Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7F69BAAFF3611EFAA3D6D63762E951A.roa
File: D7F69BAAFF3611EFAA3D6D63762E951A.roa (raw, json)
Hash identifier: Zk/DOYAmgUaLRWFZiKN4Z0qXNB7DDwjiIi2ajX6OL5s=
Subject key identifier: 8F:32:E2:67:A9:9C:14:5C:DE:4D:E6:B8:FE:5C:81:05:4B:70:BD:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01455D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7F69BAAFF3611EFAA3D6D63762E951A.roa
Signing time: Wed 12 Mar 2025 11:40:49 +0000
ROA not before: Wed 12 Mar 2025 11:40:36 +0000
ROA not after: Thu 08 May 2025 11:40:36 +0000
asID: 137443
IP address blocks: 156.236.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83293 (0x1455d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 11:40:36 2025 GMT
Not After : May 8 11:40:36 2025 GMT
Subject: CN=67d172c1-4006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:c9:88:b9:71:f7:86:73:1b:d9:0d:07:71:
6a:80:02:4b:98:6e:7b:95:d6:78:a6:29:e4:c2:e0:
05:89:0e:d1:36:b7:eb:24:de:ae:18:d2:1a:d8:56:
33:02:cf:36:86:22:e3:b2:40:45:87:dd:84:50:58:
ed:5f:0b:3f:9c:e1:db:58:1c:38:4a:bc:71:32:08:
5a:3c:95:e7:c2:6e:c5:49:b6:3f:8a:2d:a4:25:c6:
01:35:e9:36:12:c6:14:72:ee:46:36:fe:c3:40:7e:
c8:63:5b:eb:43:eb:de:ea:71:1e:43:19:31:a5:5a:
77:c3:29:88:8f:1b:15:ed:ba:15:44:91:f9:2b:32:
c9:3d:bd:ed:9f:4f:1a:56:17:ea:ff:5b:4d:10:c3:
0b:03:0b:18:f2:39:94:67:13:88:90:6a:8c:90:1d:
ff:7a:b8:95:10:32:8a:42:89:73:09:44:ac:93:2f:
00:64:7a:71:2d:f8:6d:39:35:46:a8:06:60:8d:75:
39:42:46:fd:07:47:7b:24:64:78:15:35:57:ce:ab:
df:c8:3f:e8:18:e9:e8:2a:59:60:88:ad:75:d3:87:
6a:40:14:e2:48:5a:59:8e:17:e7:b8:72:21:4f:44:
db:4d:24:ee:83:ac:ef:73:e8:f0:4d:28:61:a4:ee:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:32:E2:67:A9:9C:14:5C:DE:4D:E6:B8:FE:5C:81:05:4B:70:BD:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7F69BAAFF3611EFAA3D6D63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:6a:6b:89:e7:b4:18:5c:06:26:b1:f0:17:c5:7f:6d:15:d7:
e2:4b:83:b3:e0:5e:2b:71:f7:31:43:1a:02:6c:54:13:70:e6:
25:f2:c4:5b:d5:85:c5:ad:25:77:6f:25:f9:26:d7:36:5e:15:
8c:da:13:8c:bf:9d:31:bb:e3:7a:87:2a:66:76:90:31:21:54:
a5:d9:bc:fd:d2:c6:cd:96:c5:9a:1b:c0:69:81:50:5e:9d:07:
14:59:d4:55:15:ed:e6:09:18:7c:23:15:d7:2a:78:21:e0:68:
37:c3:6e:46:dd:42:29:de:b9:9f:84:71:a2:6e:1a:2a:4f:54:
8b:9f:8a:46:2f:d2:4a:01:3c:04:8c:c0:70:3d:c1:76:3d:cb:
d1:ad:a8:a1:0f:75:b7:00:ec:4f:26:27:8f:f9:40:5e:05:ca:
7a:58:c6:0a:0e:b8:3b:8e:49:d0:81:7f:e4:7a:22:e5:b8:34:
d4:7f:bb:e0:4c:d5:aa:b8:39:a0:e7:9c:a9:37:d1:8b:fb:59:
54:42:a7:80:fc:0d:7b:a2:4c:7b:57:7d:bc:02:f7:bc:f7:38:
29:e2:71:bf:ee:6c:f2:0f:07:67:63:46:4a:dc:71:61:34:ca:
27:0f:d6:28:b7:73:6f:a0:c2:ff:c5:63:c8:18:1e:bd:e0:46:
b1:10:eb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:09:02 2025 by rpki-client