Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DC4E4241F4911F0B7B45CC8DAE4EC9C.roa
File: 2DC4E4241F4911F0B7B45CC8DAE4EC9C.roa (raw, json)
Hash identifier: lLzi631rX1W811asVWwJ9l3LlJSEEDvRaZ3E8/mFvH4=
Subject key identifier: 69:61:98:42:8B:02:D3:EA:3D:8F:49:26:16:57:A0:A1:52:EB:1A:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DC4E4241F4911F0B7B45CC8DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 07:12:41 +0000
ROA not before: Tue 22 Apr 2025 07:12:37 +0000
ROA not after: Thu 01 May 2025 07:12:37 +0000
asID: 13335
IP address blocks: 156.255.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85464 (0x14dd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 07:12:37 2025 GMT
Not After : May 1 07:12:37 2025 GMT
Subject: CN=68074169-fec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:cd:a7:41:f5:38:a1:24:c3:75:86:63:e0:
8e:56:1a:3d:0c:2a:74:7d:ac:51:2a:8d:e4:d5:9c:
e4:b4:8e:8a:04:9b:93:80:5e:32:1e:d5:95:83:b8:
f7:3c:50:f9:84:4b:f6:fc:64:f7:5a:56:c9:4d:1c:
80:5b:f3:9d:26:6e:71:f2:4c:f5:2f:34:f7:a2:f0:
a8:27:6f:e2:86:01:4b:7b:74:7e:6e:74:2f:af:95:
a0:69:74:b1:55:d7:f7:a2:2c:8b:b1:13:b9:a9:67:
50:1f:64:9a:c6:f1:20:df:84:d4:54:a6:24:18:6e:
ce:53:ad:40:23:5e:67:14:1c:f2:e3:72:22:b4:db:
81:a6:76:c3:f9:21:3a:63:8d:16:9b:82:3f:a3:11:
81:d4:f0:d1:8b:f5:5a:67:26:f6:a5:91:a1:ec:94:
ea:4c:0a:83:64:45:b6:4c:d1:51:db:72:c5:8c:5a:
0f:8e:42:f7:4f:99:68:b5:8c:46:3c:b9:62:27:48:
48:38:3a:54:0e:22:3d:5c:35:be:b0:14:5e:2f:a1:
64:3f:37:5a:65:ee:0f:0d:46:da:8b:02:f7:0a:da:
4d:af:b2:3d:c6:f8:46:a7:11:55:da:de:97:c6:ab:
1b:b2:69:2b:61:91:13:5a:b6:21:4b:da:6d:67:60:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:98:42:8B:02:D3:EA:3D:8F:49:26:16:57:A0:A1:52:EB:1A:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DC4E4241F4911F0B7B45CC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.123.0/24
Signature Algorithm: sha256WithRSAEncryption
63:97:a1:8c:3e:2c:8c:8c:e2:ab:99:ee:97:13:07:31:b9:57:
55:22:ba:74:1e:bc:d7:e4:9b:05:9f:95:47:a1:13:98:1f:60:
31:ba:28:f3:cf:61:5f:4c:76:3d:ff:8b:28:ed:a2:e1:8c:b3:
02:e7:a0:96:58:03:59:ae:b3:d8:fc:d2:85:27:70:49:84:46:
2d:89:df:bd:6f:95:8f:d5:0c:12:79:c7:9a:bc:2b:61:ac:ff:
92:72:67:a0:55:00:df:57:ae:83:b5:ca:46:35:eb:46:35:2b:
b2:72:6a:05:af:ec:c3:7b:34:77:5f:da:dc:3e:19:f8:3f:82:
6e:09:65:8f:e4:1a:60:a3:8e:ad:69:5b:3f:61:15:c8:00:92:
b5:b6:2c:51:00:92:a9:6f:72:5e:b3:7c:1d:6f:ad:b6:9a:d8:
fd:36:8a:a2:3a:b5:a3:68:89:ba:28:08:1d:45:62:5d:3f:eb:
8c:c6:eb:6c:ad:2f:2f:cd:1e:6a:c7:ff:71:34:eb:12:47:ad:
42:78:9d:7a:47:5c:a4:ce:fb:ac:ba:42:3e:67:fb:82:ad:cb:
6c:a5:86:71:7a:07:e0:b1:b6:02:13:95:7e:bb:5c:54:35:8a:
df:4f:78:4f:12:4f:b7:94:02:35:d8:57:9b:4f:6c:60:32:2b:
51:d5:5f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:52 2025 by rpki-client on console.sobornost.net