Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BB3FC56CCB111EF81EDC5B6762E951A.roa
File: 1BB3FC56CCB111EF81EDC5B6762E951A.roa (raw, json)
Hash identifier: lMczzje5vBOaHF/M+Hd82fGzQxvCWWPox0LAe6YtfFM=
Subject key identifier: 6B:74:EB:52:0D:73:D8:9B:4A:A7:43:6C:62:B5:1A:4F:A2:69:F5:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F9FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BB3FC56CCB111EF81EDC5B6762E951A.roa
Signing time: Tue 07 Jan 2025 04:37:32 +0000
ROA not before: Tue 07 Jan 2025 04:37:28 +0000
ROA not after: Mon 13 Dec 2027 04:37:28 +0000
asID: 17561
IP address blocks: 156.232.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63994 (0xf9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 04:37:28 2025 GMT
Not After : Dec 13 04:37:28 2027 GMT
Subject: CN=677caf8c-93ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:2a:27:ab:0f:4d:0a:bd:52:3e:04:65:3a:
ea:bd:aa:cb:a8:0c:f8:29:68:a8:4f:50:47:01:c5:
53:9d:c0:d2:34:e1:f5:4b:b9:50:e0:65:df:b2:e6:
85:ba:92:a8:db:06:c2:fa:e6:55:97:aa:52:4b:3b:
e9:45:31:e2:8c:b0:cd:db:5b:ec:98:c2:7a:40:b3:
cc:26:5b:9a:6c:95:6a:69:9c:74:e6:56:d8:b5:e7:
28:b8:a3:83:98:af:af:37:92:8e:71:32:df:41:63:
28:49:ac:03:bb:15:b9:8b:67:e1:01:59:d7:f0:b2:
86:b0:ec:93:7a:52:a5:5d:f8:f3:92:bc:5f:f1:88:
13:e2:81:17:82:cf:41:43:55:29:d5:47:9f:e7:53:
b3:de:41:e3:bb:f1:cc:25:26:f8:25:f8:09:49:fb:
b1:fc:ba:72:bd:69:2c:81:0c:2e:2a:91:87:94:20:
5e:0e:2e:70:68:79:01:61:2d:59:ed:05:2a:73:1d:
21:f9:52:28:50:12:63:ac:24:5e:03:bd:5e:fb:c0:
75:b9:2e:18:c5:54:cd:f8:b9:27:cf:69:25:9f:18:
ee:b3:c5:dc:75:a8:a5:3e:f2:db:2b:f9:62:b5:10:
6d:a9:a6:4c:a8:34:30:81:fe:f1:15:8d:25:39:36:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:74:EB:52:0D:73:D8:9B:4A:A7:43:6C:62:B5:1A:4F:A2:69:F5:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BB3FC56CCB111EF81EDC5B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.89.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e8:24:66:d0:0f:d2:ba:13:12:64:a1:b6:21:93:f5:a2:10:
57:35:a1:2e:63:e3:91:a7:43:4a:c2:d4:92:b2:c9:4f:c7:48:
6b:05:ea:05:cd:48:5e:5f:b6:98:95:93:b8:26:6e:b1:05:51:
8b:16:2b:ba:0c:3e:bd:0b:78:d4:9e:ef:d6:b9:e7:b2:c2:61:
9e:30:80:47:7e:27:68:8f:da:80:44:07:3e:62:0a:e9:5f:bf:
60:90:cd:15:38:ec:ad:02:08:30:c8:36:1b:7b:ce:97:ac:5e:
37:8f:b8:9c:97:e0:b1:05:cd:ad:a0:8a:93:fa:96:d5:6c:10:
2a:5a:47:8f:6f:1b:91:ed:d7:4a:6d:e5:c1:66:93:65:36:fe:
e7:00:c4:98:59:f6:3c:82:69:50:33:f6:21:c3:f6:a7:0a:ad:
41:97:c3:7c:4c:81:ff:6c:5e:64:fa:3e:ec:6d:10:66:f8:9c:
75:b2:0a:e5:f0:89:b4:68:e0:87:5f:77:42:cd:c1:16:a4:10:
5d:46:f9:7c:f7:8e:66:ae:64:d4:08:53:5f:75:7f:0a:ed:41:
6f:a4:3c:99:f7:9e:d3:f9:50:21:3a:7d:56:0a:c0:83:56:22:
2e:ad:f6:90:e5:56:1e:d4:c7:61:bf:7e:fc:23:7c:51:ea:9b:
00:2b:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:54 2025 by rpki-client