Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B7DAABE2B1C11F09B934BE6DAE4EC9C.roa
File: 2B7DAABE2B1C11F09B934BE6DAE4EC9C.roa (raw, json)
Hash identifier: 8DB4zqSG8kM+oFZ9m8gMJveV6z77BcXb6NOlOAnK2v0=
Subject key identifier: B1:05:6A:69:90:CD:AD:48:6B:08:79:22:6F:7E:6D:E9:59:35:E5:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01526E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B7DAABE2B1C11F09B934BE6DAE4EC9C.roa
Signing time: Wed 07 May 2025 08:20:44 +0000
ROA not before: Wed 07 May 2025 08:20:39 +0000
ROA not after: Wed 11 Jun 2025 08:20:39 +0000
asID: 213465
IP address blocks: 156.228.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86638 (0x1526e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 08:20:39 2025 GMT
Not After : Jun 11 08:20:39 2025 GMT
Subject: CN=681b17dc-58ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:b3:1f:3e:4e:fb:cf:59:36:09:11:1c:d2:
e8:6b:ef:35:4e:cb:23:83:61:c3:86:95:e5:7e:d5:
07:57:db:52:6d:2a:a0:83:2a:c7:d3:9e:6d:51:f2:
6c:bb:25:84:4b:d0:fd:3e:27:4a:46:a8:c0:36:ad:
e8:a1:bc:b8:e2:f3:0d:ef:b6:e9:23:63:a5:0d:e0:
19:1d:b1:4d:93:c7:e7:9d:2a:8b:78:0e:93:bf:41:
b8:97:34:c1:ae:e7:8f:6f:39:75:9f:94:ee:a9:5f:
a4:3f:c7:c0:51:8d:39:13:23:65:d8:17:18:37:6c:
7e:42:e5:2b:b7:f8:0d:87:f1:aa:cb:7d:fc:93:62:
9b:28:65:cc:d6:0c:bb:60:a1:81:9a:35:fc:e6:16:
73:18:8e:38:58:41:25:6e:39:41:80:7b:a2:7f:50:
17:19:33:36:08:b8:69:e1:51:47:95:82:ed:a4:fa:
dd:69:03:1a:aa:31:dc:70:b2:93:73:94:3f:ce:04:
51:ec:66:89:2b:99:1c:70:7e:97:09:75:8c:ab:f5:
81:87:67:7c:b1:af:23:db:0c:30:f5:29:fc:c0:ee:
aa:3e:a4:f7:6e:9d:f2:b9:10:33:c2:9f:23:69:37:
e9:d2:40:ef:61:dc:a1:a3:be:98:d2:88:7d:40:a2:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:05:6A:69:90:CD:AD:48:6B:08:79:22:6F:7E:6D:E9:59:35:E5:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B7DAABE2B1C11F09B934BE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a8:c3:e7:ba:93:8d:08:fd:2b:74:3c:82:01:bd:4a:aa:75:
d3:e2:72:a1:9e:35:20:88:d4:2c:a1:ee:87:07:76:57:f9:78:
f7:73:05:51:fb:31:19:d1:b4:f5:30:c7:c7:75:68:5b:fc:a6:
eb:5b:8e:6e:d6:c6:b3:cf:b6:04:fb:af:70:3f:98:24:24:35:
0f:12:b9:78:82:16:17:15:df:0f:fd:4a:ca:ab:ed:3c:c4:72:
55:db:6d:57:c5:d7:91:35:14:d8:ef:f3:87:b4:58:04:cc:87:
55:cc:c4:72:eb:3a:36:e6:0b:aa:05:ee:38:f4:d0:f1:9b:0e:
e2:08:fa:da:23:39:86:4d:4e:24:b5:4a:6c:c5:70:ff:f6:64:
42:ea:23:77:36:fd:9f:01:00:cf:47:2a:95:28:f7:4b:13:45:
66:cb:5e:98:82:b2:91:55:d6:b4:cc:9c:dc:6c:5e:a2:8c:a6:
ca:dd:58:f1:0d:1f:22:c5:ab:d0:16:b7:79:c9:a7:f8:0e:8b:
e6:6d:ee:ed:d2:60:b3:d7:0f:ca:75:f7:bc:02:cc:97:9d:c8:
ed:b0:08:f6:15:88:00:37:28:ef:f9:09:df:8c:59:22:92:a1:
67:61:be:2f:9f:ec:9e:22:ba:18:af:98:f8:48:5f:e7:50:98:
df:9c:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:13:31 2025 by rpki-client