Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14B21340AD5B11EFA2B901B7762E951A.roa
File: 14B21340AD5B11EFA2B901B7762E951A.roa (raw, json)
Hash identifier: wk2dIRkbIiccGQRoI49Jy1VCxoa4yRoPs/SXJZ/3i2w=
Subject key identifier: 7A:6F:23:7E:B6:CF:99:68:16:31:89:B4:AC:10:75:7D:55:96:50:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DC4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14B21340AD5B11EFA2B901B7762E951A.roa
Signing time: Thu 28 Nov 2024 07:33:37 +0000
ROA not before: Thu 28 Nov 2024 07:33:34 +0000
ROA not after: Tue 11 Feb 2025 07:33:34 +0000
asID: 3561
IP address blocks: 156.248.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56395 (0xdc4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 28 07:33:34 2024 GMT
Not After : Feb 11 07:33:34 2025 GMT
Subject: CN=67481cd1-0312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:74:14:57:fd:28:33:bb:8f:11:66:b4:9a:
41:bc:25:dd:02:47:f2:54:8b:8c:5b:23:1e:b0:ae:
f8:65:76:22:fb:34:85:d6:81:3b:ce:41:c6:5c:7c:
a4:c3:be:b6:81:9f:90:60:1f:eb:e4:89:f8:6e:10:
fd:74:20:1c:56:3f:c6:08:00:05:c3:bd:d9:ff:80:
5e:f6:14:1a:1a:a8:d6:a8:a4:91:71:62:cd:de:07:
62:6e:c8:4c:89:40:06:77:55:cf:6f:62:97:bd:ac:
62:60:be:d0:0d:ca:28:23:46:da:c0:26:20:37:e1:
96:e3:c5:8c:b4:5a:db:84:ba:1e:8f:c7:55:c1:cc:
0f:fe:b5:37:72:f2:6f:64:31:44:56:1f:89:b0:05:
d8:bc:05:3e:ea:25:98:67:df:9b:ff:35:e6:2d:59:
ff:a7:91:a8:fc:47:e3:e7:02:b9:1c:e0:01:a2:c0:
4d:3b:93:1c:d9:e8:73:1d:b4:4f:be:9a:76:e2:64:
ef:49:70:16:6e:b2:a4:6c:c4:58:0b:e6:d2:4a:39:
e6:02:34:4c:fa:4b:36:76:78:36:fb:b2:6b:61:c1:
fe:79:5c:1b:57:53:c4:28:b2:8a:a3:57:7b:73:d8:
89:06:27:39:3d:78:26:06:87:b0:ba:59:42:16:a1:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6F:23:7E:B6:CF:99:68:16:31:89:B4:AC:10:75:7D:55:96:50:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14B21340AD5B11EFA2B901B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:d1:e7:91:9e:c3:43:f3:fc:ad:28:b9:6d:c3:65:9f:1e:3c:
b2:f6:9f:e8:59:a1:22:5a:91:74:95:b8:a4:d0:99:05:c7:76:
28:09:83:64:30:1e:4c:4c:b9:38:42:7e:32:b8:56:66:ac:14:
72:05:63:f0:35:28:95:f2:a3:2f:e2:aa:05:8a:05:62:29:b6:
99:67:5e:8c:a5:c4:49:3a:30:87:dd:01:e3:8b:f0:71:48:70:
ca:c1:ec:11:49:f1:56:85:a7:c6:97:e8:12:10:60:64:a1:8e:
30:67:3e:67:40:d5:40:30:26:fe:a4:6e:3c:64:15:c3:cc:6c:
c0:b8:de:26:5e:14:3a:3b:b1:e4:5d:50:48:74:72:ae:34:3d:
cd:e0:0d:6a:a1:c4:5f:ac:15:8d:7f:32:be:6c:15:1d:db:7b:
6a:3d:19:83:06:c9:ad:a8:12:31:f1:bf:99:1a:ac:bd:b0:d1:
e5:b9:9c:62:b5:45:c6:8f:20:43:87:94:90:7a:e4:d0:b4:81:
af:10:93:15:f6:8a:1b:6a:60:c1:5b:c1:e0:85:d0:ab:6d:53:
97:d5:2c:f6:20:70:1b:30:d9:38:04:7b:23:29:9a:3a:7f:d7:
cf:e6:1c:3f:cc:cf:9e:c4:db:2f:72:05:7a:62:68:b7:1b:af:
89:0a:4d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:12 2025 by rpki-client