Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07AE991AC96311EFA45CDAAB762E951A.roa
File: 07AE991AC96311EFA45CDAAB762E951A.roa (raw, json)
Hash identifier: p015J1RJ3/myL/av66NIktOduzv/6LOy9HGsqdYWhbQ=
Subject key identifier: 0E:6B:5D:67:63:06:5F:0A:90:39:E3:54:7A:D1:BE:4C:B7:D8:49:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F472
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07AE991AC96311EFA45CDAAB762E951A.roa
Signing time: Thu 02 Jan 2025 23:41:04 +0000
ROA not before: Thu 02 Jan 2025 23:41:00 +0000
ROA not after: Mon 13 Dec 2027 23:41:00 +0000
asID: 17561
IP address blocks: 156.226.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62578 (0xf472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 23:41:00 2025 GMT
Not After : Dec 13 23:41:00 2027 GMT
Subject: CN=67772410-9700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a1:31:47:7e:1f:f3:0d:99:70:35:21:ba:4e:
52:b1:83:36:97:15:e3:31:62:cd:7d:5d:b3:77:27:
2a:a8:6e:96:30:bd:1e:df:70:a7:63:0b:c5:af:7a:
7d:06:ec:e7:d1:ad:b2:69:e5:69:02:1b:0b:23:52:
70:36:26:a0:b6:c9:8b:40:7b:2a:8c:71:c0:d9:9c:
78:fa:04:0f:30:55:c3:7d:b1:6f:1e:3c:88:48:71:
d0:41:2d:dd:33:f4:33:10:51:d3:79:d4:04:b8:c3:
a2:e4:15:e8:66:d2:01:1e:b0:6b:47:d8:df:79:1b:
4b:56:d4:a9:ad:b7:da:f2:df:0a:5a:c6:95:d5:fa:
ea:a3:5e:48:1d:b3:b8:f9:e3:64:23:1a:d0:cc:6a:
9b:94:ad:36:2c:6e:87:4a:09:ca:ee:c2:26:7f:e8:
67:22:16:91:96:02:68:f7:b9:66:49:e9:c8:e4:98:
4e:ad:3f:b5:a0:d0:d5:76:14:f7:05:fe:44:f2:ba:
02:17:46:b8:e7:11:65:b2:ed:57:a3:9e:0b:bb:4c:
00:bb:40:69:44:06:a4:c9:34:ed:16:88:c0:bf:de:
21:aa:33:95:fb:fa:a6:93:8b:b3:43:64:65:bf:d8:
da:6d:5c:fc:71:a8:9b:c2:48:34:e7:24:a8:27:85:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:5D:67:63:06:5F:0A:90:39:E3:54:7A:D1:BE:4C:B7:D8:49:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07AE991AC96311EFA45CDAAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.235.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:46:e6:31:d8:5a:63:97:cf:31:5e:29:d5:8a:6a:75:c3:c2:
d3:fc:11:8a:13:c4:b2:12:ee:69:e0:bc:18:64:e1:06:19:59:
ed:7b:d3:c7:26:42:d0:18:51:25:70:19:b0:af:65:df:ba:95:
6f:ca:86:0e:f0:62:d5:ca:db:28:c8:ed:68:8a:8f:40:83:35:
8a:b0:4b:a4:45:a8:c4:89:84:75:85:c8:29:1e:fa:59:6b:90:
1a:52:5b:ad:ee:73:bb:e0:0c:21:f9:2b:28:d2:0a:42:df:8b:
5f:41:92:b9:37:ad:41:50:ba:dd:4e:df:6a:d8:1a:59:f1:b7:
d0:a3:1b:c5:4c:28:b8:2b:f8:3e:fe:a2:c9:8b:ba:ab:2f:c5:
31:2b:32:17:8b:08:b3:51:f4:b3:ff:61:9b:f5:81:2e:23:73:
5f:ee:e6:ec:13:7e:3e:77:c5:b0:bd:d9:c7:fa:7a:39:86:c8:
c4:cb:f6:21:46:56:57:78:4a:7b:73:c9:91:4b:0f:be:50:c6:
e5:26:d7:14:0d:1a:72:5b:f6:3d:ef:96:fc:87:71:f3:11:d5:
4f:2f:22:3b:18:36:eb:65:b6:eb:74:71:2f:aa:44:38:d6:ab:
18:29:ed:37:94:96:21:fc:21:75:bb:42:cc:eb:e7:35:d7:b8:
1f:ac:7c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:49 2025 by rpki-client