Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03E75A34CD2211EFAEAA197F762E951A.roa
File: 03E75A34CD2211EFAEAA197F762E951A.roa (raw, json)
Hash identifier: SRstKPKD5qU2ll7z1jTwXHX5l+WOlgv1VoVKAOFFy7E=
Subject key identifier: 7E:01:8E:C8:AC:EC:0F:C4:D7:E5:FF:3D:59:B2:43:2B:4F:0C:C8:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD7B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03E75A34CD2211EFAEAA197F762E951A.roa
Signing time: Tue 07 Jan 2025 18:05:45 +0000
ROA not before: Tue 07 Jan 2025 18:05:41 +0000
ROA not after: Sat 13 Dec 2025 18:05:41 +0000
asID: 984
IP address blocks: 156.241.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64891 (0xfd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:05:41 2025 GMT
Not After : Dec 13 18:05:41 2025 GMT
Subject: CN=677d6cf9-4447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:e6:9c:96:3e:0a:a3:88:5a:e9:81:b6:4e:
6a:18:fc:8b:b3:37:3d:b1:9e:af:f0:2d:26:1e:c7:
0a:fc:bc:a7:fa:61:1b:f7:09:3d:d8:77:b3:42:9d:
7e:59:0d:f6:b5:ed:45:6d:7a:79:37:48:7c:99:2c:
dd:93:11:e0:fd:9b:47:44:b3:f4:e8:72:73:29:ee:
b4:e7:d1:81:72:fe:a2:b9:c9:92:8d:b5:a1:80:be:
ba:98:4a:24:2e:1c:00:a5:42:8b:89:cb:f6:c0:09:
fd:5d:e8:a5:61:35:cb:ee:a6:72:5f:39:96:a3:e6:
eb:e6:cf:73:27:56:a3:6a:46:de:ba:da:d0:f9:e2:
b0:ca:f2:6b:64:e2:6d:f9:75:c2:6f:48:d9:c7:54:
5c:d1:e2:e7:d6:b6:03:a1:e5:a7:16:69:f5:f7:3e:
b7:5b:9c:78:70:7e:97:a4:d2:94:29:8e:ad:35:c8:
2a:2d:6e:5d:ce:43:24:15:e3:2e:ab:10:64:15:5e:
52:80:67:e5:a5:fb:de:22:c8:f1:fb:fb:88:c8:42:
82:9d:55:41:77:1d:62:a1:4e:a1:0e:e8:83:34:2d:
ca:ac:cf:8a:83:27:10:82:f6:e0:95:83:e1:d2:a3:
79:9f:6c:fb:bb:46:6b:c0:b8:ca:16:4b:2d:b5:e6:
0c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:01:8E:C8:AC:EC:0F:C4:D7:E5:FF:3D:59:B2:43:2B:4F:0C:C8:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03E75A34CD2211EFAEAA197F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.200.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8e:c0:9a:23:ad:1d:37:71:59:77:df:d6:65:4c:15:74:40:
e8:24:a6:e6:a8:81:a2:15:d4:fe:e8:aa:68:bf:db:f5:ec:9a:
b5:08:23:a9:ef:74:e6:57:87:d5:96:78:1a:8b:d2:8a:0a:33:
fb:4d:77:25:d9:e1:dd:0a:a3:b6:67:32:fc:0a:0b:33:d1:c1:
b6:df:64:44:8f:22:92:be:79:fd:b5:9b:c2:9e:c3:06:e2:e4:
02:df:91:8b:8f:70:1f:50:ba:1a:d2:20:59:b1:20:15:e0:de:
d1:74:66:54:d3:20:79:54:24:30:ea:d5:2c:df:b3:70:2b:7c:
77:44:fe:87:e3:a6:b3:93:88:7f:08:f4:2a:ed:82:a5:14:45:
8a:58:ee:c8:48:79:d5:35:3c:b1:d3:12:85:1e:17:0c:92:17:
5d:c3:44:11:d9:d4:da:55:6e:36:f3:4f:10:e7:99:27:86:7e:
0f:f5:3d:28:9a:86:2e:46:38:3a:07:ac:31:58:12:94:60:34:
9e:77:d3:72:0b:da:b7:c4:ef:f8:65:82:10:33:b8:84:1d:dc:
72:c2:87:4e:61:6d:1b:8c:00:72:c2:d1:94:41:98:e9:d6:dd:
52:9f:4d:38:bf:16:20:e7:e0:0b:be:9e:58:21:07:59:45:d8:
85:d4:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:57 2025 by rpki-client