Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF09D7ACF34711EF8C8446A4762E951A.roa
File: FF09D7ACF34711EF8C8446A4762E951A.roa (raw, json)
Hash identifier: QldAAzIXml7QkLD2TbbIh2b0xNZHPSh/NFZq+vxRn1Q=
Subject key identifier: 53:FB:A2:09:09:F7:78:95:1C:76:07:24:4D:A9:60:AF:F5:3D:0B:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF09D7ACF34711EF8C8446A4762E951A.roa
Signing time: Tue 25 Feb 2025 07:13:22 +0000
ROA not before: Tue 25 Feb 2025 07:13:18 +0000
ROA not after: Sat 19 Feb 2028 07:13:18 +0000
asID: 17561
IP address blocks: 156.249.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77216 (0x12da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 07:13:18 2025 GMT
Not After : Feb 19 07:13:18 2028 GMT
Subject: CN=67bd6d92-23ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:85:19:05:65:eb:c5:45:88:7b:b6:25:74:
91:e1:02:27:55:5d:0f:b8:66:22:e6:41:ab:21:69:
30:a1:4d:23:da:f3:6d:fc:fe:e8:bb:80:e4:b1:22:
8a:d9:05:28:0d:1f:11:96:d5:11:83:2a:d3:e6:c7:
6f:5d:cd:57:88:9a:1f:2f:82:a4:10:6e:70:f4:3f:
b5:b6:20:ea:ad:53:50:0d:5e:89:c0:9d:be:de:8d:
00:09:67:a3:3c:ae:2a:68:59:ae:90:e0:9a:9e:8e:
96:f4:4d:b3:48:91:d8:62:05:0f:a0:68:ba:24:d9:
a7:3d:f5:f4:bc:d7:88:6a:c5:e9:b5:6e:86:7f:5e:
79:3f:58:e4:d7:00:5c:2b:3d:26:92:15:5c:a8:37:
0c:f6:1f:11:77:d1:17:17:68:6c:21:56:4a:82:1f:
08:7e:f5:9b:a1:c7:ef:9a:4d:33:91:9f:67:b4:ca:
07:94:39:a9:b4:2d:e7:90:bd:21:57:84:86:79:7c:
ca:01:db:50:2e:27:b9:ff:6e:9f:1c:15:ba:7d:09:
1b:5a:35:24:a5:64:90:0a:9b:d6:cd:30:6c:01:91:
c2:b1:bc:10:11:0f:c4:3e:39:01:dd:5a:1b:bd:0a:
d1:b2:bc:c3:a2:29:92:ff:db:0c:ae:0d:69:89:95:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FB:A2:09:09:F7:78:95:1C:76:07:24:4D:A9:60:AF:F5:3D:0B:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF09D7ACF34711EF8C8446A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b1:11:b7:0b:9f:3e:03:f7:be:7a:ec:32:3a:8d:1d:8b:d1:
69:22:ef:38:48:83:3f:75:e9:19:73:96:4e:10:d1:aa:39:0b:
d9:04:f5:52:4d:45:9c:46:48:08:17:11:17:3f:1b:de:22:09:
ce:84:b4:c1:86:da:53:70:ad:f7:de:39:da:c2:31:14:82:b4:
35:aa:5e:bd:e8:fc:79:84:b6:bc:84:4b:b8:70:a5:11:fd:11:
c4:2f:4c:32:8e:ef:b9:1b:9e:3c:1c:69:1e:a9:98:8f:0c:7c:
58:78:c5:59:f3:c5:b9:93:0e:d5:50:a3:64:05:e4:2f:9a:7e:
ee:15:d2:1f:77:86:4b:cc:c5:e8:a1:05:6f:f1:a6:6a:35:14:
58:38:b9:56:ec:09:26:d1:e0:85:85:ff:67:fa:18:d0:b5:29:
98:fc:82:d8:8c:fc:14:89:19:76:93:d1:7d:d0:60:4a:c9:ca:
53:e7:de:43:a4:79:00:89:d6:3e:af:f3:9b:8c:09:33:c9:ee:
79:3e:b6:8c:40:c9:71:2b:f7:ef:d9:fb:e0:48:e4:c8:cc:58:
3a:12:93:5f:61:d9:0e:2c:f1:8b:87:d0:b9:49:ae:ec:af:b5:
a3:4a:fc:f2:c7:c9:80:f8:be:f2:73:3a:93:28:76:12:24:11:
59:c5:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:09 2025 by rpki-client