Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDB00CE20CC011F0987206B2762E951A.roa
File: DDB00CE20CC011F0987206B2762E951A.roa (raw, json)
Hash identifier: tHnJVKbS9YxbPw8IndtCF+84/d8mM9WIlhSoklP087w=
Subject key identifier: 53:20:D1:51:98:E6:50:20:C4:5D:EB:AE:B3:4B:25:AF:7F:07:81:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDB00CE20CC011F0987206B2762E951A.roa
Signing time: Sat 29 Mar 2025 17:11:34 +0000
ROA not before: Sat 29 Mar 2025 17:11:30 +0000
ROA not after: Mon 05 May 2025 17:11:30 +0000
asID: 395793
IP address blocks: 156.243.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84166 (0x148c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 29 17:11:30 2025 GMT
Not After : May 5 17:11:30 2025 GMT
Subject: CN=67e829c6-1604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:56:0c:8d:c6:e9:3c:f9:ff:27:fe:b6:c5:
5a:41:4f:99:d3:7f:00:c5:9b:33:8b:4d:87:02:93:
00:ab:b0:8b:e7:db:a0:3e:0b:09:31:51:2c:53:7a:
50:c7:6b:68:d8:e4:d1:13:c9:6c:c3:67:b7:98:39:
26:69:74:cd:e2:63:27:62:00:40:47:b6:a6:af:e8:
84:a0:46:6d:f2:71:c6:f7:37:24:11:59:79:2e:e6:
29:7d:65:77:7e:46:6e:d3:68:f7:1e:eb:95:5c:84:
41:f1:b0:e6:77:00:dc:6f:3f:f4:22:d0:76:5d:ac:
e7:64:c3:c4:04:87:bd:c7:a2:a2:39:b0:dc:22:13:
81:3c:a2:d7:8f:43:cf:0f:44:49:0e:d9:d8:f7:c1:
2e:fc:94:5e:8c:dd:84:df:db:03:f7:26:2e:33:8b:
ae:42:ef:6e:4f:90:ed:39:4a:6f:cc:8f:57:5d:08:
c1:ea:66:3e:18:70:9a:59:dd:90:b8:64:a9:04:c3:
af:7f:2f:fd:70:03:a7:f5:0c:7c:3f:19:56:ab:8e:
cf:a1:2c:ae:6e:19:fd:90:bb:34:84:d0:21:4e:c0:
c4:3e:30:69:87:5c:62:a8:ab:d6:81:81:73:bc:81:
73:49:75:5c:e3:26:4b:9a:98:88:ec:f8:e3:96:ea:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:D1:51:98:E6:50:20:C4:5D:EB:AE:B3:4B:25:AF:7F:07:81:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDB00CE20CC011F0987206B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
79:56:51:4e:e4:d4:a7:56:f5:95:98:7e:91:a8:1a:ce:14:d6:
99:a4:80:a2:04:ba:50:59:c4:71:a3:4d:21:58:a7:81:b1:7f:
36:aa:fb:91:b2:64:b5:9a:c2:90:23:11:bd:18:8f:95:49:f9:
63:3b:62:9f:36:0f:23:36:f3:da:ca:38:93:56:b6:44:e6:d6:
9c:54:d1:27:ff:5a:67:64:20:90:d5:ae:30:27:ed:80:aa:b5:
8d:9e:f0:55:90:b5:13:5a:a3:9f:7e:94:7e:94:59:18:60:59:
ca:0c:51:9e:5d:5a:bf:6f:8a:e5:9c:e4:5d:7f:8a:93:98:cb:
ba:97:c8:6b:3c:1c:ed:18:ba:ea:a1:e2:06:dc:8c:c4:72:7d:
7c:32:77:18:74:e4:64:fc:d9:9f:10:6e:83:86:0d:58:ba:6d:
a1:9b:a0:08:db:ae:e8:9d:62:14:fd:c2:8c:36:49:38:70:1f:
34:c9:9c:a2:f2:2c:55:1a:a8:74:99:6e:2b:16:30:4f:09:3f:
8a:e4:c9:fb:6f:9e:22:8d:22:45:0d:0f:8a:0a:80:b2:c0:1c:
4d:6d:b2:f2:85:1a:4d:06:3f:3f:7c:6a:6c:cf:0c:98:ab:15:
e1:cd:55:23:45:93:26:bb:2d:ed:16:4d:2e:c8:65:24:da:87:
25:eb:da:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:32 2025 by rpki-client on console.sobornost.net