Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5B523CCED0811EFB7706A51762E951A.roa
File: F5B523CCED0811EFB7706A51762E951A.roa (raw, json)
Hash identifier: 4ATDtry8A1qjJix0+RvQV2qxrUIbFQ63DjXxka3B5bE=
Subject key identifier: E1:27:7B:2B:3F:D8:60:3C:C4:61:8B:CE:14:DF:0A:0C:DD:85:0C:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012481
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5B523CCED0811EFB7706A51762E951A.roa
Signing time: Mon 17 Feb 2025 08:27:01 +0000
ROA not before: Mon 17 Feb 2025 08:26:57 +0000
ROA not after: Fri 15 Aug 2025 08:26:57 +0000
asID: 55020
IP address blocks: 156.254.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74881 (0x12481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 17 08:26:57 2025 GMT
Not After : Aug 15 08:26:57 2025 GMT
Subject: CN=67b2f2d5-ce69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:9c:dd:0d:18:ae:8d:2d:c2:f3:d5:b2:1d:
9a:67:0d:24:8c:38:86:00:8f:f7:06:4f:cb:10:1f:
c8:7a:cb:15:74:f5:63:db:40:6e:15:34:b6:96:61:
07:c5:d7:ec:fe:56:e8:74:bc:f8:d9:11:c3:bd:af:
13:02:cb:a7:85:d5:98:04:56:18:5d:9c:00:fc:6c:
a7:81:62:1d:a0:e2:4a:ff:78:f2:59:08:80:07:10:
00:6f:f2:91:32:8c:19:7f:9a:2c:3e:91:c2:96:c4:
ba:ee:59:6f:cd:c8:23:e5:b3:3a:7b:a7:54:70:d9:
ac:86:40:ab:94:59:f2:f3:e2:41:33:8d:26:d8:49:
f7:c4:23:77:55:21:49:0a:05:c5:ed:e7:aa:f4:dd:
d5:07:ec:33:e1:92:5e:1e:04:c4:3a:e8:83:59:6e:
2c:76:00:e9:ba:70:a7:48:af:46:08:b3:da:a2:b1:
b3:15:50:c6:af:f5:32:dc:26:b8:79:37:b1:aa:c0:
92:79:4c:2c:2e:d4:41:53:c0:b1:bf:e7:c7:be:33:
77:09:c3:e6:cf:68:3a:7c:79:c7:e7:1a:e9:a6:9b:
f2:fe:9e:b2:5a:8c:e4:c1:b3:c8:a7:f8:72:56:27:
50:d9:ba:26:fa:bb:7b:52:19:4f:63:14:a7:2f:77:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:27:7B:2B:3F:D8:60:3C:C4:61:8B:CE:14:DF:0A:0C:DD:85:0C:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5B523CCED0811EFB7706A51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:2f:69:32:82:bb:0b:c3:aa:30:71:63:24:50:d9:8a:ec:95:
30:67:81:db:01:e8:74:67:90:d1:fd:f9:0c:66:dc:06:50:ac:
0f:3c:6e:b2:93:df:5d:97:a7:1d:62:2e:e1:4c:9e:d8:90:97:
ca:1d:c8:a4:4b:45:49:89:87:46:5a:b7:21:d0:30:fb:e8:8f:
56:0a:4f:1b:cc:15:b9:90:fd:9a:18:fb:4a:00:86:19:8f:11:
aa:02:77:a8:a2:3d:1e:e7:c4:82:27:c7:00:a7:e5:cf:e0:c8:
0f:6c:d5:6f:be:7d:9f:e4:8a:61:55:2c:3b:1f:98:93:81:c7:
ab:2a:20:01:54:92:c5:f0:33:cf:77:79:12:f0:52:eb:88:a8:
3a:ed:2f:ca:df:e4:3a:e7:af:5c:10:7c:da:23:98:76:9e:e7:
95:d9:af:cc:ad:d4:79:5e:2e:21:7b:90:58:c7:34:12:ca:a0:
74:1e:da:9d:89:ca:6b:e4:d4:01:a6:7f:3c:bc:9e:68:6e:8f:
bb:7b:15:8d:50:34:ba:a7:2b:e7:be:b2:b9:e0:4c:65:67:af:
ed:20:25:62:aa:c1:85:8e:b3:85:c5:5b:42:cb:10:c3:88:55:
0f:44:6e:d4:25:d3:74:ce:5d:cc:6c:77:40:57:36:91:40:88:
9f:fb:d9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:04 2025 by rpki-client