Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B0A8C216C011F0ABA0FADE6DB8BCC6.roa
File: F2B0A8C216C011F0ABA0FADE6DB8BCC6.roa (raw, json)
Hash identifier: BKCmSiSPW+G9XV3zx5xJzQ4pxeBYYoyWDkqWoDaAjog=
Subject key identifier: AD:88:66:55:11:3A:CC:2B:2C:E4:36:3D:51:6C:8D:9D:6D:C2:0B:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B0A8C216C011F0ABA0FADE6DB8BCC6.roa
Signing time: Fri 11 Apr 2025 10:37:21 +0000
ROA not before: Fri 11 Apr 2025 10:37:17 +0000
ROA not after: Wed 21 May 2025 10:37:17 +0000
asID: 51809
IP address blocks: 156.233.128.0/20 maxlen: 24
156.233.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84929 (0x14bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 10:37:17 2025 GMT
Not After : May 21 10:37:17 2025 GMT
Subject: CN=67f8f0e1-4d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:89:eb:b9:b6:ad:b7:a3:b4:25:93:4e:db:
f3:85:bb:78:89:5b:ba:8e:1d:a5:28:27:47:09:ad:
d2:7c:9a:aa:11:5a:e5:1f:b0:4e:79:e6:62:8f:83:
6f:2f:0c:ee:b2:20:76:ac:ee:ff:8d:f6:f6:90:7c:
81:3e:4f:2a:05:d1:72:44:46:78:86:b0:1c:d3:c7:
b1:07:49:47:87:81:d8:a1:54:1c:e7:41:66:22:24:
f0:d5:b6:fd:94:e8:9e:54:88:46:f6:ea:fb:19:b7:
39:61:64:da:59:fd:ca:e2:e6:cc:c0:fd:92:2e:ed:
ec:78:41:03:3c:37:73:a6:39:d4:51:83:44:97:bd:
29:1e:63:5d:ba:ae:e1:32:7d:c3:23:d7:f8:ea:ad:
6e:26:fa:b3:4f:c8:38:8b:99:14:01:cf:db:7f:7a:
7e:57:e3:84:20:42:2b:53:eb:e2:de:f5:63:b6:1a:
6b:33:9a:88:51:db:6e:54:e5:0a:8a:c6:61:31:63:
24:5f:02:ca:e3:99:a8:8f:b2:71:67:5a:41:d6:30:
ad:f3:e7:31:18:25:e5:28:1f:ff:c3:41:89:31:c2:
ed:56:45:d3:67:73:b4:42:9e:a1:30:4e:3a:38:2c:
56:fe:67:53:6b:22:53:05:90:d8:89:1a:b7:4b:bc:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:88:66:55:11:3A:CC:2B:2C:E4:36:3D:51:6C:8D:9D:6D:C2:0B:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B0A8C216C011F0ABA0FADE6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.128.0-156.233.151.255
Signature Algorithm: sha256WithRSAEncryption
19:52:1e:47:a6:5d:7b:ee:42:cc:9d:2f:c8:e9:ff:eb:39:5a:
0d:38:22:cf:b3:7e:5e:b6:c2:38:02:ee:df:a7:fa:25:fa:4b:
5b:66:45:69:48:d2:63:9c:24:6a:d3:00:fe:45:89:4e:42:77:
e9:40:30:24:ba:c9:b0:3a:0e:8b:76:f7:f2:c7:fd:2c:b8:7a:
8c:ac:c9:d1:0b:21:27:c5:7f:4a:fa:c5:fa:44:f5:03:91:69:
15:03:c0:73:87:64:93:a9:fc:1a:a3:45:4d:7d:7b:98:ee:13:
22:ce:f6:d6:1a:7c:d5:9c:4d:d7:94:51:93:4b:8c:8c:18:c5:
a6:5c:65:45:f8:21:b3:e5:4a:a8:a0:60:cb:09:e1:a1:b5:31:
4f:ab:43:31:ae:62:5a:c2:71:dc:52:60:5a:ff:f4:01:97:1b:
65:9a:a3:4b:48:40:1d:bc:30:bb:7c:67:0b:fc:8a:01:9b:83:
ec:33:6b:a8:e0:9c:20:57:48:4a:13:32:6f:79:74:e4:13:f7:
7b:3e:91:86:48:c0:6b:42:21:5e:ef:e7:a1:4b:bc:89:a9:e3:
02:93:44:48:60:f9:d3:b0:bc:95:7b:d2:c8:f7:28:7c:1c:b5:
37:3e:09:16:31:c5:df:95:ca:96:f1:75:d4:77:ba:db:e1:b2:
76:41:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:46 2025 by rpki-client on console.sobornost.net