Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1925F02ECD6611EF9330D7B6762E951A.roa
File: 1925F02ECD6611EF9330D7B6762E951A.roa (raw, json)
Hash identifier: Rh8qhtYAwEyw1e8kLHY5049RQDeTInrs2eielwtE2vU=
Subject key identifier: E2:27:D8:DB:76:F2:75:23:95:DD:0D:1B:F5:1A:01:1C:C1:63:ED:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1925F02ECD6611EF9330D7B6762E951A.roa
Signing time: Wed 08 Jan 2025 02:13:07 +0000
ROA not before: Wed 08 Jan 2025 02:13:03 +0000
ROA not after: Sat 13 Dec 2025 02:13:03 +0000
asID: 984
IP address blocks: 156.247.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65347 (0xff43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 02:13:03 2025 GMT
Not After : Dec 13 02:13:03 2025 GMT
Subject: CN=677ddf32-58aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:54:9a:43:29:5d:33:d7:88:1c:bd:39:7b:
63:33:bb:47:51:85:8e:c9:84:70:37:e5:08:17:f6:
1e:71:e0:95:b8:88:2c:ff:cb:aa:ae:2f:b9:25:a3:
3d:77:3e:c0:a5:74:ff:e7:7d:00:15:be:a4:74:fc:
f5:1b:6e:32:b1:01:8d:4d:04:f1:63:58:1e:4b:ca:
41:4e:00:f9:12:12:34:c7:9b:b3:cd:6e:cb:e7:63:
15:fb:77:bc:dd:b6:1f:89:8c:46:2c:1e:4a:06:46:
fa:26:a3:f8:4a:bb:e2:82:44:18:57:57:55:85:c0:
9f:a6:93:56:c1:b4:1e:60:2e:51:3c:d9:1f:65:b5:
cd:dc:ec:a0:fd:82:98:8d:a2:49:2f:23:ce:9f:e9:
7e:1d:a0:d3:30:2a:13:f2:32:38:e2:ac:3d:6f:08:
47:00:20:73:ba:85:c7:83:18:b0:7e:73:b6:d7:15:
e4:32:3c:17:ab:07:95:d2:ab:2d:60:b4:1a:b4:f5:
ff:1c:82:6a:77:fe:e7:91:2c:f3:42:a1:07:7a:90:
e7:9c:33:a8:81:65:d8:49:51:e8:07:b9:df:ed:4c:
1f:a8:fb:7a:d7:66:6f:96:9c:a3:42:7a:b4:4a:a7:
23:63:76:5f:6d:d9:e2:5c:71:47:56:4c:76:f1:9d:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:27:D8:DB:76:F2:75:23:95:DD:0D:1B:F5:1A:01:1C:C1:63:ED:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1925F02ECD6611EF9330D7B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:56:c7:a1:20:b8:a6:14:f7:6f:8a:de:03:8e:8b:65:c7:81:
ff:3d:5f:92:cb:70:05:8c:0e:35:0e:e2:58:e9:6b:08:b3:58:
20:be:c8:d6:fb:84:0c:0e:03:4d:4c:78:de:4c:db:22:7b:36:
a0:c0:33:e0:5e:bf:65:a7:e7:64:e1:f4:73:7c:e5:c5:5b:35:
eb:a1:4a:d2:ae:f2:78:19:54:3a:0b:34:9b:b7:de:69:99:08:
10:cd:c7:dd:d6:ad:55:e8:29:57:a1:f8:86:62:9f:a9:88:37:
71:51:65:08:16:33:61:d4:f9:b3:be:d1:72:9a:14:08:73:8a:
43:3c:ae:78:2a:20:32:a5:b3:09:89:fe:b4:0a:a4:14:78:f5:
e6:40:03:d0:3f:07:a1:1f:6c:44:db:6c:70:08:56:38:10:01:
1e:65:3b:cb:99:d4:7d:c7:80:88:f9:78:6d:8c:c1:67:fc:d2:
db:d9:b3:9b:fa:b5:bb:99:78:af:66:87:e1:f8:64:1c:6e:59:
16:ee:f9:25:4c:e2:b9:89:d1:98:7f:3b:58:05:54:fc:bb:b7:
bb:bd:79:ea:a4:c7:1a:5c:c7:bf:39:5f:9f:1f:5f:9f:a9:89:
66:98:97:4d:fe:44:97:7f:d6:57:4a:06:4a:9b:e2:dd:18:ba:
ee:38:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:23 2025 by rpki-client