Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E3E9F020D3511F09FD7FD7F762E951A.roa
File: 1E3E9F020D3511F09FD7FD7F762E951A.roa (raw, json)
Hash identifier: VWRRIhU9ZLPDtZTHWrRMrTyjeqRnxvATs/MtHe48pIc=
Subject key identifier: 2F:17:78:10:0B:3A:73:76:BA:9C:BB:DD:8B:C0:AA:81:4F:8B:D9:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01493A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E3E9F020D3511F09FD7FD7F762E951A.roa
Signing time: Sun 30 Mar 2025 07:03:44 +0000
ROA not before: Sun 30 Mar 2025 07:03:39 +0000
ROA not after: Fri 02 May 2025 07:03:39 +0000
asID: 26006
IP address blocks: 156.225.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84282 (0x1493a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 30 07:03:39 2025 GMT
Not After : May 2 07:03:39 2025 GMT
Subject: CN=67e8ecd0-ecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:d9:8f:75:19:8e:7a:1f:4a:54:ee:36:29:
57:16:90:cd:d5:35:db:a4:22:54:4a:ec:b6:21:90:
c1:65:f4:5a:ba:50:7d:bd:ec:7e:d4:c7:95:48:49:
e3:ef:45:f2:9a:4c:48:83:b5:ea:b7:cc:ac:75:8f:
8c:0e:63:a1:25:9f:02:67:d0:d5:11:50:3a:81:f9:
44:d3:fc:03:cd:7b:16:d1:3a:b0:b2:d3:5a:93:78:
ea:8c:28:e8:d9:b6:ff:fa:6c:48:4d:a0:a8:09:ac:
55:09:07:fe:91:44:e2:b8:aa:13:10:d6:d8:69:1d:
9a:70:97:98:47:e2:d2:71:5d:10:75:dc:be:8c:3a:
c0:37:fc:91:f1:ff:90:74:1c:76:ee:c0:09:fd:33:
86:aa:86:91:7a:dc:67:23:71:00:50:7c:e8:2c:32:
17:30:ed:b2:67:69:f3:85:ae:88:a0:2e:79:05:30:
15:14:b7:03:e4:0f:f4:25:08:aa:ce:de:13:ed:86:
7a:59:ab:32:c4:40:9a:21:38:ec:92:15:53:6f:44:
16:b9:e0:e2:dd:2b:41:ad:5b:71:29:7c:73:34:87:
41:a9:f1:2b:8a:90:a4:61:3e:0c:94:6c:e1:d7:f5:
f0:d3:54:bc:26:39:cd:06:4b:fa:06:ae:72:81:2a:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:17:78:10:0B:3A:73:76:BA:9C:BB:DD:8B:C0:AA:81:4F:8B:D9:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E3E9F020D3511F09FD7FD7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.40.0/24
Signature Algorithm: sha256WithRSAEncryption
14:10:d9:f0:fe:ee:3b:81:09:b1:d9:23:e4:65:61:c5:4a:f1:
31:5a:ca:d1:e2:45:6d:ee:87:c8:de:e2:d7:46:6e:77:7e:3f:
a9:d7:41:b4:a1:6c:a5:db:9b:f5:7a:61:dd:6c:01:35:e1:44:
62:b6:15:66:cd:f1:c2:92:6f:87:22:5c:c1:07:ed:e9:d7:4d:
60:84:8e:bc:64:8d:65:3c:1a:0d:ea:96:e4:3d:3b:64:92:3e:
b5:be:73:8a:18:b4:04:eb:ad:f9:11:15:d6:d1:53:71:24:bc:
0e:9a:c8:f8:87:cb:f8:fc:1a:67:68:05:fc:6f:a7:5f:c6:56:
f5:45:cc:a4:f8:4e:e7:37:03:0d:b3:c2:d3:9d:64:57:a9:5b:
ad:52:f6:4d:f0:86:b8:ff:71:8d:8f:c1:a9:3f:21:02:1f:0c:
98:a3:23:aa:d1:c1:83:c0:a7:b8:76:28:de:e2:ff:a8:12:85:
b5:3c:d2:aa:05:36:83:f0:a8:3f:b7:ef:57:82:ef:f7:c3:37:
a3:43:04:78:c2:e9:67:10:7f:5a:8f:c4:fd:0d:11:57:70:77:
39:31:b2:21:c0:25:55:d9:eb:1f:c9:6d:d7:3a:08:35:de:9c:
17:90:58:56:02:a1:5d:9b:f1:3c:c8:5c:cf:11:80:10:24:b8:
6e:0c:31:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:24 2025 by rpki-client on console.sobornost.net