Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CA126400CD711F0BF3703B8762E951A.roa
File: 7CA126400CD711F0BF3703B8762E951A.roa (raw, json)
Hash identifier: 3sP1yvLpa9kKgiABgOBskS4FYSgq2G2ZZO6m5+W3rW4=
Subject key identifier: 56:2A:FE:CC:24:B6:D3:36:C3:1B:B7:3B:A6:34:ED:5C:23:81:1A:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014910
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CA126400CD711F0BF3703B8762E951A.roa
Signing time: Sat 29 Mar 2025 19:53:30 +0000
ROA not before: Sat 29 Mar 2025 19:53:26 +0000
ROA not after: Tue 19 Aug 2025 19:53:26 +0000
asID: 40065
IP address blocks: 156.254.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84240 (0x14910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 29 19:53:26 2025 GMT
Not After : Aug 19 19:53:26 2025 GMT
Subject: CN=67e84fba-7dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:e6:55:13:d7:3c:54:8f:4d:a1:d6:fc:52:
c5:26:6e:e6:a7:cc:bd:83:d4:fd:55:b6:0e:c6:bc:
d8:9b:22:69:2d:96:ff:02:89:01:a7:2f:2e:a0:d4:
a5:bb:f7:29:c4:55:13:33:3f:23:91:1b:17:f3:15:
66:16:64:70:3b:41:58:62:75:ca:ce:f4:46:29:6b:
07:23:c1:e1:61:83:f4:6c:a5:a0:3a:7c:4e:38:1d:
3e:10:b1:23:e5:07:59:0d:c2:6c:e5:d2:35:e6:08:
ee:c5:6a:31:0a:f8:80:66:69:b8:91:ce:82:53:f9:
6c:66:dc:2b:03:aa:af:2d:aa:ef:b5:bd:78:ea:ca:
04:ad:95:ee:4d:cd:c6:1c:ad:30:8c:fe:88:ae:96:
7d:6e:c4:ef:36:eb:06:a7:b4:7c:4d:31:66:5f:fc:
29:62:d3:b5:21:9e:58:9b:c6:b3:18:e3:f0:aa:21:
4a:7d:b5:91:3c:35:3f:af:96:6d:96:42:ff:e3:b7:
a4:72:37:d4:6b:fb:ca:d6:72:6f:ff:a9:0c:9f:44:
82:b7:e9:d3:74:45:0a:12:ef:14:e2:89:5f:39:e6:
cd:49:9e:f1:07:a5:1e:95:a9:da:cf:ce:29:10:c3:
95:a7:d0:fe:1e:71:c7:68:09:19:c5:e7:8c:26:1f:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2A:FE:CC:24:B6:D3:36:C3:1B:B7:3B:A6:34:ED:5C:23:81:1A:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CA126400CD711F0BF3703B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.18.0/23
Signature Algorithm: sha256WithRSAEncryption
87:59:c5:36:9d:18:cd:5e:eb:b3:a4:7a:98:66:d9:10:6c:c4:
27:6f:1e:f2:8a:2e:b5:fa:fd:9a:f1:43:db:4d:fa:0d:93:aa:
1d:1e:b3:81:39:d2:6f:8a:46:ed:55:d4:b0:42:f7:16:27:23:
7f:eb:c1:2f:c7:66:55:99:7f:6d:79:ac:f6:86:aa:2f:3e:db:
32:29:04:d6:77:3f:6c:1d:ae:04:9f:2d:53:b7:bf:7b:65:7f:
77:6b:43:c7:19:ba:0f:55:00:cb:02:e3:21:41:e3:be:b3:72:
b0:75:52:10:a3:df:40:38:b3:42:57:5d:5d:e2:0b:87:71:c5:
eb:0d:be:58:54:8f:91:4e:91:c6:cd:f0:9b:78:0e:10:9c:b5:
b3:1c:1e:bb:73:28:f7:2e:aa:ec:2b:85:25:f9:20:86:c2:0a:
a9:1e:3e:3c:d2:6f:9c:59:05:f4:54:ec:bd:b1:84:c1:a4:1d:
08:57:d3:d0:71:5c:40:57:3b:bc:ba:c2:e4:21:11:57:60:4d:
04:2e:28:f3:30:8b:fe:81:ba:1c:a8:49:63:77:f4:7d:14:31:
1a:9c:96:66:50:2d:09:db:c8:1e:17:61:23:5f:eb:2a:aa:56:
96:ef:00:91:5f:60:7f:d5:14:74:ca:7b:03:e2:d7:b8:7e:69:
ae:01:e6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:23:10 2025 by rpki-client