Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/165F39B6C33B11EFB65EC896762E951A.roa
File: 165F39B6C33B11EFB65EC896762E951A.roa (raw, json)
Hash identifier: pJt1JJm5PhLvL/6fHW3TvF6E7zykyt1dQODV/apGE2s=
Subject key identifier: 4F:9B:AE:30:06:98:13:AA:DA:1F:40:C0:E7:F2:3E:A1:51:40:3D:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB85
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/165F39B6C33B11EFB65EC896762E951A.roa
Signing time: Thu 26 Dec 2024 03:40:02 +0000
ROA not before: Thu 26 Dec 2024 03:39:58 +0000
ROA not after: Fri 10 Dec 2027 03:39:58 +0000
asID: 17561
IP address blocks: 156.244.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60293 (0xeb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:39:58 2024 GMT
Not After : Dec 10 03:39:58 2027 GMT
Subject: CN=676cd012-fcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:d8:1f:d1:2a:37:bd:35:21:e4:c3:26:17:
f8:cd:1a:ee:32:d2:35:f1:3a:19:2b:1b:19:6e:21:
34:5a:65:6f:b8:95:99:36:35:3d:4d:28:7f:0f:fb:
f6:80:fc:ef:92:77:c3:85:a5:00:d9:56:11:69:aa:
23:5a:c1:bc:06:c3:c7:97:6f:b6:4c:b2:a0:6a:6c:
e2:7d:0a:c7:a3:21:7c:e9:5d:b8:fe:04:48:c1:73:
f0:d6:41:28:e6:2f:16:d6:b0:32:0d:b3:39:39:1c:
38:0d:a0:11:9a:08:09:01:8d:17:60:fc:f1:97:6e:
97:d4:54:9c:8c:39:31:94:8d:87:8a:e0:7d:dd:2e:
58:cb:48:f3:ed:ad:40:52:18:ac:e1:4f:9b:f0:86:
5b:b6:a6:6f:59:6a:e0:c8:32:e4:0d:af:a9:68:e4:
e3:17:44:c3:59:3e:93:9b:46:6f:9a:7d:dc:f3:32:
9d:91:24:09:6a:d0:a4:3e:4e:d0:32:04:13:e7:1f:
4e:16:71:e6:65:b1:5e:81:b8:d6:6f:0a:64:9e:7d:
b0:03:f4:08:49:92:45:99:3a:ae:96:d4:89:2e:b4:
59:4b:3d:2d:e6:f3:74:74:e3:cd:b9:a1:72:f4:06:
31:ee:75:ba:fb:68:72:2e:34:e8:d1:f2:2a:89:7d:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9B:AE:30:06:98:13:AA:DA:1F:40:C0:E7:F2:3E:A1:51:40:3D:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/165F39B6C33B11EFB65EC896762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:21:91:62:fe:4f:4f:02:1e:5d:0b:26:53:f3:15:bd:8a:a0:
cf:ea:2f:f4:67:e8:bb:77:c2:69:82:48:46:96:dc:10:c9:2d:
96:2f:ee:ee:f9:ee:f0:e7:cb:71:21:06:59:1b:ad:74:cd:d8:
6b:d3:83:33:6f:c9:f6:97:32:eb:0b:f6:f4:fa:be:b7:24:a8:
8f:ed:47:71:2e:f1:5c:99:1c:e7:aa:f1:22:3c:2a:82:b4:37:
33:76:24:e4:c7:ce:b2:ae:8e:72:20:fc:fa:fc:50:40:f4:c9:
53:e9:7e:b2:1f:24:48:3b:77:1f:54:3d:7b:57:27:47:b4:f5:
9f:67:04:44:68:2a:5d:1d:ba:16:b6:af:37:d8:48:f6:1c:30:
a6:06:30:09:7a:2a:ac:2a:87:b2:af:de:6f:92:7a:9e:62:7e:
22:a0:93:11:9c:1b:49:73:84:e1:dc:e9:0c:04:46:a9:ab:75:
af:a5:8a:61:dc:23:80:21:9f:a6:7c:ce:46:64:0a:a7:e5:4d:
2e:29:db:27:ec:f6:32:cc:66:b8:aa:0d:40:01:2f:c8:a1:fd:
0a:38:bd:21:1b:e9:db:ef:e3:ba:45:0e:d5:66:d8:2c:c2:00:
be:a5:c0:53:bc:5e:07:b9:71:57:8e:39:8d:f6:57:89:51:7b:
b0:89:0f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:58 2025 by rpki-client