Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7737BB82190811F0A52FE51A6EB8BCC6.roa
File: 7737BB82190811F0A52FE51A6EB8BCC6.roa (raw, json)
Hash identifier: N6K8szjsbDdnXsQbLYETyJmmIl9LzfPfloynrsy4gIU=
Subject key identifier: B8:C4:3A:15:88:AC:43:26:F2:0C:33:D8:EC:37:30:81:5F:47:AB:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7737BB82190811F0A52FE51A6EB8BCC6.roa
Signing time: Mon 14 Apr 2025 08:14:20 +0000
ROA not before: Mon 14 Apr 2025 08:14:16 +0000
ROA not after: Thu 04 Dec 2025 08:14:16 +0000
asID: 62468
IP address blocks: 156.239.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85010 (0x14c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 14 08:14:16 2025 GMT
Not After : Dec 4 08:14:16 2025 GMT
Subject: CN=67fcc3dc-5c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:69:b5:9b:72:eb:b0:47:ee:13:9a:0b:93:
ac:68:c7:80:23:2c:7d:d5:51:56:30:f0:4e:17:3c:
b6:98:e9:2c:0a:15:07:39:8c:29:d0:ba:45:00:22:
f1:e1:72:be:bd:6d:84:84:ff:29:c5:24:c8:6c:e9:
f4:e1:90:d8:55:ca:2c:c7:5a:6d:cf:0a:52:31:76:
1c:30:78:d2:82:37:ad:62:a7:1d:e4:d5:d5:67:15:
79:96:d7:28:06:27:07:b5:e7:cb:1c:8e:48:2b:cd:
54:53:59:3c:c5:bc:e7:5f:a7:b0:bd:a9:84:1d:47:
21:b9:3b:a2:4c:08:88:28:2b:fc:59:20:26:06:a3:
f5:e2:ec:64:d3:ec:98:7a:1b:39:42:f6:a7:74:1c:
13:5a:d6:a1:a1:d9:79:87:12:b1:c4:2f:0f:ce:96:
16:84:39:66:bc:02:5d:ec:02:f3:2e:5d:72:22:97:
5e:7c:1f:be:87:3d:0b:f7:2e:74:c1:0b:b0:29:d5:
87:6b:47:8a:4b:4a:d0:ff:49:4d:d1:f1:8c:20:40:
2b:7f:a1:de:3b:58:8c:b6:b5:9e:46:0a:94:16:e0:
d0:0f:f2:dd:2e:22:93:37:73:6b:c9:cc:74:3e:5c:
b8:6a:d7:05:c9:4b:a0:a1:c0:76:d2:e9:c0:6d:48:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C4:3A:15:88:AC:43:26:F2:0C:33:D8:EC:37:30:81:5F:47:AB:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7737BB82190811F0A52FE51A6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.0.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:23:3b:22:64:5d:64:39:4f:9c:be:a7:fa:90:b3:70:6e:ab:
86:67:7b:02:fa:e7:d0:4d:7c:80:fa:0e:33:81:24:e6:a1:40:
9c:27:20:f6:83:d7:e8:15:08:b0:99:c5:3d:84:58:b7:c0:e1:
d6:72:09:cf:f6:eb:b5:d5:2d:19:71:2d:80:c3:fb:cf:c3:b3:
67:df:a3:d6:38:bc:2b:c4:85:b6:b3:6b:de:4e:31:26:09:0b:
ba:05:ed:9b:46:67:ca:cf:5a:c0:bb:7c:f1:ce:da:ad:a4:fb:
e5:9c:67:9f:c1:eb:26:b8:08:07:d9:9e:0c:a3:0f:ca:c3:77:
9c:c7:8c:db:b5:c8:b9:48:aa:6c:86:f9:e5:62:f2:65:f4:1c:
9c:b1:f9:13:3e:93:13:2a:19:11:d5:28:a0:62:4a:47:5d:40:
4b:54:54:79:18:69:1b:1d:fe:25:69:52:fc:e2:6e:19:21:53:
db:37:1c:3b:30:f9:dc:4d:b3:b1:5b:fc:bb:de:75:04:7d:b6:
dc:7a:cc:5f:39:9a:6d:68:84:7a:15:8a:af:9c:05:4c:41:1a:
6f:4f:5d:82:28:42:97:31:75:bd:41:df:56:4f:1c:f2:c6:26:
cb:8e:33:8e:f3:13:99:68:56:21:ef:6e:2f:bf:f0:6e:70:c5:
50:8a:73:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:28:29 2025 by rpki-client