Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A4AADB2D2FE11EFB2790EBD762E951A.roa
File: 1A4AADB2D2FE11EFB2790EBD762E951A.roa (raw, json)
Hash identifier: aW8Y1xCk96DlMUVmOUDEfDaPGL8lg/aojDpM8cYPwPs=
Subject key identifier: A7:54:DD:E4:2D:AE:23:4B:51:42:70:28:7D:73:56:A6:3F:64:CE:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0107D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A4AADB2D2FE11EFB2790EBD762E951A.roa
Signing time: Wed 15 Jan 2025 05:03:48 +0000
ROA not before: Wed 15 Jan 2025 05:03:44 +0000
ROA not after: Sat 03 Jan 2026 05:03:44 +0000
asID: 984
IP address blocks: 156.254.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67545 (0x107d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 05:03:44 2025 GMT
Not After : Jan 3 05:03:44 2026 GMT
Subject: CN=678741b4-61b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:42:75:26:4d:ee:32:89:07:4d:4c:62:c9:
6d:9a:48:bd:3d:4d:7a:3d:a2:f4:88:51:df:a9:1a:
be:01:76:dc:be:e5:0b:29:6f:61:bc:29:1a:f2:7b:
5e:9e:4c:9a:52:e7:72:0e:c6:d2:cc:aa:1e:81:55:
12:67:3e:61:2c:6b:63:ae:fa:aa:18:c2:15:f0:a4:
3d:6c:05:3c:91:d8:05:53:33:7f:96:bd:4d:bc:13:
a3:5f:ca:0d:5d:a9:94:80:a0:c4:3a:cc:8c:4c:2e:
f4:d4:ec:c9:02:59:5d:5c:dc:34:3c:de:01:df:64:
83:b1:bf:61:2e:01:bf:7a:ef:20:13:c8:0f:e0:dc:
6e:fb:ac:51:de:b9:16:3c:af:6c:33:d3:37:c8:e8:
57:5e:a8:4c:e4:1b:bf:93:eb:5d:5d:c2:ff:97:e7:
93:15:75:fb:ae:ea:a3:a1:17:46:05:13:44:c0:3d:
58:4f:3a:04:76:bb:ca:56:12:57:b9:14:d7:1c:76:
4c:19:38:af:3c:d5:d9:6a:5e:da:b7:2e:8e:4b:f6:
f4:86:79:01:5d:90:34:7d:46:09:fb:ac:f9:1e:82:
73:26:8c:9b:0c:5f:92:84:38:34:52:be:f4:12:a5:
21:7d:f1:a5:89:e0:4a:4a:13:9c:1a:b9:e2:6f:11:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:54:DD:E4:2D:AE:23:4B:51:42:70:28:7D:73:56:A6:3F:64:CE:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A4AADB2D2FE11EFB2790EBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.23.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f7:21:2d:6e:16:36:23:b2:64:98:dd:ee:46:6a:6a:90:fb:
fe:31:6e:90:f1:4a:7b:d1:37:66:e6:d9:69:68:30:c7:57:0e:
a2:f3:8e:c6:6a:bb:b7:35:c1:d0:04:21:23:1e:e8:70:75:02:
93:51:e5:b1:12:e6:2d:8a:a1:5a:d9:0a:63:d1:ee:ee:a1:c7:
0c:fd:37:6b:97:9c:5d:4c:8a:37:9d:7b:bb:94:3f:4a:97:78:
a8:13:61:69:07:19:b6:0f:78:7b:ed:98:26:c7:9e:74:2a:a4:
b8:9d:f7:5f:a2:0e:01:3e:3b:d8:d2:06:92:c6:74:3e:ae:34:
28:59:d1:5b:84:10:eb:6e:b9:87:4c:9f:22:f1:e6:21:05:7e:
92:0c:89:8b:87:38:86:da:9b:eb:36:ff:89:89:d6:f3:e7:3f:
5e:c5:ee:a4:a9:80:3e:44:32:a2:af:5c:90:e0:a4:94:fd:be:
2c:56:1d:63:81:0e:54:14:62:ae:90:de:ec:fd:35:23:48:ed:
dd:f9:45:1a:aa:c0:f2:5c:93:00:79:53:d4:6b:47:7a:85:ac:
72:53:51:b3:b9:2b:e0:40:c7:86:dc:65:e5:02:05:07:2b:ba:
5f:84:25:a7:30:b5:8f:ff:6a:0c:84:8e:7e:53:e0:96:3a:1a:
74:79:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:57 2025 by rpki-client