Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB75A3CCF34E11EF942DA254762E951A.roa
File: EB75A3CCF34E11EF942DA254762E951A.roa (raw, json)
Hash identifier: BZBU8Kiw7hwqJFJSx2L6/s13diiIoD2tC/xEvTgpEws=
Subject key identifier: 18:4E:73:8A:71:F0:1C:92:01:F1:75:4C:69:8F:A5:8D:90:07:FD:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB75A3CCF34E11EF942DA254762E951A.roa
Signing time: Tue 25 Feb 2025 08:02:56 +0000
ROA not before: Tue 25 Feb 2025 08:02:52 +0000
ROA not after: Sat 19 Feb 2028 08:02:52 +0000
asID: 17561
IP address blocks: 156.249.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77276 (0x12ddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 08:02:52 2025 GMT
Not After : Feb 19 08:02:52 2028 GMT
Subject: CN=67bd7930-d9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:c5:e7:d0:18:c2:18:f6:b9:ac:be:46:80:
58:a5:33:a8:57:d9:dd:78:c9:9b:37:d0:cd:05:4f:
1b:02:1a:22:7b:c0:3f:ae:8e:70:82:8d:03:90:57:
65:a1:52:ca:8a:2a:21:08:1a:03:79:b6:61:76:82:
d4:8d:c9:51:19:b1:17:dc:15:b1:e2:25:d3:75:de:
04:cd:4d:d2:15:87:a2:32:22:fa:e7:d9:6c:07:02:
c4:fd:53:77:12:13:3e:72:58:6d:14:da:fa:93:6d:
a2:ae:50:78:29:98:ca:dc:03:e7:1b:34:80:79:e0:
d6:41:60:0c:c9:38:15:3b:99:33:09:9c:79:a9:6a:
6f:17:ab:55:1c:9d:f9:ae:c4:e2:14:b8:f8:dc:65:
17:6c:14:9f:29:ac:a6:26:0d:f0:6a:c2:a1:5f:1f:
62:f2:74:99:08:5b:01:11:78:a6:98:fe:12:7d:ad:
ad:a0:01:fc:9b:b3:22:bb:a1:27:5e:ca:9b:20:d5:
5a:1c:7c:68:75:48:8d:0a:36:25:80:cb:47:b1:1c:
25:be:13:da:e7:2d:8d:ea:0e:d2:e7:b9:65:77:f5:
fd:73:bd:d4:3b:22:f5:4a:25:2e:9c:17:eb:e3:42:
9f:9a:5b:b6:8e:bf:fb:3c:6c:83:d2:ea:5b:f5:49:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4E:73:8A:71:F0:1C:92:01:F1:75:4C:69:8F:A5:8D:90:07:FD:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB75A3CCF34E11EF942DA254762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.241.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ad:6a:19:50:61:8e:50:a9:20:5a:e9:bb:8a:db:09:7c:1e:
d4:ea:69:ee:3a:f7:29:f3:e9:40:4d:a3:ad:36:44:df:b2:da:
16:ee:f0:85:ce:a4:3b:6c:35:2a:dd:4a:53:26:50:86:7f:d4:
81:94:f5:6e:6f:cf:35:12:d9:ce:00:01:13:98:91:a8:10:56:
69:17:d9:4b:6a:78:6f:2c:a9:d7:ed:6b:45:b5:7c:3f:0a:8f:
fd:80:b4:9f:fc:48:d8:e8:37:a0:10:35:7e:fb:0f:ca:80:73:
4c:c5:8d:f2:b0:f9:b6:80:ff:b2:30:b9:02:94:55:fa:90:06:
0c:be:97:c6:e5:4d:63:3e:ad:1c:9e:0d:6b:03:41:a2:09:0e:
4a:58:d3:d4:e3:13:25:62:2e:ee:7a:76:85:6d:61:46:98:d4:
41:88:23:cb:e3:70:bc:54:52:58:c4:5d:b1:51:ca:56:5d:7c:
33:4d:32:0f:aa:db:41:03:55:68:17:ba:21:9e:7d:11:5c:71:
35:37:65:e8:0d:18:9b:73:1e:f8:e9:b2:14:d3:ee:ab:a0:32:
1c:28:fa:77:91:9f:73:57:49:30:39:44:d4:85:34:8f:c1:2a:
f1:2b:51:10:94:91:d8:16:c0:bb:fc:0f:c8:44:99:80:5e:4b:
35:a8:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:16 2025 by rpki-client