Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1097C668CD3D11EFBA185AA8762E951A.roa
File: 1097C668CD3D11EFBA185AA8762E951A.roa (raw, json)
Hash identifier: hzMm86K3RQEjygQtTz6q4mFVE420YmLydbFnp3hL/js=
Subject key identifier: CF:23:AB:A8:29:F0:87:8B:00:1E:00:77:50:D6:CB:F1:8B:82:11:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1097C668CD3D11EFBA185AA8762E951A.roa
Signing time: Tue 07 Jan 2025 21:19:23 +0000
ROA not before: Tue 07 Jan 2025 21:19:19 +0000
ROA not after: Sat 13 Dec 2025 21:19:19 +0000
asID: 984
IP address blocks: 156.243.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65105 (0xfe51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 21:19:19 2025 GMT
Not After : Dec 13 21:19:19 2025 GMT
Subject: CN=677d9a5b-f0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:73:a2:c1:2b:ae:a3:d2:25:ea:f0:cf:7d:
88:47:65:fe:7a:4e:db:c1:24:e0:55:d1:df:2e:22:
89:86:0b:bb:ca:cc:6f:2c:28:83:44:c9:5b:6f:8d:
84:dc:39:e5:a5:e9:08:08:7b:d6:eb:9c:8d:7e:8a:
32:51:ec:e5:31:80:36:48:fa:ef:aa:03:c5:82:17:
1d:98:84:54:b0:6a:82:b2:82:9f:a4:20:d9:4f:fb:
9b:a3:09:ed:7a:02:41:bd:f2:6b:e1:41:ba:22:85:
a2:56:46:3f:3c:ae:c1:77:2a:0b:a2:b1:02:87:ef:
e5:24:1d:f7:c3:47:36:c2:43:77:7a:00:a8:43:0f:
35:68:60:a6:a4:52:22:ac:5e:58:92:9c:af:70:69:
c6:ac:17:f2:79:2e:08:2d:d1:a1:9a:6c:e8:1d:e1:
5f:25:5a:15:a9:f3:c5:10:28:75:47:f2:c7:aa:db:
ca:cf:7d:71:c4:09:6a:cc:65:9b:93:0a:36:90:ec:
ea:30:e4:8b:65:59:18:52:0c:4d:a3:20:c6:a6:e7:
9e:8f:33:f3:bc:87:13:4c:45:9b:d4:d5:6e:f2:55:
b3:77:a6:47:f1:af:0b:f1:ef:d8:f9:50:17:be:ea:
1c:54:2b:4a:c1:07:c1:a7:a0:c8:d2:57:a8:f1:10:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:23:AB:A8:29:F0:87:8B:00:1E:00:77:50:D6:CB:F1:8B:82:11:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1097C668CD3D11EFBA185AA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.81.0/24
Signature Algorithm: sha256WithRSAEncryption
af:cf:3c:31:63:73:1a:ef:1c:6e:55:13:78:0a:29:fd:f0:ae:
32:23:06:61:90:1f:04:13:aa:c0:ab:5f:2f:75:fb:28:04:55:
f6:3e:25:11:77:fa:88:d7:a2:75:6f:2e:80:0b:62:bb:18:d7:
e8:ba:ee:34:8f:be:a4:2b:c3:15:84:0f:7d:44:78:1a:a4:e8:
22:c8:14:84:9a:6f:ec:6f:12:69:ad:9e:f4:0f:3a:de:d1:57:
97:bb:5f:17:e2:ed:95:78:a0:af:08:53:2b:da:08:1f:71:51:
32:d2:36:bd:83:a0:b6:c8:2f:f6:95:52:38:98:51:ce:36:90:
29:4b:6f:d3:a4:93:77:68:4f:d1:2a:7c:86:b1:df:64:50:1a:
be:8c:fa:81:21:fa:5e:3a:62:00:54:79:bf:5e:fc:b0:63:b8:
9b:ae:8b:cb:0b:c4:2c:42:0a:57:26:a8:bd:5d:e5:25:e8:18:
90:10:24:3a:3d:ce:4d:f6:27:06:3a:7b:1a:cd:ee:af:c2:93:
bc:18:d9:76:19:0e:4c:56:42:71:cf:70:a5:70:2e:6d:f3:28:
8c:c6:51:20:66:22:c3:54:33:63:02:bf:45:53:ac:00:20:4a:
04:52:19:0f:c3:7c:97:08:6d:eb:c8:85:71:09:b7:bc:57:dc:
12:07:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:48 2025 by rpki-client