Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0272493ED31711EFBFB7AF5A762E951A.roa
File: 0272493ED31711EFBFB7AF5A762E951A.roa (raw, json)
Hash identifier: Fg1rLKA5HJyI1PI+SSHl+fusQr4WlY69FvFeBHKo28A=
Subject key identifier: 57:C0:9F:E7:06:A9:C4:87:38:ED:02:41:4B:E8:BA:50:62:29:10:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010873
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0272493ED31711EFBFB7AF5A762E951A.roa
Signing time: Wed 15 Jan 2025 08:02:05 +0000
ROA not before: Wed 15 Jan 2025 08:02:01 +0000
ROA not after: Mon 03 Jan 2028 08:02:01 +0000
asID: 17561
IP address blocks: 156.254.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67699 (0x10873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 08:02:01 2025 GMT
Not After : Jan 3 08:02:01 2028 GMT
Subject: CN=67876b7d-3bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:a3:8d:c0:9d:9a:75:5a:8f:9c:aa:35:30:
45:71:1a:8b:4e:3e:ea:3b:a9:3c:f8:7b:4b:ae:4a:
bb:36:31:e0:a9:e3:38:2a:8d:16:86:f0:04:d9:bc:
38:9d:dd:6f:a6:79:17:e0:06:c9:73:f0:e0:24:33:
79:b3:d0:a6:f0:11:30:c7:b7:30:3f:75:4b:1e:73:
52:6c:d4:f2:ee:c4:a8:76:cd:87:b3:99:4e:a2:e5:
fe:4e:8a:8b:1b:5b:0b:c2:ba:c3:b8:19:f3:8e:be:
28:ff:67:6e:2f:0b:26:42:5b:00:74:57:29:fb:d3:
08:ec:06:1a:dc:8b:12:d0:e6:ef:09:d5:3e:71:06:
de:8e:d6:b7:46:33:76:0d:dd:b1:d4:d3:dd:d3:83:
cd:3c:cf:09:89:10:9f:e2:5d:1a:a7:b7:aa:f4:36:
18:7e:e4:a0:0f:eb:5f:f8:89:fe:8e:ac:a2:5a:93:
8d:82:7b:00:1b:88:90:df:e8:5f:1b:58:07:73:ed:
e5:6f:dd:57:96:42:00:6e:17:bc:b5:fb:bd:21:ee:
0a:ae:a0:84:ec:3a:17:aa:2a:11:01:c3:a8:1d:b6:
0a:f2:d6:af:e3:d1:5e:d5:fd:de:9c:88:62:fc:ee:
7e:1c:a2:9d:16:64:23:de:45:24:62:c0:1e:99:fc:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C0:9F:E7:06:A9:C4:87:38:ED:02:41:4B:E8:BA:50:62:29:10:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0272493ED31711EFBFB7AF5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:44:ea:69:ec:52:61:75:bf:e1:e1:ca:3f:76:fb:35:3a:8a:
99:27:a2:55:b2:32:5c:52:f1:eb:7e:8f:6d:b5:b1:0b:70:d1:
dd:4c:27:d1:e2:6b:d7:e1:e1:db:ec:0f:a9:be:12:78:8e:cb:
f4:1c:33:29:b5:32:6b:13:d4:b7:b7:15:f3:f3:d9:5f:bd:55:
0a:69:a9:8f:95:e0:b2:81:f1:54:09:c0:a5:f7:18:c2:87:a2:
b2:74:d3:4d:1e:d2:d3:53:68:b9:dc:3b:88:34:7a:fe:48:31:
8c:e3:e0:6c:42:34:e7:bd:f5:61:fa:72:b9:7a:8f:d5:4d:25:
dd:c6:f0:93:da:a6:ab:40:23:fc:5b:a2:fe:09:e6:32:27:b8:
7c:22:43:08:69:f0:42:6b:16:89:4d:59:59:26:33:35:ac:bd:
04:2e:97:65:60:b3:dd:91:7b:07:d3:9d:c7:70:88:03:11:c9:
c6:83:0a:cd:dd:2f:dc:e7:f6:11:73:ba:ea:78:91:a8:75:2e:
d6:09:fe:9a:42:15:07:71:d5:17:84:ef:e1:bd:d0:af:5c:a4:
58:e0:7b:39:71:41:ef:ec:c0:be:36:ff:01:30:a8:38:4b:1b:
f0:4a:b6:29:0a:2f:3e:d6:36:1b:fb:e0:21:c2:26:58:60:89:
b6:9d:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:43 2025 by rpki-client