Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F91930D6F46911EFB904056B762E951A.roa
File: F91930D6F46911EFB904056B762E951A.roa (raw, json)
Hash identifier: 6oXqqVNw8Vxy+f52kOhorTI9u8o/C4BNRU4aSy7OBKk=
Subject key identifier: F7:AA:99:AD:05:9F:D2:B0:C3:65:1A:94:7D:C1:F1:A3:8C:34:B9:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F91930D6F46911EFB904056B762E951A.roa
Signing time: Wed 26 Feb 2025 17:49:06 +0000
ROA not before: Wed 26 Feb 2025 17:49:02 +0000
ROA not after: Thu 19 Feb 2026 17:49:02 +0000
asID: 984
IP address blocks: 156.245.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79329 (0x135e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:49:02 2025 GMT
Not After : Feb 19 17:49:02 2026 GMT
Subject: CN=67bf5412-b3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:e7:07:56:77:42:b7:fc:65:29:d0:95:22:
08:f7:1c:f6:77:8e:18:55:a3:ec:de:75:17:1d:11:
ec:fc:e6:ce:bd:30:d2:6c:91:78:0a:f4:99:f4:7c:
03:17:a4:73:44:25:8d:41:17:ec:3c:65:e5:e1:e1:
6c:22:a7:e3:bd:e2:03:f1:cb:9e:67:18:4e:34:f5:
3e:03:82:07:05:fd:02:e7:77:d4:0e:3f:d2:16:ab:
08:dd:c6:39:0a:36:98:19:48:f3:a8:04:36:f5:4d:
be:72:38:13:c9:1f:81:fb:dc:58:ff:eb:49:15:20:
af:09:62:29:95:f5:d8:59:06:26:5f:0a:28:c2:ae:
25:5b:88:7f:f4:51:1f:40:71:c0:27:53:4e:ac:4c:
eb:67:97:51:62:91:8a:6a:8d:92:0c:86:5d:2d:c4:
7b:ba:1d:26:65:5d:1c:2a:cf:13:88:c3:4a:c8:5d:
c0:08:f7:5c:10:65:2d:1c:de:63:c2:ce:e5:11:12:
62:94:28:52:dd:29:b9:43:0d:23:95:c5:c4:ff:eb:
4d:63:40:f8:81:30:6c:34:9a:6d:a3:a2:b0:ce:78:
d5:05:cc:b4:36:66:04:e6:d1:85:5c:af:69:f8:53:
73:2d:05:5f:00:6b:00:0a:8b:d1:52:5e:aa:23:35:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AA:99:AD:05:9F:D2:B0:C3:65:1A:94:7D:C1:F1:A3:8C:34:B9:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F91930D6F46911EFB904056B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.94.0/24
Signature Algorithm: sha256WithRSAEncryption
12:53:93:5e:e4:e4:a8:6f:33:d5:69:8f:2f:85:57:48:50:70:
92:fb:36:4d:f8:f5:98:88:41:42:6d:56:a5:8e:99:78:f0:64:
60:b4:21:b7:39:a4:6b:b0:ee:19:ea:1a:54:cd:34:68:09:cc:
9d:be:76:3d:f8:e6:b2:47:e5:8f:ca:6d:76:d4:7d:2c:06:05:
fa:a3:f4:40:2a:eb:cb:ee:e1:f6:f8:d7:8c:3d:a2:0d:ea:da:
c2:d1:ed:3a:6a:c7:e0:54:af:2b:1e:b7:23:e8:ae:7f:b5:1e:
fa:3d:f3:9f:7f:c8:e7:57:6d:11:b8:a7:36:ad:20:e9:eb:e4:
6a:5e:69:ec:24:93:bb:c6:fe:78:2e:cd:23:9a:27:a9:df:a1:
b5:d9:4f:b7:4e:96:38:c6:4e:82:ea:c9:27:fe:4d:25:d4:5c:
f0:a9:dc:3a:ef:23:57:5b:1f:ca:57:1f:a0:fd:b6:db:96:46:
94:ef:cc:ef:f7:83:49:73:b7:f9:52:39:fe:c8:0a:ec:4b:ce:
b1:ea:8b:ba:47:f7:83:1b:53:6a:84:9c:9d:93:62:ca:8d:2c:
0d:f5:e9:a5:01:ca:20:2f:db:29:50:a1:0d:3f:23:e0:10:f8:
d2:4a:e0:96:aa:aa:ef:00:9b:7f:ce:4c:9f:71:5f:17:e6:bc:
a9:03:89:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:44 2025 by rpki-client