Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED26EB60062A11F08531106D762E951A.roa
File: ED26EB60062A11F08531106D762E951A.roa (raw, json)
Hash identifier: g+YYSo/jfnL6TbVbDYdoitlZKaCRAdVUeku/As5mLb8=
Subject key identifier: 67:2F:D8:34:D1:1D:5A:E6:AD:92:90:45:B1:46:FA:98:E8:A5:A6:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014772
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED26EB60062A11F08531106D762E951A.roa
Signing time: Fri 21 Mar 2025 08:03:08 +0000
ROA not before: Fri 21 Mar 2025 08:03:05 +0000
ROA not after: Mon 05 May 2025 08:03:05 +0000
asID: 264750
IP address blocks: 156.248.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83826 (0x14772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 21 08:03:05 2025 GMT
Not After : May 5 08:03:05 2025 GMT
Subject: CN=67dd1d3c-0a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:a8:2b:2d:c1:42:e2:e6:90:52:e5:be:9c:
1d:c1:f7:60:57:6a:99:72:2e:fa:8d:f1:85:3e:2a:
4d:4f:7f:a5:a6:5c:99:30:2c:68:e6:a2:e9:96:3a:
27:ab:ff:38:a8:d3:59:ed:29:77:4b:8c:29:1c:97:
50:28:0f:60:43:c4:64:f2:02:aa:57:57:3e:30:9a:
46:0d:ff:8d:75:18:8b:7e:70:29:1d:73:36:c2:e5:
9b:f8:5d:1f:a4:4d:1d:e9:44:0e:94:7b:55:16:0f:
e8:2f:ee:ec:60:d6:72:51:f0:d7:f3:33:e0:20:87:
98:f5:27:26:99:e9:9a:71:d6:ca:6a:c3:db:58:1b:
06:3b:9b:3d:1c:9a:56:62:1d:11:ae:43:88:61:fa:
b4:f5:2f:eb:b9:45:56:db:f0:3f:df:d8:87:16:bc:
93:bc:03:1c:15:69:09:ce:86:3b:28:20:52:4f:42:
a1:28:68:06:3c:5e:6c:de:32:f5:50:7b:10:7f:c8:
39:9d:bf:ad:cd:fe:08:c3:94:c8:e4:8f:db:d5:e0:
d6:67:77:5c:3e:3a:2b:c0:5c:cc:10:4a:6e:b1:25:
de:34:e7:e1:b5:04:fc:e8:ca:50:15:f7:39:d7:aa:
e6:13:27:19:58:0a:5b:b7:b4:57:22:47:12:d6:fb:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2F:D8:34:D1:1D:5A:E6:AD:92:90:45:B1:46:FA:98:E8:A5:A6:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED26EB60062A11F08531106D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.192.0/18
Signature Algorithm: sha256WithRSAEncryption
38:7d:35:f3:76:6e:40:4f:06:69:08:cf:99:49:d2:4a:27:82:
e7:58:2c:05:02:da:d8:f0:35:44:81:a5:0b:81:e8:ba:71:2f:
4c:0c:16:ac:8a:79:dc:57:ba:22:54:f5:7f:e6:d0:4c:2a:b3:
35:d5:31:03:2c:58:a5:83:ab:f6:92:43:38:ae:96:9b:6e:1d:
26:5b:5b:55:f7:5f:9a:cd:45:f5:a0:20:e5:19:40:bf:58:69:
04:b6:03:14:fe:d7:b9:19:eb:07:00:e5:95:d7:17:13:9e:b7:
d8:82:51:80:ad:db:99:94:ea:a5:60:b1:0f:43:13:53:e2:fc:
ab:d4:71:68:40:78:33:0e:97:de:2e:e6:b4:04:d4:e0:a9:ef:
88:54:54:39:59:df:52:e4:8b:b6:ac:a6:c9:ff:63:2d:2c:73:
a1:76:5a:02:fb:3b:79:77:56:ed:0d:ed:4a:61:35:89:e1:e9:
7c:f8:11:2d:1c:5a:68:07:a7:39:2d:35:4f:fc:28:e2:2e:8d:
47:09:2c:83:56:7c:1a:d3:b4:a6:5b:75:0c:98:ba:68:60:07:
5d:fa:7c:08:ee:3d:ff:51:b2:ae:fc:db:44:cc:05:71:1a:d1:
73:42:90:b6:2e:14:16:20:f1:81:65:78:62:e5:f5:8c:d6:f4:
63:e6:43:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:29 2025 by rpki-client