Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02CB4284CE4711EFAD7DA95E762E951A.roa
File: 02CB4284CE4711EFAD7DA95E762E951A.roa (raw, json)
Hash identifier: xmIbh/rbMNehoCz+3ZU5/Am9TLPgPwp51wu7khLS65w=
Subject key identifier: 94:21:AD:B1:58:DF:11:71:58:FF:9B:20:B0:D3:81:8A:6B:07:47:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01029D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02CB4284CE4711EFAD7DA95E762E951A.roa
Signing time: Thu 09 Jan 2025 05:03:06 +0000
ROA not before: Thu 09 Jan 2025 05:03:02 +0000
ROA not after: Fri 09 Jan 2026 05:03:02 +0000
asID: 17561
IP address blocks: 156.238.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66205 (0x1029d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 05:03:02 2025 GMT
Not After : Jan 9 05:03:02 2026 GMT
Subject: CN=677f588a-1b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:72:a3:62:fc:91:93:ba:23:62:7e:90:b0:
bd:44:84:bd:f6:2c:9b:5d:7d:6f:e0:9c:84:74:4f:
c9:b4:21:2f:c2:74:dc:4f:52:30:93:00:d5:31:53:
e9:1c:1a:c4:b0:e7:2a:06:76:c2:17:ec:f2:89:4b:
e3:59:8c:fe:db:ee:fe:5f:76:5e:79:47:13:8c:25:
54:a1:28:9e:bc:25:1d:21:6c:b1:53:56:89:6b:2f:
d2:d6:99:c5:83:8b:29:1a:d5:3b:b7:f0:2c:44:c7:
2c:c6:d3:9d:47:eb:86:bb:1a:0d:87:fe:be:68:16:
ee:7f:5a:71:05:6e:ee:01:cd:bb:d8:d7:27:36:54:
c5:80:06:59:cd:67:cd:3d:e3:ae:78:90:5d:9c:26:
62:d0:94:08:b2:dd:20:68:67:8e:a4:8e:24:f0:ac:
72:4b:d1:fc:55:e2:b7:59:20:11:fe:c5:a0:70:0a:
6a:d0:81:80:5b:08:ed:99:90:86:6b:87:5e:25:30:
40:d6:1f:38:3f:6d:44:cb:fb:78:03:10:75:9b:41:
23:20:d5:2f:b5:57:2f:be:7f:fa:de:14:74:4e:d2:
37:42:77:59:d0:eb:c4:d3:c4:e5:b0:5b:89:c1:72:
ed:ea:17:4c:72:fd:d7:90:5c:8d:63:27:31:c9:8b:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:21:AD:B1:58:DF:11:71:58:FF:9B:20:B0:D3:81:8A:6B:07:47:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02CB4284CE4711EFAD7DA95E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.34.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8a:62:52:70:af:d8:ff:12:12:01:e9:f8:0f:86:43:1c:dd:
20:2b:c5:bb:86:c2:a9:7b:f7:4e:db:34:b7:34:c6:aa:82:76:
89:74:e4:c4:5d:e4:f2:8c:54:fc:f2:2e:1a:78:ce:a8:41:c7:
ca:56:4b:c9:fd:03:d5:a2:5a:53:e2:46:94:05:08:9a:83:e3:
97:b5:ac:1b:9d:18:74:61:ae:b0:1f:c8:8b:05:21:55:7c:74:
98:21:3e:55:0f:27:0e:03:49:2a:6d:24:af:f6:6a:ae:98:5d:
3d:86:d0:6f:70:06:3e:15:90:99:dc:06:44:d3:89:71:91:7f:
e8:15:86:26:fb:18:b5:6e:f8:2e:e6:b8:ea:3e:fc:8a:b7:73:
b3:6a:62:f1:6a:e0:56:20:e0:be:1b:fa:d1:0a:c4:e8:39:99:
d5:01:36:7e:e2:f6:f5:03:4a:c3:a3:6a:19:3a:99:1d:cb:89:
92:49:9f:ff:7c:2d:d2:e2:8e:f1:38:7b:fa:4c:3e:c1:33:df:
64:40:d4:ba:61:72:b2:9f:a9:df:ff:df:ab:94:7e:41:d5:ae:
4e:e4:e2:0f:c0:b6:a6:44:3c:c1:23:93:01:0b:85:f8:ab:37:
8b:73:5a:14:c0:7d:d5:3b:18:ba:5e:df:de:b9:09:f4:4f:c9:
67:94:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:27 2025 by rpki-client