Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DCB0D5CC94411EFA1CBAF6A762E951A.roa
File: 5DCB0D5CC94411EFA1CBAF6A762E951A.roa (raw, json)
Hash identifier: ux9p084ar90APxs+Ac44w3otC2GDoV+Y/2obQvrglS8=
Subject key identifier: D0:74:69:5A:1B:C3:66:5C:62:55:D0:14:7D:8D:4F:21:C6:F4:B2:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F34E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DCB0D5CC94411EFA1CBAF6A762E951A.roa
Signing time: Thu 02 Jan 2025 20:01:34 +0000
ROA not before: Thu 02 Jan 2025 20:01:30 +0000
ROA not after: Sat 13 Dec 2025 20:01:30 +0000
asID: 984
IP address blocks: 156.225.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62286 (0xf34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 2 20:01:30 2025 GMT
Not After : Dec 13 20:01:30 2025 GMT
Subject: CN=6776f09e-5ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:7e:65:f1:d1:8c:be:f0:e4:e5:d8:44:37:
ac:e1:fa:45:e7:cd:7a:fa:b0:50:42:c6:88:eb:50:
4c:6e:50:ff:c8:93:c6:88:0d:a3:59:23:2b:54:05:
21:16:2a:b6:27:71:47:c4:21:64:1d:6b:b4:b3:7e:
7e:90:96:98:46:bf:f5:04:bf:26:04:89:81:a6:43:
0e:c8:fa:c9:2a:2b:17:2b:bb:9f:e6:58:70:83:7f:
47:e8:3b:f4:a8:1d:b4:69:69:3b:8c:aa:7a:f1:84:
8f:99:d1:4b:f9:e7:7e:2f:f1:4b:dc:4e:c9:be:48:
2b:28:a7:10:72:f4:39:38:2c:eb:2a:ee:22:08:c7:
9e:60:a3:cc:89:90:93:2b:81:fd:61:d5:46:59:0e:
a3:2c:fa:12:b1:05:cd:1a:1a:6c:bf:dc:9e:c9:41:
32:43:a6:3d:e1:f9:70:c4:74:d4:eb:8f:9c:7a:4d:
cf:e6:5d:45:f5:7d:6e:99:28:80:69:d5:74:90:39:
1c:e1:85:f5:8f:42:03:a9:f2:da:b8:25:43:1a:50:
fe:97:fc:91:77:bf:71:23:5a:bc:1c:8c:8c:c9:73:
f7:02:64:43:cb:b0:e1:23:1e:0d:ae:7e:09:7f:d8:
e5:b6:0e:a0:37:b1:8d:a7:e1:b5:bb:8b:5c:63:18:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:74:69:5A:1B:C3:66:5C:62:55:D0:14:7D:8D:4F:21:C6:F4:B2:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DCB0D5CC94411EFA1CBAF6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.34.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5c:27:0e:4e:92:e0:16:67:f8:92:00:2f:6e:3c:8a:e1:df:
db:b0:52:c4:12:a7:34:8a:71:a2:90:1f:ef:a8:e6:b6:36:f3:
57:8e:8b:64:0c:dd:65:e0:22:30:9e:f2:79:8a:df:f8:83:0a:
20:d5:e7:47:47:6e:c2:cd:5f:cc:e1:b6:f9:41:f7:3a:30:f6:
5f:f0:fb:bd:0a:71:d6:0b:6a:ec:6c:46:01:b6:02:05:ca:46:
dc:c9:cc:c8:17:c2:61:90:71:46:d1:e5:be:82:a6:35:30:7d:
2c:b9:f3:18:36:d7:27:68:34:a9:3e:13:36:f1:9f:ea:a2:e5:
7d:de:2a:bc:44:35:76:d6:4c:18:9b:01:ea:3b:fa:2d:5d:6c:
ed:ae:bc:e7:ec:70:d9:e1:f6:7e:9a:8e:01:9e:06:b0:53:f3:
16:eb:40:9d:4f:50:4b:c2:40:0c:80:8b:8a:98:66:34:3a:75:
82:cb:b5:0f:db:b6:7b:c9:35:dd:7a:5a:6e:1e:39:29:96:5c:
9e:6f:e5:60:3a:0d:7a:3f:72:81:07:8b:e6:82:f4:98:7e:1d:
dd:59:24:36:2b:05:00:0a:d9:d3:26:ca:f8:6b:d7:a3:f7:ee:
22:ea:3b:bb:7e:aa:83:be:7d:9a:21:5b:12:83:1b:50:c1:a5:
5f:97:12:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:12:54 2025 by rpki-client