Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0409C5ACCAD311EF9A810F53762E951A.roa
File: 0409C5ACCAD311EF9A810F53762E951A.roa (raw, json)
Hash identifier: /znuAfRSq2jSZF+06W+RK9E4MfMkg0YHWjdjsx3C37E=
Subject key identifier: 88:41:D1:6E:15:2D:C5:33:3B:C5:FE:99:18:11:60:BE:24:6B:B6:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F784
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0409C5ACCAD311EF9A810F53762E951A.roa
Signing time: Sat 04 Jan 2025 19:35:13 +0000
ROA not before: Sun 05 Jan 2025 19:35:09 +0000
ROA not after: Sun 09 Feb 2025 19:35:09 +0000
asID: 11404
IP address blocks: 156.237.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63364 (0xf784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 19:35:09 2025 GMT
Not After : Feb 9 19:35:09 2025 GMT
Subject: CN=67798d71-4e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:75:a8:c2:6a:51:55:87:61:bc:c9:7e:0d:
24:39:2b:32:5b:00:48:a7:87:e7:6a:cf:b4:75:26:
c6:aa:e9:9e:21:15:4b:a1:08:91:9f:17:96:60:b5:
69:4e:55:a3:39:ad:7f:e8:42:55:d5:f9:bf:62:4b:
28:de:9a:0e:0d:72:08:74:24:7e:2e:32:7b:38:ff:
20:b7:14:82:83:e5:83:ce:e5:b5:1f:91:e2:70:0b:
b9:3c:71:a2:53:48:45:f8:21:e4:0b:f3:21:a8:49:
92:82:f9:6f:23:71:ca:9d:f7:be:8a:d4:64:1a:1b:
f8:1a:8a:b3:36:bb:45:fe:c9:c2:73:3a:47:13:59:
e3:e5:84:1e:08:12:3f:6e:ff:07:96:05:5b:6a:10:
d6:78:89:c2:49:3d:5e:8e:6c:0e:65:f2:3e:9f:03:
71:2e:54:16:91:d5:bc:f1:96:ec:af:ba:30:b0:84:
f2:43:90:83:c9:08:2e:d4:7d:21:cc:d4:77:38:10:
26:9c:82:2e:d2:cc:a2:fa:06:36:1e:42:2c:f6:d4:
02:65:34:1d:0c:2e:dc:b4:8c:5f:ab:7b:2b:ca:05:
ae:63:9b:5f:c6:68:56:d6:78:48:66:2c:77:32:48:
74:68:5c:96:22:29:7f:25:bc:e6:9f:90:99:8c:b6:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:41:D1:6E:15:2D:C5:33:3B:C5:FE:99:18:11:60:BE:24:6B:B6:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0409C5ACCAD311EF9A810F53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.16.0/20
Signature Algorithm: sha256WithRSAEncryption
44:b6:98:b0:b2:e6:85:6b:4c:d9:ee:18:27:04:50:cc:c7:f3:
80:b1:e1:30:16:20:0b:05:79:51:e1:06:2c:32:99:3f:7b:7d:
f7:cf:f7:97:97:d7:69:12:a7:64:b0:52:34:14:7b:9a:f7:b6:
c4:27:80:c4:14:07:15:2f:42:0e:81:0d:14:85:70:5c:35:f1:
10:ef:83:36:b4:44:5a:5d:f0:97:f3:b2:3f:1f:26:4c:c9:3a:
81:89:98:02:d9:8a:e0:e8:09:ec:3f:5d:bc:08:a3:dd:20:b7:
b4:fc:6c:e7:25:79:2e:39:e8:6d:32:12:50:94:b5:6b:51:2b:
f5:39:8b:94:37:4e:80:d8:aa:4d:6f:a2:97:6a:37:71:7f:82:
fe:8e:0a:0c:8a:16:1e:0b:26:89:04:35:d5:b1:9b:e4:1b:1d:
b1:57:36:06:6e:59:c0:fb:cd:d3:4c:a3:62:b2:16:52:bc:bf:
1d:77:e8:c0:eb:31:bb:3d:a9:06:4e:1f:52:91:e5:ee:7b:26:
85:c8:a4:50:47:6a:df:69:76:04:45:a0:e6:9e:4a:b2:c0:eb:
f6:67:d3:10:81:d3:eb:f4:6e:d7:84:65:a4:a3:cc:97:d3:2e:
0f:e8:fe:81:62:b5:e2:69:21:28:94:84:fc:22:5f:67:23:b7:
cb:00:02:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:27 2025 by rpki-client