Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F897E4A4F45F11EF88A460A6762E951A.roa
File: F897E4A4F45F11EF88A460A6762E951A.roa (raw, json)
Hash identifier: gwPlD8A9hXiMVU5+1u0Ow6tDWPBHkRztmo5oHp8x8qI=
Subject key identifier: 53:53:D1:FE:DD:DB:D2:A0:44:0A:1D:F0:31:DB:B1:B3:CE:D4:24:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F897E4A4F45F11EF88A460A6762E951A.roa
Signing time: Wed 26 Feb 2025 16:37:30 +0000
ROA not before: Wed 26 Feb 2025 16:37:26 +0000
ROA not after: Thu 19 Feb 2026 16:37:26 +0000
asID: 984
IP address blocks: 156.231.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79073 (0x134e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:37:26 2025 GMT
Not After : Feb 19 16:37:26 2026 GMT
Subject: CN=67bf434a-508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:22:27:66:2e:ef:4f:e2:15:6d:83:ae:66:
a5:c9:f3:b4:84:80:ec:58:3c:37:df:c6:2f:60:30:
f3:25:e0:16:5a:2c:c2:f2:e5:55:a4:fc:37:13:c8:
d2:b4:bf:ab:3f:cd:fd:ff:5f:1a:68:9a:51:c4:67:
9a:89:75:de:de:1f:d1:aa:2f:11:0b:d5:f3:29:72:
a6:61:03:0c:1c:f5:8b:4c:0b:fe:1e:06:7b:66:97:
f7:a0:4a:86:40:82:ea:21:88:b9:6d:7e:75:4a:b6:
fb:e7:3f:af:aa:39:6e:30:96:e8:30:82:eb:0a:6c:
0e:40:f3:60:97:96:fa:b5:35:1a:e9:84:7a:d5:05:
e7:f7:32:5e:43:34:2d:33:30:9b:cf:4b:ac:c3:30:
43:5e:b9:15:77:a4:4d:15:61:1c:e6:81:9b:9c:a0:
43:47:1f:de:d1:16:33:43:5b:41:66:24:22:99:44:
57:1f:f5:4e:6f:8b:76:66:f6:fa:54:58:f5:ce:6b:
32:b3:a5:68:8d:14:6a:e6:86:a0:a2:85:23:a5:03:
43:5d:21:b4:df:1d:ed:90:fb:dc:af:77:6d:ae:15:
cf:21:21:81:fd:5b:06:99:29:ea:1e:e4:eb:ed:d9:
67:b0:d4:4e:56:61:95:77:63:99:21:c9:db:8d:0e:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:D1:FE:DD:DB:D2:A0:44:0A:1D:F0:31:DB:B1:B3:CE:D4:24:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F897E4A4F45F11EF88A460A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5a:ca:f1:0b:ea:23:fe:6f:cd:ac:0e:9f:a1:48:a7:0f:3d:
e0:f2:d6:62:1c:81:60:73:19:6e:06:46:b9:93:dc:ae:31:6b:
b5:d4:a6:1d:68:c7:c5:01:53:49:48:28:54:2b:1a:fe:3a:b6:
25:db:8b:24:77:27:87:25:eb:f9:d3:93:29:4e:e6:e4:cc:43:
d9:87:22:94:05:ad:6d:7c:4c:37:42:94:5e:76:6d:8a:f5:a0:
de:45:f8:50:0e:14:e9:8f:fe:70:ae:3d:fd:16:43:32:fb:3b:
23:d5:5e:8c:4e:b6:cc:5b:c7:92:e0:1f:35:74:25:31:a2:0a:
a9:d1:ec:6e:60:41:25:ce:2b:c9:23:0c:73:1d:f1:79:98:76:
8b:1f:2a:fd:6e:ab:46:7b:df:7b:d7:9a:39:2f:58:7a:1c:51:
2f:a5:86:ad:6e:96:86:06:93:e8:81:ae:b8:35:ce:81:22:e4:
c2:49:1b:02:4a:5e:18:50:9e:88:61:65:59:35:c7:26:35:6e:
dc:a4:71:66:4c:3a:d6:09:7b:6a:60:a8:f2:70:c1:5f:62:08:
47:9b:2f:94:dd:97:de:5a:68:7d:1f:7a:a6:d7:b3:8e:aa:bc:
0c:bb:09:39:0d:af:94:21:d2:72:08:7d:77:de:2c:a3:07:e7:
d5:36:21:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:34 2025 by rpki-client