Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B79FFEECCBA11EF8822666F762E951A.roa
File: 0B79FFEECCBA11EF8822666F762E951A.roa (raw, json)
Hash identifier: UiEUTWRm7bSXyuIDDsiaQ8YBjwXVvz9d6cHGpDnO5A8=
Subject key identifier: 48:BB:F3:0E:3C:D4:B1:EE:69:64:5D:20:3E:EE:C3:E7:BC:27:CA:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B79FFEECCBA11EF8822666F762E951A.roa
Signing time: Tue 07 Jan 2025 05:41:30 +0000
ROA not before: Tue 07 Jan 2025 05:41:26 +0000
ROA not after: Sat 13 Dec 2025 05:41:26 +0000
asID: 984
IP address blocks: 156.233.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64004 (0xfa04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 05:41:26 2025 GMT
Not After : Dec 13 05:41:26 2025 GMT
Subject: CN=677cbe8a-efb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:f8:49:34:d2:0d:59:f3:4e:d8:52:89:2b:
99:8c:f5:78:0d:51:e4:35:30:24:1b:96:e1:31:1b:
a6:90:92:04:21:b2:79:74:ed:b3:aa:28:b5:ce:b9:
27:5a:c8:6f:d4:6d:32:d5:b6:40:a9:2f:14:13:c7:
fb:0f:6a:66:54:76:0b:5e:6c:34:06:0a:93:b2:da:
a3:f6:6a:03:7c:ce:a8:59:9d:1c:df:86:4c:0c:d2:
40:d0:3e:7c:45:f0:94:cd:03:0a:f5:86:6d:86:4e:
48:46:b9:0e:03:13:b2:7b:d8:de:0f:48:6e:71:30:
ad:83:22:e7:80:bc:2a:75:b1:2a:b7:20:de:46:8a:
ee:d9:d3:85:87:7f:7c:9c:89:dc:98:ac:77:94:b3:
a0:41:fe:b7:59:62:bc:6a:88:23:f6:53:0b:b8:96:
e8:70:25:b0:e6:f8:9c:92:cd:0b:00:8c:ac:45:13:
15:70:67:31:cc:de:bf:58:c6:4a:c9:98:e9:c9:20:
a1:45:01:66:9e:92:05:19:b6:02:98:cb:65:ea:c7:
e1:70:86:e3:76:a1:5d:2a:15:f1:50:2d:5b:10:6e:
05:e7:54:e5:6d:4e:83:22:e0:81:59:f4:df:a8:1e:
73:58:d1:d4:14:7d:68:2a:93:4a:eb:a6:d6:1c:f6:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:F3:0E:3C:D4:B1:EE:69:64:5D:20:3E:EE:C3:E7:BC:27:CA:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B79FFEECCBA11EF8822666F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:91:73:e3:85:ef:a8:c8:1f:49:7c:b8:b3:28:f7:e4:e3:72:
af:22:60:06:cf:de:47:a9:1d:04:87:ba:eb:f1:e6:42:6e:be:
8b:9c:ca:3f:9b:0d:c0:02:87:fd:a9:b3:68:39:2f:cf:24:0c:
a8:35:78:73:f3:d4:c0:4d:50:71:5c:05:73:c8:01:c9:27:df:
d7:2d:de:31:45:91:cf:3d:a5:9d:e7:60:e0:8c:14:41:d1:55:
96:3e:ec:13:91:ee:5b:2e:58:74:41:86:84:f0:48:db:aa:f6:
c0:c9:7e:fb:31:3b:aa:a0:a4:a3:18:5b:fa:fd:38:fe:ab:af:
2f:ee:03:45:e7:03:d3:79:49:fe:87:04:1d:4d:e5:fe:e8:64:
47:6a:5c:74:12:ec:74:2a:e8:d5:92:a2:c9:e5:0c:2d:5e:e0:
bd:7a:1c:21:41:cc:f2:69:19:a4:a0:24:d0:30:e1:fc:f6:c0:
dc:61:c1:cc:fd:01:14:6f:3d:6e:84:8f:91:e7:41:07:df:9b:
ae:35:b1:e2:05:b4:98:e2:de:56:0f:20:c3:df:32:b6:f8:a7:
ce:f5:ab:6f:08:4b:3f:c5:ab:6a:54:5b:b0:1c:5b:bc:b2:c9:
86:2d:12:a0:09:ca:9d:98:a0:ad:d9:5b:0e:5d:b3:55:3b:97:
45:b7:f9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:57 2025 by rpki-client