Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04AF17D4266111F0994764C2DAE4EC9C.roa
File: 04AF17D4266111F0994764C2DAE4EC9C.roa (raw, json)
Hash identifier: yS6n/E+99kq/tZ8chZNtLdW2YT8QOSJyPd1CligkKiA=
Subject key identifier: 7C:51:1A:A0:6E:D5:DE:FF:5F:25:66:04:33:32:9D:88:A9:3A:61:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015122
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04AF17D4266111F0994764C2DAE4EC9C.roa
Signing time: Thu 01 May 2025 07:50:59 +0000
ROA not before: Thu 01 May 2025 07:50:54 +0000
ROA not after: Sat 10 May 2025 07:50:54 +0000
asID: 13335
IP address blocks: 156.255.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 07:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86306 (0x15122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 07:50:54 2025 GMT
Not After : May 10 07:50:54 2025 GMT
Subject: CN=681327e2-9b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:43:59:27:d9:03:86:d9:dc:0b:c6:63:a9:d5:
11:13:d2:23:e8:34:15:16:a4:dc:dd:5b:ef:5f:48:
0a:3a:9c:ec:17:fa:de:fb:ba:0c:a8:cc:50:f6:55:
ec:1f:79:14:a6:b7:b1:40:03:01:84:f8:f7:4e:90:
17:6f:70:a2:f3:4f:5e:7a:6a:f4:cc:27:95:49:a3:
54:26:56:5f:4d:3e:0a:12:f6:d7:1d:15:80:51:5e:
47:38:c9:a9:75:fd:4a:22:b3:0b:4a:f3:4e:cf:13:
79:2a:5d:c1:e3:aa:22:0d:b3:9b:eb:df:d0:91:1b:
f8:4d:05:41:8c:3a:7a:59:ac:9f:56:5f:75:f7:fe:
f1:c3:85:83:c1:5c:76:93:ea:63:b6:4a:f5:37:30:
f4:2a:40:d3:e8:f7:f6:d0:45:35:22:36:f0:25:2e:
cf:2f:2f:ca:1f:75:88:5a:45:13:b0:ee:19:66:7a:
24:38:3e:96:c5:69:e5:dd:c7:bd:4e:57:0d:e0:a5:
69:33:73:61:9d:34:93:f3:2e:9c:72:1f:8a:63:a4:
fc:76:27:89:25:09:49:16:7c:55:4d:cb:e5:d8:a1:
e1:8a:c7:be:a6:c0:3f:dc:b7:30:87:69:ea:77:10:
2d:f4:8d:d0:55:ac:df:9e:9a:e0:71:d2:42:cc:a6:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:51:1A:A0:6E:D5:DE:FF:5F:25:66:04:33:32:9D:88:A9:3A:61:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04AF17D4266111F0994764C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3f:48:04:5c:7d:f7:ef:f1:34:b7:42:90:4b:51:1e:17:de:
fc:a2:08:fc:73:8e:c3:19:90:d3:c1:8c:c3:6f:9d:4a:7f:85:
3a:01:4b:29:24:af:ea:71:64:ba:f7:44:03:73:fe:32:8f:ff:
65:f0:bf:65:89:53:d6:b2:23:b2:c4:e1:f6:72:b8:4e:ad:9c:
ab:0b:7e:9b:44:e9:f4:5c:3d:79:c7:b6:d0:94:b8:f1:94:83:
4a:26:dd:39:66:8c:ff:de:48:9a:46:48:0f:19:cb:a2:7f:90:
55:67:1e:31:2b:84:ea:7d:94:4d:e8:b3:f7:c9:bf:e4:c9:19:
2e:f7:71:29:2e:21:73:63:8b:23:5b:a5:c0:20:3a:f3:72:d7:
c8:33:45:8d:26:3d:eb:a9:52:2b:22:37:70:5c:68:41:5e:62:
a8:9d:75:09:1f:41:5f:a7:1d:0a:15:87:63:37:83:8d:27:93:
26:b8:1a:20:26:ff:fa:69:80:a2:02:ef:8a:46:82:f4:00:35:
49:4c:17:41:11:d0:1f:8c:08:bc:18:ca:f4:69:45:8b:74:7f:
7d:76:9f:36:4a:77:d3:41:c0:a1:a3:b8:7f:04:b6:2c:1a:81:
4f:50:2d:75:f7:fd:d2:83:1e:8e:63:9a:af:0b:93:9e:02:ad:
1c:b1:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:21:28 2025 by rpki-client