Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/048BEC46107C11F096859659762E951A.roa
File: 048BEC46107C11F096859659762E951A.roa (raw, json)
Hash identifier: ezUieSEd7D6kaj0j2FoTOs0oUE3xIJhZ9UYYd/StSe0=
Subject key identifier: 6B:89:68:16:2E:66:16:E5:81:C3:D3:AA:08:63:CD:D7:78:80:D7:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/048BEC46107C11F096859659762E951A.roa
Signing time: Thu 03 Apr 2025 11:08:49 +0000
ROA not before: Thu 03 Apr 2025 11:08:44 +0000
ROA not after: Sun 04 May 2025 11:08:44 +0000
asID: 395886
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84422 (0x149c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 11:08:44 2025 GMT
Not After : May 4 11:08:44 2025 GMT
Subject: CN=67ee6c41-c3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e3:ac:73:d5:bc:80:b0:35:36:db:d2:8b:91:
c7:16:6a:82:cb:5e:ab:f9:f0:64:37:1a:6f:41:4a:
ab:43:8a:da:9e:63:7a:63:71:93:4b:92:2a:23:84:
95:61:9d:ca:25:bf:d1:fd:cd:99:1c:6f:9b:88:e0:
3b:a7:a2:31:e0:72:2e:2b:47:70:c5:de:23:5a:bf:
72:c3:a0:c6:d3:29:fa:ed:c1:f0:64:f4:6d:e8:15:
35:35:c0:77:ba:9a:7e:50:6c:f8:28:a1:58:b8:8d:
81:ea:c9:07:08:6f:ff:1b:80:0a:f0:4b:5b:7f:c0:
be:c3:2d:2e:4d:a3:95:78:a1:7b:b9:b6:2f:05:a5:
99:da:fe:ad:61:44:95:83:3d:90:61:e9:41:12:fb:
51:54:80:f4:df:42:a5:44:ef:4b:f9:cf:9e:91:5d:
f7:29:58:54:3c:1c:34:78:6e:9b:55:cc:0d:72:05:
51:06:c0:16:70:51:3c:0a:06:e3:92:82:af:5e:71:
f4:d3:4d:79:a6:9d:e8:7f:18:1e:40:7c:5f:e4:5c:
49:f7:76:9d:00:7d:3f:77:9a:32:f2:14:41:f1:04:
37:d0:f0:e0:10:03:fa:b7:d3:ad:e8:b6:3f:54:1e:
70:7d:85:1a:84:0b:9d:a7:8f:0b:37:a5:b2:9d:c3:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:89:68:16:2E:66:16:E5:81:C3:D3:AA:08:63:CD:D7:78:80:D7:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/048BEC46107C11F096859659762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0f:73:ea:70:d5:19:0f:fa:88:77:18:53:83:ff:76:3d:62:18:
41:c6:2f:dd:a3:27:80:51:82:0c:3c:23:96:f8:b0:9f:9a:14:
41:d6:a5:9c:d3:68:ad:e1:64:1b:c7:37:6a:76:32:86:e6:8d:
38:35:e7:fe:c0:63:64:fd:16:dc:17:0e:ff:e0:7c:61:d8:a7:
06:87:d3:2d:f6:5c:25:59:95:82:ec:ee:87:21:f1:e9:86:1c:
17:e9:09:fd:f2:32:66:c0:de:e9:2d:4a:33:06:bb:4d:a6:42:
b9:f6:38:36:5f:bc:d3:d9:d8:36:80:9c:20:bb:89:22:a3:79:
a8:52:9c:fe:b4:7f:7e:97:69:ea:7d:79:ee:e8:04:d1:2a:6f:
e1:6f:8a:b5:71:0b:a5:d9:8d:48:2e:aa:de:ad:2b:b1:70:7f:
16:65:4e:9c:01:32:5c:b8:96:08:56:51:8f:e2:ad:ff:18:01:
1c:ea:91:0b:40:aa:37:5c:49:f3:c0:9b:81:32:41:82:37:d2:
a4:06:87:f9:89:ed:8a:26:06:f6:60:b6:6e:32:13:e8:81:37:
44:6c:9a:94:41:d3:be:f9:53:9d:01:46:22:89:3c:d7:0f:e0:
37:32:b0:83:bf:c7:0f:55:46:81:85:a4:9b:a6:ab:fd:c7:62:
e8:1e:d4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:53:54 2025 by rpki-client on console.sobornost.net