Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19C8610ECD4A11EF99DDB67B762E951A.roa
File: 19C8610ECD4A11EF99DDB67B762E951A.roa (raw, json)
Hash identifier: UTz0XmgH6NxgyMDuYaTlkreTuS0dRCiMjHVpNo/z9Hc=
Subject key identifier: 15:FC:06:C0:F2:CA:EE:39:49:88:E3:64:FF:A7:A9:23:06:D9:68:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19C8610ECD4A11EF99DDB67B762E951A.roa
Signing time: Tue 07 Jan 2025 22:52:42 +0000
ROA not before: Tue 07 Jan 2025 22:52:38 +0000
ROA not after: Sat 13 Dec 2025 22:52:38 +0000
asID: 984
IP address blocks: 156.246.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65207 (0xfeb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 22:52:38 2025 GMT
Not After : Dec 13 22:52:38 2025 GMT
Subject: CN=677db039-4460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:90:51:e7:e7:52:eb:7a:c4:6d:73:a3:c1:
dc:14:70:f5:d8:93:9d:4a:a1:ab:83:08:ac:c8:0d:
1e:da:48:49:4f:a4:7c:34:0d:b1:52:19:3a:4d:0c:
ae:8c:82:21:a7:36:00:02:37:b5:99:88:56:95:4e:
81:22:bd:71:f9:ae:b0:c8:bd:1f:f5:b2:e3:43:a5:
23:49:38:16:d4:99:14:88:5a:8e:d3:ee:92:71:28:
ae:78:53:1e:0c:8d:9c:fb:83:8b:6e:0b:1d:6c:89:
5b:c4:8a:c6:6d:2f:57:2e:01:bf:64:7b:4e:bc:74:
71:9b:32:7f:5b:fc:1a:7c:c1:32:32:d4:32:5a:7e:
ec:ac:fb:34:8c:79:98:37:c7:37:1f:5b:d1:98:0b:
b6:50:fe:b5:b7:c6:39:62:38:43:82:d2:f1:fc:9d:
2a:60:c5:00:fd:62:8c:64:bf:c5:23:ec:4f:cc:7d:
75:fb:a3:3e:c6:4f:d7:e1:06:e4:09:8e:bf:05:13:
63:46:5e:72:a1:d7:e7:36:be:5f:03:9c:eb:79:b7:
ec:33:ea:60:8a:b5:30:ae:5d:ff:aa:68:40:fc:79:
60:b3:a7:f8:6e:31:9f:18:a4:19:30:fd:a0:3b:79:
55:32:ca:ef:12:d1:f5:d9:67:fb:f1:9a:10:d1:73:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FC:06:C0:F2:CA:EE:39:49:88:E3:64:FF:A7:A9:23:06:D9:68:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19C8610ECD4A11EF99DDB67B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.87.0/24
Signature Algorithm: sha256WithRSAEncryption
92:54:4d:4e:ae:f2:e5:f2:3a:4c:5e:7c:4a:c4:1b:3b:d5:16:
30:32:55:92:00:df:f8:8f:16:98:c2:3c:ad:aa:11:90:56:33:
cd:15:95:a7:52:46:dc:a8:5e:7a:d2:cb:e9:87:a6:c9:8c:ff:
cd:f1:bc:1c:bd:72:fb:e9:0c:91:34:7f:b8:87:f5:85:e4:c2:
b5:b7:22:c3:af:0b:a5:f1:86:c4:5b:50:1c:11:5e:2e:b5:d5:
70:91:15:18:73:2a:b3:3c:cf:d2:0d:62:00:5c:d4:61:8c:92:
e2:98:a5:cf:f8:72:46:fd:5e:55:83:83:82:71:8f:4c:4c:10:
54:ec:b1:84:0e:4d:96:d2:bb:60:7d:13:39:e3:82:e9:f3:8d:
7d:4c:16:80:ad:d4:3e:21:64:0f:be:bf:95:37:ec:20:6e:7c:
ca:bb:11:4f:93:4b:fa:5d:ef:f1:4e:e3:59:07:91:14:6d:6c:
4f:d7:ce:25:f6:91:a7:ee:b5:e4:a5:02:2c:d4:5b:32:73:49:
ec:5c:4f:d8:12:61:be:70:43:d5:7a:66:68:c0:3d:2b:2f:d5:
71:13:30:39:e9:63:8c:28:56:5d:3a:20:93:b1:cf:42:66:4d:
5c:70:b8:87:a4:ce:8a:99:34:15:eb:b1:43:c3:b4:71:14:ae:
4e:23:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:25:56 2025 by rpki-client