Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D58F6DB400BD11F0A287BFB4762E951A.roa
File: D58F6DB400BD11F0A287BFB4762E951A.roa (raw, json)
Hash identifier: 8+RpY8S0ZgDlP1Balu8TqnEYRIBhdhsk3C0e31RMWQc=
Subject key identifier: 2C:60:55:3A:D9:89:61:4C:42:C4:B1:16:04:84:BE:9D:85:13:E2:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D58F6DB400BD11F0A287BFB4762E951A.roa
Signing time: Fri 14 Mar 2025 10:19:38 +0000
ROA not before: Fri 14 Mar 2025 10:19:34 +0000
ROA not after: Tue 22 Apr 2025 10:19:34 +0000
asID: 137899
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83422 (0x145de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 10:19:34 2025 GMT
Not After : Apr 22 10:19:34 2025 GMT
Subject: CN=67d402ba-afd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:73:0f:df:75:b5:60:44:88:59:cc:6b:b0:
2a:63:d1:59:46:25:12:b0:b2:e5:c6:80:16:b2:f4:
8c:d4:1b:92:f9:a9:8d:0a:ef:eb:9e:49:e5:78:a1:
81:80:51:18:85:d3:07:cf:5f:7e:28:1b:e8:8c:81:
5b:ee:78:31:a7:87:19:58:e1:4a:c4:ec:32:8f:8a:
11:f6:63:a9:d6:99:60:b3:c9:73:b2:02:f6:84:7a:
af:6c:32:82:e1:df:d9:22:90:75:d9:3d:11:8e:d3:
27:ab:2c:bb:b6:f7:c2:c5:ef:5c:c2:89:4c:23:87:
58:b4:22:25:fa:c3:23:51:45:4d:1c:f7:62:fa:fd:
b7:a3:63:13:29:57:d2:21:23:79:07:6a:40:7e:40:
56:8c:90:3f:31:26:ea:2f:52:28:a0:59:2d:a1:79:
b1:fa:bf:ff:ba:eb:d0:7c:d0:cc:75:05:ca:18:b4:
35:77:50:fb:4d:d8:4b:87:55:2a:8e:f2:e0:00:2f:
01:d1:c3:a6:d4:e1:db:15:28:2d:3f:e9:d5:fd:ee:
2d:59:63:e1:d9:54:90:2a:4a:6b:5d:eb:9e:aa:17:
76:f3:be:42:72:db:4f:73:dc:43:4d:6d:6e:61:84:
a4:59:0f:37:21:b6:c4:ca:26:60:c0:13:ca:c7:1b:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:60:55:3A:D9:89:61:4C:42:C4:B1:16:04:84:BE:9D:85:13:E2:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D58F6DB400BD11F0A287BFB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
67:69:ad:c9:a0:f5:5b:6e:97:04:41:c3:5c:80:f3:40:6b:0e:
dc:86:10:58:83:1f:54:16:0f:54:79:d2:ea:d1:7f:a2:d4:d7:
1a:6d:2b:af:aa:e4:dd:91:df:ff:3d:48:60:3b:18:11:20:ba:
36:89:b3:63:d8:e0:f7:9c:2b:1a:26:3d:5e:23:15:b4:ca:05:
94:cf:3f:21:cb:c5:83:1d:30:29:fd:42:43:4e:68:3c:57:c9:
dd:0c:dc:44:32:0c:0d:00:36:b9:a4:c8:e0:5e:54:6d:3a:0c:
75:62:9c:0f:b2:95:85:92:18:64:e9:09:00:95:07:bf:fa:c4:
3a:0c:d9:f7:8a:77:e2:3c:80:fd:3f:71:f4:fc:02:b1:f0:6e:
f0:46:d4:5e:01:89:2d:1c:4d:28:f5:7a:2d:c8:9b:fd:cb:f2:
a7:37:6a:0b:33:b3:5f:26:01:c2:d5:0a:ee:f6:a3:03:56:63:
68:5e:81:e1:77:f1:aa:cf:b8:81:8b:e6:4a:2e:3e:c6:f0:08:
44:d7:d4:1c:6b:ab:33:c2:7a:fa:ff:4e:09:68:7b:f2:74:45:
9e:48:e6:22:7c:f2:2f:70:00:73:d8:7f:03:9d:6e:ab:37:2a:
c3:e2:5b:0f:71:25:82:2b:de:2d:f7:ec:f6:47:e0:2f:c8:eb:
f0:2c:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:19 2025 by rpki-client