Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F38092424D911F091CC4681DAE4EC9C.roa
File: 0F38092424D911F091CC4681DAE4EC9C.roa (raw, json)
Hash identifier: hsY2bD5jlu/0fQfRKghbAHvueLNUYWgAI/9yHUzim08=
Subject key identifier: AB:91:BE:5F:07:6B:A4:B5:5B:D1:79:03:BA:9F:4A:F1:E1:A9:8B:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01503B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F38092424D911F091CC4681DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 09:05:13 +0000
ROA not before: Tue 29 Apr 2025 09:05:08 +0000
ROA not after: Fri 30 May 2025 09:05:08 +0000
asID: 134365
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86075 (0x1503b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 09:05:08 2025 GMT
Not After : May 30 09:05:08 2025 GMT
Subject: CN=68109649-af0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:18:08:27:c1:43:86:48:f3:8b:54:59:fa:
50:b1:45:0c:b2:28:44:43:e5:62:ac:21:64:15:25:
6e:3c:2f:51:5b:a1:0a:26:f4:9a:86:b1:19:22:bf:
b6:26:da:e9:20:43:7a:0e:92:e7:57:e5:19:19:57:
dc:fb:2f:cc:e9:ae:eb:8c:03:03:59:96:2c:fb:ca:
b7:da:f8:05:a7:8f:1f:3d:94:cf:67:1a:4a:60:59:
31:57:4d:85:96:fb:93:f9:18:87:4f:d8:f7:a4:88:
e5:46:a4:b8:bc:36:de:92:78:35:44:b5:6b:81:d1:
a3:3a:ff:95:9b:48:93:e6:4a:f1:59:0a:2c:8b:bb:
3b:4a:bc:a9:65:85:b5:a6:24:ef:8f:8f:96:6d:2f:
3d:9c:c8:68:cd:34:c7:a1:29:4b:a9:1d:cf:6a:0e:
0f:49:16:e9:11:12:87:64:8a:79:84:97:3a:41:62:
2e:22:4c:08:c5:f0:8a:94:3d:6b:d5:dc:7b:22:54:
28:c2:8e:e2:1f:33:bf:fc:c7:92:0c:f5:87:44:61:
39:c0:a0:6d:0a:d2:56:d2:1e:a1:30:b8:3f:50:1f:
32:4e:9e:52:69:13:b8:6f:ea:8a:df:a9:9c:f3:b4:
f6:e3:1c:94:93:0e:8d:9d:ff:13:df:ec:e3:e9:ee:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:BE:5F:07:6B:A4:B5:5B:D1:79:03:BA:9F:4A:F1:E1:A9:8B:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F38092424D911F091CC4681DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
93:e6:bb:88:6a:d2:92:23:00:be:9e:a3:6b:57:1c:cd:4d:f2:
98:bb:02:ec:e0:e4:c3:e4:0a:e4:34:40:df:0d:02:f0:e0:c4:
dc:09:3c:b4:f5:ae:d2:0c:d7:05:e0:28:c2:e6:a6:ba:89:0e:
71:44:76:67:d7:85:ed:ed:68:cc:e1:23:cd:90:8c:0f:2d:c3:
89:6c:bc:21:d8:32:f3:7c:d6:5e:3d:98:97:90:60:ec:2e:b6:
69:24:97:a0:8b:5a:2c:02:50:f1:45:e0:a3:30:05:49:34:44:
fd:6f:3a:44:b1:9b:da:0e:57:51:3e:4e:86:34:96:5c:62:bd:
50:75:ea:2e:d9:e1:2c:45:38:e1:12:98:dd:9f:e5:4c:2d:32:
42:4d:05:b5:bb:4e:a7:dc:ef:4a:61:aa:5e:b0:1f:73:c4:b4:
a3:ce:14:98:74:73:bc:7c:3d:e4:4c:ea:a9:b3:44:2b:98:ba:
da:ea:a1:3c:a2:37:cb:82:1d:d0:61:a3:e8:91:f6:e4:63:9a:
1f:01:62:08:f8:b0:57:5f:a0:4e:f3:11:33:f0:8d:07:62:da:
8d:de:37:cb:2d:64:25:f5:15:43:af:d4:d5:57:c2:c8:b4:16:
b8:fd:7f:e7:24:3d:83:9f:91:c7:d3:18:cc:0d:db:27:82:78:
68:57:94:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:33:21 2025 by rpki-client