Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ADF3C46C95011EFAAF3ADB4762E951A.roa
File: 1ADF3C46C95011EFAAF3ADB4762E951A.roa (raw, json)
Hash identifier: 6w6WBSAVCfQyATbVnYn1723xjMR9KGlvpF+XC2G1EoQ=
Subject key identifier: 12:E7:DD:8A:02:23:61:DB:6E:3C:67:A9:89:45:8F:AF:66:59:4B:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F3BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ADF3C46C95011EFAAF3ADB4762E951A.roa
Signing time: Thu 02 Jan 2025 21:25:36 +0000
ROA not before: Thu 02 Jan 2025 21:25:32 +0000
ROA not after: Mon 13 Dec 2027 21:25:32 +0000
asID: 17561
IP address blocks: 156.225.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62398 (0xf3be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 21:25:32 2025 GMT
Not After : Dec 13 21:25:32 2027 GMT
Subject: CN=67770450-5c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:69:13:70:9c:f5:f7:1e:e8:7c:de:5b:e3:
50:ca:59:e5:74:be:c8:4c:da:8a:ed:61:00:8c:b7:
f2:e7:15:40:7c:43:7c:ac:93:de:a0:84:88:f8:ca:
04:02:f3:9f:ed:c1:c2:3f:af:0e:3c:d3:f1:ef:33:
b5:f4:8d:bb:08:06:f1:a6:b5:6b:7f:05:d4:dc:d4:
ca:0d:3d:05:c2:76:bc:09:ad:d5:ba:e9:b1:5d:16:
54:70:67:7d:9f:b8:27:2b:b1:aa:61:68:04:7a:f2:
fc:5e:fb:25:c9:9e:2b:12:fd:ce:61:68:7e:50:98:
e8:2b:57:76:f2:53:c5:33:46:bc:14:87:e7:82:bc:
8e:04:4c:10:0e:45:f7:ab:8c:8b:64:41:ee:0d:6c:
d8:ea:c0:f5:df:2c:0f:49:b5:e0:9c:c7:a2:2a:43:
b9:f6:d2:bf:c2:93:65:2d:e3:a5:55:cf:02:9a:83:
54:39:81:56:37:68:e2:1d:71:f3:3a:af:f6:b2:d3:
1d:1a:58:f8:f9:a2:dd:01:0c:31:c5:02:8e:67:b2:
d0:49:de:43:31:f3:a6:9f:52:94:53:40:6c:b9:1f:
35:1a:e7:12:ce:39:11:a4:8d:18:7f:99:28:ba:b3:
c2:e3:1f:5b:38:ee:db:09:50:ac:1b:17:29:0e:c5:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E7:DD:8A:02:23:61:DB:6E:3C:67:A9:89:45:8F:AF:66:59:4B:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ADF3C46C95011EFAAF3ADB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b8:0a:8d:26:33:f3:0f:27:5f:5f:4d:5e:f9:0a:b9:6e:50:
7c:c9:6c:1c:93:76:fc:96:b6:9a:53:8e:47:05:4e:e5:ef:34:
7d:d3:f3:1b:fe:ff:5a:8e:08:5a:92:29:94:4c:50:86:c4:21:
8b:06:69:ce:69:64:b5:ff:03:cf:f3:57:d2:27:68:53:36:f5:
c3:1a:45:4b:47:6c:99:86:2c:1f:1a:93:81:72:a9:9c:ef:6c:
c7:c0:47:b0:ce:86:29:ac:94:cf:a0:aa:18:78:ff:9c:e2:f3:
b9:54:bc:82:8b:39:80:7f:da:5b:2f:8b:6b:17:b1:90:9e:df:
fc:0f:3f:76:7c:bb:e7:7a:85:00:05:9b:97:e3:e0:36:6c:0b:
66:6e:8c:69:c5:a8:39:dd:c1:c2:2b:33:1a:2d:79:9e:6b:71:
99:15:1d:47:4d:e9:76:3c:c7:f0:45:69:a9:64:92:fc:49:ad:
91:45:97:52:df:6a:55:e9:dc:f8:44:58:da:98:ef:78:db:3e:
84:7e:8a:fc:f8:8c:b8:cc:78:e1:19:b7:56:c7:53:96:6c:ed:
21:2c:ae:1b:eb:6b:f5:9c:a7:37:36:a7:37:9f:df:53:e3:a1:
40:8c:88:fb:c5:10:d1:44:4c:ec:73:3e:7e:cf:5a:61:60:21:
a4:f2:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:07 2025 by rpki-client