Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F6D31ECBD311EFAD3788A9762E951A.roa
File: 13F6D31ECBD311EFAD3788A9762E951A.roa (raw, json)
Hash identifier: ks6J/OVlag5lo0hTsCiB2IYkSoBGDsjb0ZWLc+8c1zU=
Subject key identifier: A2:6A:05:1A:61:F7:09:68:1F:1D:1B:30:DD:9D:92:F4:AE:48:52:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F7CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F6D31ECBD311EFAD3788A9762E951A.roa
Signing time: Mon 06 Jan 2025 02:08:10 +0000
ROA not before: Mon 06 Jan 2025 02:08:07 +0000
ROA not after: Sun 09 Feb 2025 02:08:07 +0000
asID: 203020
IP address blocks: 156.237.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63436 (0xf7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 02:08:07 2025 GMT
Not After : Feb 9 02:08:07 2025 GMT
Subject: CN=677b3b0a-f0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:79:2d:0c:71:14:80:bc:f3:8a:14:8e:16:
04:33:95:54:e3:d4:32:24:b5:5c:19:9d:84:0a:18:
a7:3b:c2:b1:d0:bb:9a:ff:3c:b7:87:8f:a0:bd:c6:
e6:3d:38:4d:49:a5:ec:f0:ec:08:a8:f8:39:bd:a5:
bf:8a:dd:02:e3:b2:b1:ea:d2:10:62:08:75:02:89:
67:97:e6:82:3b:21:4c:a3:00:b2:28:23:a5:ff:7d:
ae:94:5e:b6:26:98:0b:fa:20:e0:10:19:de:cf:d7:
4f:66:6f:5e:ab:4a:7b:bb:29:3e:a6:55:63:e4:3d:
1e:51:25:6a:f9:bc:2b:a8:d0:a4:21:3d:8e:2a:ef:
f0:53:d0:72:0c:02:bd:15:9a:3e:fb:56:1c:0d:d2:
f6:48:93:ac:56:20:f2:e3:3f:9d:8a:86:0d:cc:e4:
ea:50:08:94:d6:40:6e:dc:bb:27:7e:ae:7a:48:ec:
cf:96:7b:3e:c6:3c:6b:a1:2b:61:db:c2:46:6f:83:
05:f1:be:f2:8e:14:12:d7:16:7b:9c:85:9e:ff:30:
d0:ef:aa:83:88:de:5c:eb:5c:b6:e9:af:df:fe:12:
ca:1b:95:9a:2e:cd:58:3b:1d:fb:b3:e7:50:ec:2e:
70:d7:0a:dc:3c:23:3c:26:f8:f8:e5:46:39:20:d2:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6A:05:1A:61:F7:09:68:1F:1D:1B:30:DD:9D:92:F4:AE:48:52:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F6D31ECBD311EFAD3788A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.72.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:cb:08:20:89:b4:8f:4a:13:fa:87:35:11:35:eb:1a:5a:0d:
1d:2d:d1:1d:66:ae:0d:7e:02:38:15:a2:38:7a:1a:af:54:38:
44:31:74:84:8a:92:bc:cf:f4:de:70:77:7b:63:e5:22:b1:e5:
00:c7:8d:e3:56:50:07:13:87:57:df:3f:2a:72:14:52:18:6e:
24:4e:c3:61:bd:07:bf:67:2d:7e:2a:35:e7:db:e1:ce:85:05:
31:27:51:f4:57:81:5f:60:f1:d5:04:72:c1:6d:9a:b4:ad:fb:
f0:0e:93:fb:c8:2e:39:f5:ea:c7:55:04:87:63:1b:28:94:c4:
ff:77:de:8f:ca:e5:25:c8:00:2f:cc:ce:3a:c2:a4:ac:47:6c:
45:02:0d:a1:e8:1f:96:ac:21:5c:15:c1:39:41:8e:cf:35:e5:
fd:1a:00:67:7b:d6:e7:4b:9a:54:e7:c9:6f:d0:1f:b7:e7:11:
cb:9a:0a:f6:30:ff:04:b0:c0:95:6c:76:e4:90:a2:f4:6c:b7:
48:b6:e8:2e:15:c4:b7:2e:fb:96:e8:69:c8:26:05:9e:92:19:
58:b7:a1:f0:13:46:5d:56:0d:5d:c5:f9:7d:68:6d:20:d0:ee:
3e:4c:40:90:58:05:bb:a6:0a:ee:7c:46:37:c8:16:69:06:4f:
8d:13:4b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:09 2025 by rpki-client