Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11BC00EED30111EF851A0352762E951A.roa
File: 11BC00EED30111EF851A0352762E951A.roa (raw, json)
Hash identifier: EqL/Sn/0FgM6P1vWoPM1Nv5EKI2YYsmmpdgOET5I3/M=
Subject key identifier: B5:8F:CC:B5:42:E6:BD:55:E0:E0:3F:AA:5E:D8:BC:C7:F9:AD:09:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0107ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11BC00EED30111EF851A0352762E951A.roa
Signing time: Wed 15 Jan 2025 05:25:02 +0000
ROA not before: Wed 15 Jan 2025 05:24:58 +0000
ROA not after: Mon 03 Jan 2028 05:24:58 +0000
asID: 17561
IP address blocks: 156.254.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67565 (0x107ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 05:24:58 2025 GMT
Not After : Jan 3 05:24:58 2028 GMT
Subject: CN=678746ae-59c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:82:b5:d7:5f:03:47:7b:42:83:8f:dc:03:
c3:2e:2b:f8:3b:20:5f:c5:cd:63:ab:6f:9a:7e:d6:
29:2d:3d:d3:6e:55:ea:7f:bd:ee:c6:94:a7:5c:c2:
01:2e:46:79:77:02:1b:2a:ac:ae:68:68:c6:0d:88:
c6:ed:c4:22:5c:0d:4d:a0:0c:f1:51:50:c9:aa:89:
d8:17:2e:aa:d2:19:9b:3d:82:05:4a:0c:5c:5f:49:
e3:6d:62:4e:2e:c0:48:df:00:2f:aa:19:34:a6:9e:
de:da:23:58:e7:9e:b9:48:3d:5c:5f:59:82:32:be:
99:62:21:08:09:49:44:f8:61:2a:5d:9d:aa:8b:80:
df:9e:26:a7:23:22:2d:72:49:81:43:42:27:e6:ca:
46:1a:b7:2e:50:88:da:cb:fe:7c:94:63:1b:75:26:
1d:67:42:0e:76:fa:9d:8f:d4:70:84:c9:0c:f8:06:
d5:d5:eb:c1:87:c9:ad:f3:c3:74:90:99:8e:8b:74:
b4:56:0a:71:db:73:1d:84:51:de:38:c3:4c:21:19:
21:23:8c:8d:3d:62:36:37:e1:28:72:34:6f:67:55:
ad:68:15:2e:be:e9:00:13:2f:a6:87:80:ad:c9:e8:
29:ad:4a:a3:43:2b:76:45:53:c8:6c:a2:53:99:02:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8F:CC:B5:42:E6:BD:55:E0:E0:3F:AA:5E:D8:BC:C7:F9:AD:09:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11BC00EED30111EF851A0352762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.33.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2f:14:15:44:8c:e7:46:dd:c9:de:2c:57:f6:d0:35:20:a1:
f6:af:96:1a:67:58:7d:22:6c:57:2e:cd:8f:07:1b:f3:75:b5:
5f:9c:1f:82:b8:e0:4c:69:06:fa:21:62:c4:2b:6f:1d:cf:b4:
73:e3:07:4d:d3:7d:4e:98:30:f7:e0:17:65:58:d4:bc:b9:c8:
db:4e:19:4a:d6:02:d0:9d:b8:48:27:ea:4b:e1:b6:73:e3:73:
c7:d3:9e:3e:c4:64:c4:f8:ba:3c:0a:aa:42:33:a3:ad:32:f4:
c2:50:d6:24:21:fe:f6:3e:d4:de:bd:4e:ba:8f:73:ee:25:de:
e4:82:db:23:df:01:b2:ce:6c:27:f1:97:ee:70:a1:5f:a8:3a:
1a:a4:7e:a9:17:55:7a:6b:53:58:85:9c:c9:25:83:68:b9:6a:
8b:8d:a1:1b:38:5d:a4:a2:a6:6d:e8:d6:da:44:4d:c0:f0:2f:
f0:d8:48:18:cf:4e:8f:59:b3:b9:ac:f4:f7:bb:74:23:59:16:
c6:ad:e3:b5:88:1e:88:97:02:bd:b7:0c:64:36:0f:03:75:b3:
a3:ef:b9:ff:f9:6e:37:98:d8:01:63:61:e9:70:bf:ea:6e:6b:
f1:7b:8e:4a:3b:d7:d1:f2:b2:1b:d0:7f:b8:f3:ef:46:89:ba:
d6:df:75:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:46 2025 by rpki-client