Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2FAF13AFF3711EFA9E0136A762E951A.roa
File: E2FAF13AFF3711EFA9E0136A762E951A.roa (raw, json)
Hash identifier: U34Xxm3aR7o5dLXh0MfYTg0WEGb45MJwBYfJkU8vv/Q=
Subject key identifier: 31:65:0E:03:F8:84:3F:15:8B:D3:30:59:30:B9:CB:67:7F:7E:C3:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014561
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2FAF13AFF3711EFA9E0136A762E951A.roa
Signing time: Wed 12 Mar 2025 11:48:17 +0000
ROA not before: Wed 12 Mar 2025 11:48:13 +0000
ROA not after: Thu 08 May 2025 11:48:13 +0000
asID: 149014
IP address blocks: 156.236.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83297 (0x14561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 11:48:13 2025 GMT
Not After : May 8 11:48:13 2025 GMT
Subject: CN=67d17481-f21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:40:35:4a:24:8a:8c:c0:5d:9f:47:19:44:
fe:99:ee:a5:ba:cd:e4:a5:50:94:55:fc:06:2e:aa:
23:8e:69:1b:23:6a:a6:8a:6c:ea:c0:5d:8b:f2:be:
46:7b:96:93:22:bd:78:54:43:83:08:d1:23:6f:ec:
32:b2:92:a7:eb:7f:05:7c:be:d0:01:6f:f1:56:60:
25:48:41:18:d7:bc:e0:c5:f8:da:bb:e5:b0:55:79:
b4:d1:10:90:9e:dd:f5:65:ff:aa:34:ce:9e:f3:dd:
ea:16:f1:2b:46:33:10:df:38:84:ae:fa:04:01:95:
74:97:88:9a:5d:ac:50:1b:41:0f:6a:15:cc:56:0b:
ff:9a:d6:89:52:59:bf:ab:a5:71:e9:44:99:ba:2b:
41:ef:e2:ae:cb:90:a4:52:45:e2:62:9a:ef:f9:e8:
9a:4e:4f:5d:b2:c5:3b:f9:60:ba:fb:22:07:ee:b0:
3c:3f:dc:d8:15:f7:e3:8e:c7:58:50:12:f4:c2:10:
39:3c:37:ca:aa:65:97:61:46:01:f7:89:bb:a6:49:
8a:cc:08:1c:af:f0:df:b8:a7:59:69:27:79:43:99:
6e:00:bf:4e:c4:b3:23:82:e5:50:1c:1c:0e:c8:b8:
02:c0:b5:51:59:1f:70:ce:6a:b4:c7:b4:ac:a9:60:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:0E:03:F8:84:3F:15:8B:D3:30:59:30:B9:CB:67:7F:7E:C3:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2FAF13AFF3711EFA9E0136A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.108.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:a0:7b:b0:00:d1:51:ff:f1:2a:f9:ad:c2:f2:8a:fb:a6:67:
f3:6a:c4:ed:31:95:b4:62:f9:66:56:35:34:12:21:4b:a7:15:
8e:fd:61:6d:bf:ad:e1:c8:2e:d9:bf:be:25:1e:df:f2:8b:04:
4e:b4:f6:02:13:df:11:07:86:8c:f7:fa:3d:73:8a:1c:f5:a2:
17:bd:b6:9d:e3:5c:77:34:7f:60:0e:13:a2:7c:53:3f:68:ee:
6f:72:94:34:67:e3:23:6b:68:34:33:ff:48:bb:63:07:37:34:
2d:cf:09:1d:36:34:28:08:1d:c3:87:2b:02:6b:71:99:27:29:
92:14:8d:7b:57:f1:b4:f4:30:d1:48:0a:a8:d8:31:4f:44:84:
4c:61:53:fe:1a:03:8e:01:31:d3:bf:bc:a6:b2:2e:e8:fc:28:
cb:ca:f9:56:c0:0c:51:fb:12:75:a0:48:2e:b3:4d:e9:46:af:
ee:a7:37:77:e2:11:99:c6:d7:4a:68:c6:c2:48:ec:cf:1f:75:
51:f7:6c:5b:8a:c4:bc:df:a8:60:0d:64:28:d1:83:38:b3:ac:
0e:a8:5e:c5:e9:6b:15:73:8a:9b:af:88:79:f8:a2:fb:c8:3a:
29:86:e3:30:8c:95:7e:33:e0:3f:6e:79:a7:90:69:bc:db:52:
4a:bd:1a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:08:33 2025 by rpki-client