b:84:
dc:04:78:08:6b:87:50:fa:70:c8:2b:4c:ae:2e:19:
3b:0c:c6:0f:ad:6a:c3:93:0c:28:34:6b:3c:66:0e:
eb:cc:bd:28:63:53:53:60:79:f7:e8:7f:62:c1:59:
7d:ce:07:5d:40:a5:2c:11:28:86:0e:80:34:38:f7:
03:85:06:97:3e:dc:06:bf:12:28:6a:01:4a:1d:63:
49:4e:60:93:f6:81:eb:80:3c:c3:30:4e:fd:67:a5:
fe:3f:b5:bd:b7:0b:8d:8b:ca:26:8b:09:01:5c:ae:
08:7a:c5:e1:d9:2a:87:56:cd:eb:0a:d8:aa:70:0f:
e1:71:96:21:b6:19:44:13:b6:f5:98:71:79:1c:ea:
51:2f:83:79:a7:46:5f:06:c6:e2:de:d5:52:74:f7:
36:26:28:dd:f6:17:51:10:07:57:8a:26:17:48:f9:
18:1e:84:83:9f:2a:db:be:69:d2:81:a9:0b:6d:68:
aa:a0:cd:0c:91:74:cf:fe:da:de:eb:7b:ae:72:86:
f4:13:c0:da:62:da:dd:ef:30:29:b7:fe:34:b2:ef:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:9A:87:A1:46:29:3E:4D:CF:9A:5C:79:C3:06:07:F5:04:51:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20F74B4F34211EF8454A780762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.198.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e7:d7:90:d2:c0:4a:b0:e0:c3:10:e5:cc:c6:a2:b3:3e:3c:
e9:89:2e:b1:a2:14:76:0a:ae:79:6f:32:ee:4a:7a:93:4e:b6:
03:8a:b9:c0:2d:82:db:b4:f5:0f:87:17:95:53:42:21:2d:7f:
7f:d8:9d:92:84:25:f9:cc:15:66:a3:9c:f6:1d:3a:26:e4:73:
84:d2:b5:f1:ed:d5:5a:eb:c8:6d:67:da:7e:60:98:23:5d:93:
13:c4:6a:e4:c8:ce:c9:71:84:ce:b5:b3:ac:90:0c:64:06:1d:
9f:14:af:7a:22:7b:df:ff:e4:b0:4a:4c:17:31:59:26:58:fd:
e7:96:10:3e:8e:4f:b7:dd:35:b8:c0:69:31:68:b6:a9:eb:5e:
8f:04:28:38:9d:2e:b2:10:15:96:ce:5a:3f:cb:d6:d1:b8:a2:
49:b6:79:32:a9:bf:cb:a3:79:0b:7a:e1:4c:75:90:ab:10:6b:
a0:ed:93:12:59:1f:da:ff:ed:b8:82:f2:b3:33:42:be:c6:10:
b2:c3:75:33:cc:d3:f9:4e:f9:0d:52:55:2d:7d:d7:62:fa:9b:
f6:13:e7:83:ca:e2:1f:11:b4:0d:21:c3:3a:0f:e4:3a:f9:34:
8d:45:5c:1c:73:63:1d:49:02:64:20:a8:2a:f1:69:3e:30:20:
1d:1f:b1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:34 2025 by rpki-client