Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269E67401C6211F08EA935D5DAE4EC9C.roa
File: 269E67401C6211F08EA935D5DAE4EC9C.roa (raw, json)
Hash identifier: 3pYGUa1FIpScBDX0LoKfyzE2BhvY0kMzJIXd4taxARs=
Subject key identifier: 61:36:C6:E8:85:8C:4D:1E:15:C5:68:2B:A6:3F:63:B6:4A:CA:6D:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269E67401C6211F08EA935D5DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:33:53 +0000
ROA not before: Fri 18 Apr 2025 14:33:46 +0000
ROA not after: Mon 12 May 2025 14:33:46 +0000
asID: 57043
IP address blocks: 156.246.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85264 (0x14d10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 14:33:46 2025 GMT
Not After : May 12 14:33:46 2025 GMT
Subject: CN=680262d1-1b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:db:44:f1:24:03:b9:e4:46:ce:11:59:69:
13:3c:57:9d:6c:60:f9:6a:7a:67:b9:f3:e0:3e:43:
e6:bf:3e:3d:61:c8:79:ba:97:9c:58:dc:c6:03:79:
0b:0e:58:61:3c:49:d4:be:8e:d4:7c:94:bb:1c:35:
e6:81:a4:e2:a0:68:e9:8b:ca:9e:36:f7:c6:90:4c:
12:d0:ee:5a:9f:e7:cc:a2:08:37:3d:6a:12:09:eb:
87:3a:54:9d:6d:0b:46:08:06:ea:6f:86:9d:e6:fb:
0a:df:73:8d:dc:da:a0:14:fc:d3:fb:8a:c1:fc:b9:
da:2a:70:d2:97:1f:e1:2e:7c:8a:f6:f3:da:51:98:
df:15:ef:b6:8d:18:d5:da:97:19:8b:ce:fe:af:f8:
a9:b1:01:92:4f:32:02:0a:8f:32:42:50:af:41:bd:
b3:71:b9:b2:d8:ea:02:2e:d5:79:ea:da:19:9b:57:
6c:59:f1:53:15:18:fb:cd:5e:a4:99:60:2f:d6:60:
a7:ae:57:27:22:d3:69:3a:ac:aa:8a:fe:d8:63:1d:
d8:d2:74:5c:2c:7c:ae:f5:4e:56:db:d6:95:f3:9c:
eb:a6:47:24:19:cb:10:8b:c9:8d:13:85:c4:47:07:
31:23:4c:db:b1:4f:74:97:12:24:c0:19:44:7b:a4:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:36:C6:E8:85:8C:4D:1E:15:C5:68:2B:A6:3F:63:B6:4A:CA:6D:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269E67401C6211F08EA935D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.24.0/24
Signature Algorithm: sha256WithRSAEncryption
08:fb:97:7f:ab:c1:f1:08:18:7f:bf:74:4b:b7:b7:85:4c:9b:
db:70:6c:a9:e7:05:31:c8:7a:52:d9:04:e7:43:b2:ce:7f:89:
ae:ec:1a:1d:2c:e8:02:c6:dd:e1:55:f5:6a:e3:c8:32:83:9f:
25:0f:0e:f5:44:e0:a0:17:86:60:b1:bd:65:9a:30:3f:76:6e:
1c:53:c0:c9:c3:49:04:55:fe:fa:5c:e5:5b:6c:d8:a4:7b:52:
b6:8e:e3:11:81:89:de:c3:52:9d:63:63:9a:80:4c:d4:5d:d7:
ab:e2:b7:7d:95:9f:3a:ea:04:e9:68:db:37:f4:a8:5f:2f:7b:
87:d6:5b:67:4e:ef:78:ff:bb:69:37:c3:37:f7:07:03:cf:e8:
c5:d5:9a:97:d6:10:40:54:73:dd:53:e8:ef:24:33:f8:e5:82:
cd:5c:09:17:86:5b:9e:ae:a7:30:9c:9b:82:bb:63:90:cf:3a:
a6:4e:de:49:a5:90:0f:dc:2b:d5:f8:1b:c3:e7:8a:fb:ad:7c:
7e:60:10:d4:42:eb:e1:1a:34:4b:a0:7c:ec:f0:0f:c9:46:6c:
70:78:e9:8e:60:d3:67:86:2c:8b:8d:f7:03:15:f5:bb:e4:4d:
b9:4f:da:95:2e:b0:c4:a6:53:53:17:72:a8:c3:43:d7:b0:50:
65:21:ce:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:30 2025 by rpki-client on console.sobornost.net