Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5B2C4D21A0E11F0B17793EF6DB8BCC6.roa
File: A5B2C4D21A0E11F0B17793EF6DB8BCC6.roa (raw, json)
Hash identifier: NX5T8lLLY+aNAEQFemfKypqsu2Kondb4oJXh/SkpOkQ=
Subject key identifier: 2B:C7:42:47:E3:1E:EB:F1:C3:32:45:49:C6:DA:7E:55:E1:2B:47:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5B2C4D21A0E11F0B17793EF6DB8BCC6.roa
Signing time: Tue 15 Apr 2025 15:31:06 +0000
ROA not before: Tue 15 Apr 2025 15:31:02 +0000
ROA not after: Sun 25 May 2025 15:31:02 +0000
asID: 401615
IP address blocks: 156.231.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85124 (0x14c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 15:31:02 2025 GMT
Not After : May 25 15:31:02 2025 GMT
Subject: CN=67fe7bba-1b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:0b:2b:c9:31:c9:c7:f1:2b:52:cc:f3:77:
42:e3:b4:ec:eb:21:13:9e:11:eb:b9:b4:35:da:1e:
ff:8d:ff:0f:96:15:bb:12:a0:75:63:13:55:3b:a0:
89:22:04:a3:1c:b8:af:dc:c3:82:61:03:5f:32:bf:
92:17:6b:1a:be:d4:30:fa:4e:1c:54:ac:d9:09:f7:
0b:d9:1b:a6:ec:0a:c0:a8:0a:b1:5b:54:9a:25:94:
cc:75:14:c8:75:5e:9f:63:66:04:5c:4c:ff:d0:1d:
4e:29:e3:a1:ca:44:fb:8f:8d:19:1e:80:d0:5a:15:
14:d8:1e:17:5c:1e:82:3b:36:70:96:fb:e3:e7:07:
94:bc:10:55:be:be:c3:79:f0:f1:2f:d8:4e:fd:4a:
65:f2:39:b3:8c:20:68:83:ae:ac:4e:0a:89:b5:d1:
e8:7e:5f:94:5b:7c:27:1d:b9:07:72:2b:dc:a7:8b:
5b:10:e2:08:23:25:d1:e5:3f:29:0b:61:21:a9:1f:
b2:23:46:87:17:66:4a:85:d7:85:0b:fb:54:dd:15:
d9:f2:aa:76:b0:5e:d0:7c:5c:a8:81:d1:fa:84:c6:
ab:15:40:df:71:34:a1:23:c1:ef:9d:0b:b5:d2:72:
1b:70:77:1d:72:61:4f:db:65:8a:1b:4d:5c:93:62:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C7:42:47:E3:1E:EB:F1:C3:32:45:49:C6:DA:7E:55:E1:2B:47:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5B2C4D21A0E11F0B17793EF6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.140.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:2a:29:a1:61:e7:e4:a3:c4:59:9c:05:f6:8d:f8:7b:f3:73:
58:db:9d:a9:f1:bf:3e:d6:c0:21:ed:a5:57:a9:60:c2:27:35:
78:bb:19:df:dd:0d:3a:0b:4c:38:fb:aa:02:7c:69:07:27:09:
7f:d3:3a:c9:52:36:38:08:ed:07:14:32:87:03:b4:e1:00:55:
3e:f0:e5:90:d7:cb:3d:f5:0a:be:f1:fc:70:07:07:9b:25:93:
80:a7:43:63:19:4e:de:6d:2e:e7:64:3f:aa:a2:0a:bb:0a:e8:
4b:ee:90:51:86:6a:e9:b9:e5:64:44:8d:0c:10:1b:14:bb:bd:
5f:19:17:d7:cc:c7:94:93:bb:fb:00:9a:2f:1a:d7:ba:98:04:
f4:d8:51:7c:4a:b4:79:a1:0f:6d:15:46:4a:5c:13:07:de:85:
0e:a0:e0:46:77:ca:b1:96:4e:d3:3f:d9:b1:6f:15:57:89:3e:
41:3e:f4:45:18:02:e7:3d:04:2d:82:98:b9:13:07:8a:c9:fe:
a6:96:0a:25:fe:59:9a:3d:9f:85:29:40:8e:07:ac:d4:0a:a5:
f5:86:fd:b9:50:7d:58:70:fe:f3:41:31:b9:a7:bd:87:c8:45:
74:ea:c1:b2:65:ab:c3:b2:31:02:d7:7e:9a:59:cd:4e:c5:55:
ed:a8:4f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:02:32 2025 by rpki-client on console.sobornost.net