Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F867A8CD0611EF82903C50762E951A.roa
File: 00F867A8CD0611EF82903C50762E951A.roa (raw, json)
Hash identifier: XiLEs60Hs50o+KOqgmKotKxSgQuhUtZbWIhbukGPQu4=
Subject key identifier: E9:2D:40:4B:54:65:08:58:31:ED:32:EA:40:B9:84:BF:2C:16:BC:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F867A8CD0611EF82903C50762E951A.roa
Signing time: Tue 07 Jan 2025 14:45:14 +0000
ROA not before: Tue 07 Jan 2025 14:45:10 +0000
ROA not after: Mon 13 Dec 2027 14:45:10 +0000
asID: 17561
IP address blocks: 156.239.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64665 (0xfc99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:45:10 2025 GMT
Not After : Dec 13 14:45:10 2027 GMT
Subject: CN=677d3dfa-f350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:5a:16:cf:94:78:b0:5d:00:6b:d5:86:52:
06:bf:ea:14:26:fb:9e:f2:0d:68:94:e9:9d:dd:d1:
7c:0e:10:71:46:b4:d5:ad:51:89:76:7a:d5:dd:3c:
6e:5a:c4:3a:2f:b4:da:27:aa:1f:94:fb:64:8f:f3:
be:24:f4:96:3f:b5:80:99:c8:7d:9e:5c:f2:d4:39:
e8:5e:af:db:23:55:ce:04:b3:0b:48:7f:6d:d8:2f:
cb:dc:34:ad:76:9b:c4:de:9c:04:01:67:25:d6:4c:
c5:7a:c4:ad:0f:f0:8d:32:d8:30:42:05:bc:33:e3:
cd:ea:38:c5:fe:e9:e4:8d:cc:4e:56:64:62:2f:6b:
f6:fd:09:13:bc:fe:7b:0b:0e:75:87:41:65:ec:af:
f5:98:44:b2:d7:ca:e3:d6:0a:f7:b4:14:ae:27:97:
50:b7:66:d5:ab:83:c1:1a:c7:74:eb:ea:04:dc:01:
cb:f5:a8:57:2a:a3:13:7c:ea:39:9a:05:c6:07:7d:
a9:d1:3a:cc:d9:24:57:b5:6d:56:1d:e4:b2:1f:47:
c7:db:19:ee:1a:10:40:a3:5b:07:5b:87:9b:6f:b9:
3f:8e:18:cd:18:6b:32:51:0c:b9:ba:9f:d4:70:c3:
d4:c5:b6:54:bb:60:c0:a8:3b:d0:07:3d:91:6c:a7:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2D:40:4B:54:65:08:58:31:ED:32:EA:40:B9:84:BF:2C:16:BC:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F867A8CD0611EF82903C50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.30.0/24
Signature Algorithm: sha256WithRSAEncryption
36:80:b7:66:d4:eb:34:f9:05:53:9b:dc:50:35:81:13:e6:a1:
43:48:95:e0:8f:82:61:70:03:a7:9f:d1:9f:54:78:83:a7:cf:
86:75:9d:59:2c:fb:49:64:22:6a:01:13:f0:bd:ff:87:eb:12:
21:c8:2a:fb:e6:45:3a:d2:55:c7:f9:15:81:15:51:cd:b6:6f:
ba:b2:fb:6e:e0:f3:68:10:7b:31:a0:ac:2c:02:7d:a3:c4:d0:
60:d5:0b:ff:4e:2e:dc:ed:5b:1c:86:ee:bb:a4:ad:4c:02:2f:
4e:8e:25:cc:0b:f8:ab:5d:8b:d6:cc:34:14:67:13:94:ef:02:
e2:e0:ec:71:a8:be:ff:03:01:ec:28:4e:8e:9f:b2:2b:d7:4a:
c2:2d:12:a3:cf:3c:90:61:5f:d2:d2:49:98:88:dd:0b:2d:78:
90:14:4b:14:0d:9c:4e:72:4d:ad:88:f0:55:51:fa:7c:b7:1c:
3d:31:c9:f5:59:9d:ed:5c:c4:02:2e:e1:ee:2d:96:56:fd:05:
f7:8f:db:cb:c7:ad:dc:ee:c1:cb:56:84:81:fa:5e:81:d6:3f:
e9:73:dc:a3:7b:b3:9b:56:2e:b1:91:2a:64:12:91:a6:89:67:
53:f4:f6:37:d7:4d:7c:05:95:ac:cc:d9:3d:ea:45:ad:0c:98:
b5:b0:d8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:22 2025 by rpki-client