Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D463E706380F11F089CCCECDDAE4EC9C.roa
File: D463E706380F11F089CCCECDDAE4EC9C.roa (raw, json)
Hash identifier: wNTXbHhXFhlXZxZ3E15RvRVrERHBFfdpsWt0TwYxhzk=
Subject key identifier: EC:8F:41:6D:B5:4A:0F:9E:BB:41:B7:DA:C1:4B:75:6E:81:14:51:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01571D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D463E706380F11F089CCCECDDAE4EC9C.roa
Signing time: Fri 23 May 2025 19:55:09 +0000
ROA not before: Fri 23 May 2025 19:55:04 +0000
ROA not after: Fri 27 Jun 2025 19:55:04 +0000
asID: 57043
IP address blocks: 156.253.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87837 (0x1571d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 19:55:04 2025 GMT
Not After : Jun 27 19:55:04 2025 GMT
Subject: CN=6830d29d-61ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:5d:09:fa:22:6e:19:c4:66:d0:ca:c2:f5:
76:26:b6:76:97:09:e1:fb:04:51:1c:b4:b0:f0:14:
56:2a:3d:aa:85:d6:4b:fd:d9:52:db:66:6b:97:44:
29:07:9a:4e:15:ac:ee:56:0a:1b:57:a8:c3:78:a9:
29:14:86:cc:d7:65:43:f9:54:b4:a8:a7:3f:0c:aa:
f5:40:c2:3d:cb:b7:5c:b3:03:ec:dc:8e:c3:cd:35:
aa:c6:53:6e:25:e3:09:e9:5e:45:d4:69:25:62:a6:
7a:29:73:0e:19:a3:2f:37:b1:5d:76:d5:78:83:16:
ee:ad:3f:b9:97:c2:83:72:c6:30:28:c1:9e:0b:ef:
e0:0d:ac:bb:84:7c:56:c7:85:ce:7f:75:2d:ff:fb:
5e:6f:75:50:78:5e:14:35:56:f5:69:58:f1:6c:b6:
78:7d:08:3a:ac:25:1e:37:ab:3b:ea:a4:6d:c2:7b:
77:99:9a:88:fe:96:ec:32:e1:64:5a:3d:b0:33:73:
16:0f:1d:f0:9f:97:da:bb:46:07:c8:b2:c5:b9:bf:
18:ef:ae:64:17:39:38:cc:9e:09:ef:ff:5a:2a:b3:
09:48:36:98:0a:d5:19:f1:e6:16:5d:f9:3c:fa:19:
1c:37:21:e5:43:5b:97:4c:ca:ec:1e:13:6d:7e:75:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8F:41:6D:B5:4A:0F:9E:BB:41:B7:DA:C1:4B:75:6E:81:14:51:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D463E706380F11F089CCCECDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:43:0e:6b:9b:f6:01:a8:ee:59:d3:64:f4:e4:c3:d8:6b:79:
a4:26:62:9d:35:10:05:00:14:89:87:66:5f:67:a2:77:0d:ab:
8d:d9:92:de:ce:a9:85:12:23:91:f2:2e:2c:3e:25:8b:5c:c3:
af:83:38:a0:fe:cf:48:db:79:13:fe:89:3d:88:64:12:92:66:
5e:67:8d:09:d9:61:14:12:eb:67:ba:fa:c7:56:6b:66:e1:d3:
66:61:1c:76:c5:ab:7b:3f:27:47:19:37:f4:17:4f:32:bb:1a:
50:07:3f:31:79:c6:93:2f:5e:a5:77:c6:3f:3c:b5:57:97:89:
2f:36:4f:a2:2d:38:69:e3:24:b1:98:85:a6:ef:76:c2:95:4f:
ed:ac:1b:c0:0a:91:5f:4c:87:87:cb:9c:2b:6f:66:83:ab:83:
f9:b7:c7:d0:d8:93:28:5d:04:0f:85:26:ca:d6:51:e1:c1:eb:
e0:1e:25:d4:d5:d5:ca:64:81:c0:dd:fd:ae:f9:9c:56:ce:65:
2f:92:c8:b1:ea:ed:ef:5e:38:8a:89:df:6e:12:ba:5e:77:4b:
80:f5:48:81:43:b9:d3:da:cd:49:a0:fe:c6:64:d3:10:b0:9a:
ac:6c:e3:a4:3f:6b:e8:d0:48:03:c0:86:77:b7:3f:b3:e1:6c:
d4:b1:9a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:36:27 2025 by rpki-client