Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0595F54CC97211EFAB6BE88E762E951A.roa
File: 0595F54CC97211EFAB6BE88E762E951A.roa (raw, json)
Hash identifier: 6ZZE7gXd+q89qNy7rfOgKzSoS/Hv6O97tB9sv3Vh/Bk=
Subject key identifier: 38:44:91:9E:5D:63:1B:93:32:AB:5F:3E:22:C8:BC:F4:E0:CC:D4:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0595F54CC97211EFAB6BE88E762E951A.roa
Signing time: Fri 03 Jan 2025 01:28:23 +0000
ROA not before: Fri 03 Jan 2025 01:28:19 +0000
ROA not after: Mon 13 Dec 2027 01:28:19 +0000
asID: 17561
IP address blocks: 156.227.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62655 (0xf4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 3 01:28:19 2025 GMT
Not After : Dec 13 01:28:19 2027 GMT
Subject: CN=67773d37-9475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:76:ca:e3:99:80:87:cb:99:10:b6:9b:53:
a8:ac:39:de:c2:2a:7b:c4:00:b6:ed:1d:f4:e8:b5:
06:b7:9d:62:2c:ef:9c:a9:0b:97:61:30:6f:8a:8b:
38:c2:01:c1:88:60:6d:d3:2f:a3:1b:5a:9b:4e:2a:
91:32:2c:3c:f2:78:6e:7a:5e:1c:f6:ff:c4:7f:d9:
e4:e4:7b:10:f4:26:f1:c7:5c:43:f7:9b:ee:dc:de:
2b:fa:3e:20:f5:b0:b0:8b:d2:43:a4:83:67:4f:3b:
ae:4d:90:63:ad:85:ae:ea:5f:0b:27:af:8c:a2:fd:
84:fc:3e:6d:79:21:1b:54:3a:96:69:dd:a1:4d:c2:
79:1e:5b:07:fc:1d:9f:ee:1e:ed:80:07:e9:d2:5e:
df:91:fb:d4:4c:a9:4e:6c:72:f1:7d:fa:c7:fc:df:
d8:15:f6:18:5d:c7:2b:70:e0:bf:da:22:50:5e:fd:
cd:04:4e:ad:f1:23:a7:3c:f2:8a:be:1e:61:7c:20:
34:2c:9b:95:76:78:15:89:f1:2c:3e:51:61:56:e1:
78:8e:12:7c:8e:fd:37:68:67:7b:33:95:22:1d:7c:
48:16:7f:00:dd:7a:c0:c9:5d:35:23:c7:67:39:35:
c0:45:be:20:67:16:69:18:06:48:6f:7e:4b:d3:87:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:91:9E:5D:63:1B:93:32:AB:5F:3E:22:C8:BC:F4:E0:CC:D4:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0595F54CC97211EFAB6BE88E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.81.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:88:d4:52:91:9e:22:5b:b2:ef:b8:fa:f7:ea:bd:71:a4:30:
db:d9:32:52:59:6e:32:da:8b:c7:90:b9:97:33:6b:3a:48:7d:
3d:09:4e:7d:46:a7:db:dd:fd:23:c7:5e:7f:b9:89:89:cd:68:
dc:5e:c7:13:7f:41:82:f0:f0:aa:a0:e2:c9:dd:3c:dc:84:64:
7c:d4:69:ea:47:28:12:a5:af:cf:63:20:18:0d:06:77:b7:01:
6e:79:6c:58:46:98:0b:ad:8e:8c:71:c9:54:d3:2c:f2:87:86:
a5:0b:74:3a:59:5e:b9:99:35:8b:14:2a:4e:82:60:56:cd:5d:
95:88:e2:a9:f1:7b:53:65:1c:95:72:2e:13:63:60:11:6d:de:
ba:f5:41:45:d5:37:30:4b:b6:8b:1b:0c:ab:7b:89:a0:b9:31:
5f:49:73:c5:94:d4:56:83:c6:ed:1b:3f:04:5e:7b:87:63:e0:
bc:86:c1:7f:05:fb:e6:c0:99:6a:dd:fc:0f:88:ae:6f:f0:55:
b6:45:4a:53:04:08:cb:1d:79:4f:36:3f:9d:73:56:02:92:16:
92:ec:9f:54:49:d4:78:a5:42:64:3b:ed:79:7a:45:8b:37:1f:
67:b6:00:a6:31:e7:13:bb:30:52:d6:e5:8a:1f:28:91:81:38:
03:53:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:29:58 2025 by rpki-client