Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3C5604413C311F08C0199A9762E951A.roa
File: B3C5604413C311F08C0199A9762E951A.roa (raw, json)
Hash identifier: QIQDLoWHm7UKkygcaofeJUMZzN50BHDr1aow2WKhY6k=
Subject key identifier: F0:57:23:59:A4:01:D6:C7:55:DF:71:4C:04:48:80:7B:71:E0:28:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3C5604413C311F08C0199A9762E951A.roa
Signing time: Mon 07 Apr 2025 15:19:30 +0000
ROA not before: Mon 07 Apr 2025 15:19:27 +0000
ROA not after: Sun 11 May 2025 15:19:27 +0000
asID: 50053
IP address blocks: 156.253.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84612 (0x14a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 15:19:27 2025 GMT
Not After : May 11 15:19:27 2025 GMT
Subject: CN=67f3ed02-ea6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:ba:d3:dc:c6:cc:42:b9:c8:6e:a6:fa:c4:
8c:4b:8c:b8:5c:dd:8f:94:5a:f8:48:b5:ad:57:c1:
04:ad:9b:39:77:a9:87:94:b7:30:2f:35:09:ac:92:
7f:f0:bf:00:11:00:25:a9:46:57:38:a0:d7:fc:19:
7a:3a:c3:55:18:27:30:08:7c:75:ee:b5:aa:83:32:
a6:4f:c0:8a:90:d2:e0:cb:02:d8:14:88:1f:77:05:
ec:b9:cb:fc:c2:c7:a9:08:89:c6:d9:b5:f6:ff:21:
e3:a5:5b:c0:66:32:bd:e9:80:dc:9c:d9:06:23:ff:
38:81:dc:20:a9:46:f8:3a:0d:2f:16:d8:d3:62:32:
f8:34:bb:fa:8b:3f:08:c5:ff:60:41:ad:2c:bf:b8:
95:01:43:64:b5:8b:f8:ce:57:74:13:d3:2d:d5:53:
2e:ed:fb:5c:4c:b0:85:c9:8b:93:7d:20:3e:51:f4:
21:06:47:c9:20:c9:ec:b8:f7:39:d9:0c:99:ac:35:
2c:ac:a7:a3:43:f1:4b:87:32:7a:ac:5c:79:fe:91:
e6:d0:1f:c5:8a:78:c8:85:1a:57:9f:63:a7:96:92:
a1:2a:00:2e:68:6b:7e:8d:c5:1e:7b:6a:1a:17:cb:
00:7c:db:09:86:04:9a:c0:a2:0c:a4:b5:17:22:fa:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:23:59:A4:01:D6:C7:55:DF:71:4C:04:48:80:7B:71:E0:28:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3C5604413C311F08C0199A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:59:48:17:bd:f0:95:7a:3a:de:49:c6:68:50:0b:8f:ec:a0:
8f:7d:ed:97:6d:84:b2:91:a9:33:80:ca:56:89:60:5d:04:0f:
0b:5f:0b:7f:28:0e:78:2b:29:a2:b3:40:3d:f7:73:bb:fb:77:
76:da:93:90:c1:71:8b:46:9b:bc:41:23:eb:85:eb:4a:07:1a:
54:a2:14:1e:e0:87:85:8b:27:3d:06:47:90:08:24:0f:20:a3:
8c:e0:a2:39:c9:53:70:71:b9:2a:98:fa:f7:d6:4e:42:02:8a:
19:26:23:12:2a:af:e1:84:21:69:47:57:d2:da:6a:9d:ac:da:
1a:0a:f3:17:a0:39:1b:a3:27:99:5e:20:10:58:23:cf:69:4c:
ba:e0:3b:00:d1:8d:cc:c4:ff:53:28:aa:7c:7c:0f:2c:0b:2a:
16:8c:94:52:57:79:0d:0b:b8:23:d7:1d:b0:cd:d4:10:f1:73:
31:28:34:9a:00:32:ed:30:85:9e:a1:2d:74:25:01:77:08:14:
33:05:46:76:00:b0:1b:2c:c7:e6:9f:44:09:f5:4f:c9:06:c9:
8b:c5:f7:1f:e1:80:fa:08:4f:9a:f1:a3:cb:d5:c2:46:f8:91:
4c:dd:11:dd:ba:04:be:7d:f8:a9:9b:3d:3e:32:de:65:be:7c:
32:9c:ac:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:55:41 2025 by rpki-client on console.sobornost.net