Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF7249A2F46311EFB86123BF762E951A.roa
File: DF7249A2F46311EFB86123BF762E951A.roa (raw, json)
Hash identifier: /GCdhhLZrjmbaYVF/OkueFt65WqKDRS9A9Dnp9l5bUE=
Subject key identifier: 9C:80:5E:56:FA:3C:04:F4:98:3D:48:BA:AA:B8:F7:34:77:81:D9:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013559
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF7249A2F46311EFB86123BF762E951A.roa
Signing time: Wed 26 Feb 2025 17:05:26 +0000
ROA not before: Wed 26 Feb 2025 17:05:22 +0000
ROA not after: Sat 19 Feb 2028 17:05:22 +0000
asID: 17561
IP address blocks: 156.250.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79193 (0x13559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:05:22 2025 GMT
Not After : Feb 19 17:05:22 2028 GMT
Subject: CN=67bf49d6-d27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:ca:20:3d:8f:73:17:6e:10:26:2f:92:b0:
f2:f6:4a:b2:e5:4b:3b:c5:08:be:a0:94:bb:72:04:
e3:e0:18:6d:50:6b:27:f6:34:82:0d:38:51:6a:c8:
03:32:7a:4e:4e:45:65:0e:95:62:a8:b8:ff:47:ff:
ba:f5:67:5c:c1:87:20:de:8f:82:3e:66:89:af:0e:
b4:14:23:bd:f8:b6:68:a0:35:f5:60:da:26:70:37:
9b:ba:52:ea:32:7f:14:c2:15:5a:f3:81:31:4f:55:
35:ef:de:cb:31:f4:7f:9e:ae:99:5a:06:67:37:75:
61:7a:ac:be:86:d9:cd:2b:d9:c9:dd:f9:9e:76:e6:
af:95:80:af:44:50:03:ee:15:6f:c2:43:6d:a0:b8:
b1:20:be:85:40:56:cc:06:e1:e8:37:17:34:5d:1e:
b1:ae:75:24:5e:92:3e:fb:ec:e8:32:d0:56:a6:5e:
06:e9:39:51:e0:01:f1:10:3e:e8:cb:0c:30:8a:36:
b9:f6:13:3b:de:77:02:96:d0:c9:ea:0d:5d:64:4f:
b7:00:9e:e6:26:dc:e7:b4:e6:6f:41:cb:a9:2f:60:
7f:c5:56:c3:75:6b:a0:b3:2f:af:d5:ec:f1:be:8e:
dd:8c:aa:31:58:64:ee:15:da:96:4b:8f:c5:2d:d1:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:5E:56:FA:3C:04:F4:98:3D:48:BA:AA:B8:F7:34:77:81:D9:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF7249A2F46311EFB86123BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.50.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0c:8c:38:90:5c:f4:d9:b1:cf:f3:7e:a6:11:b6:8a:1a:b4:
b3:cd:66:d7:80:97:ce:9a:a4:78:07:29:7b:eb:c3:3d:8f:cf:
43:c0:73:7d:7a:f2:33:80:29:cd:cb:39:0d:b0:40:71:50:92:
bb:82:74:dd:f4:3c:db:f2:63:3f:c9:75:e4:b8:6f:f9:d0:6c:
37:eb:e8:be:4b:4d:ca:f8:24:54:91:ca:af:4d:80:40:d0:00:
d6:5f:a2:ab:53:13:a9:df:bd:25:42:41:7f:5e:aa:d7:d9:f7:
62:91:0d:d2:bb:bf:80:c4:13:b5:66:6c:d6:a6:0f:e0:b0:35:
3b:0d:af:f8:ec:f4:93:8c:f7:d4:b3:9a:79:6d:1e:66:f0:11:
2a:b5:9f:41:64:45:3f:6a:63:2b:6a:90:49:fc:21:16:c9:ae:
40:05:05:63:f1:c1:d2:7f:60:58:01:f0:f3:1b:b5:1b:20:cf:
fc:72:17:cf:8a:47:72:c9:ae:00:eb:9e:3d:de:28:f0:18:c5:
f8:57:5a:94:6a:06:be:77:25:72:67:26:83:7b:20:a3:c5:38:
e9:31:32:e7:3f:93:6d:4a:07:a5:50:ba:d4:93:6e:fb:88:30:
73:67:5b:76:ae:68:c3:b8:fb:5b:53:82:f3:52:31:30:96:5c:
9c:d7:3b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:32 2025 by rpki-client