Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CCFF026DFE511EF87CFD07C762E951A.roa
File: 1CCFF026DFE511EF87CFD07C762E951A.roa (raw, json)
Hash identifier: p4xrH199iI+/LLME+ylgIWUi9Y+NtlT0cebquId8meE=
Subject key identifier: 5C:89:7D:8B:B3:16:0F:C6:55:5B:E3:13:3D:19:CE:B0:1B:0F:33:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011610
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CCFF026DFE511EF87CFD07C762E951A.roa
Signing time: Fri 31 Jan 2025 15:07:40 +0000
ROA not before: Fri 31 Jan 2025 15:07:36 +0000
ROA not after: Sat 03 Jan 2026 15:07:36 +0000
asID: 40065
IP address blocks: 156.243.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71184 (0x11610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 15:07:36 2025 GMT
Not After : Jan 3 15:07:36 2026 GMT
Subject: CN=679ce73b-491b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:15:29:be:f4:bd:be:4b:a2:db:b3:59:4d:
4e:1a:8b:29:a6:94:d1:ff:f0:1c:72:39:f1:d2:48:
7e:69:35:aa:6c:b5:56:cb:dd:af:c6:02:de:f7:67:
8c:7b:e4:33:b7:ab:74:90:2b:1c:c1:7c:01:00:1a:
d8:c5:09:44:57:56:ab:87:59:89:46:1f:5a:b0:d9:
fe:10:73:4a:18:b0:4a:c4:2d:e4:95:af:62:36:df:
b7:68:d3:d7:29:55:7d:24:d8:d4:3b:06:73:0f:23:
6c:75:f8:ae:ee:47:97:8c:9c:96:f3:37:f4:6a:b9:
e2:8c:ec:bf:a7:50:9f:e8:4b:fc:b4:ee:c7:c0:bb:
8d:d8:b2:7e:b1:84:9e:f6:b9:8f:0f:e9:ba:e4:74:
7b:a2:01:10:e0:b4:12:45:96:44:38:42:c2:67:61:
d2:95:dc:7e:d3:3b:a6:7e:d9:32:9b:fe:86:e4:6f:
b7:b6:8d:5f:a1:ad:39:3d:61:3e:93:c9:0e:82:08:
d4:e3:e4:65:f4:60:55:64:e1:52:eb:a7:0e:52:d0:
fc:75:98:1d:7b:9d:e8:3c:aa:dc:9d:97:81:65:5c:
8e:14:a3:7c:6a:61:02:17:c1:98:7c:7d:90:a6:ca:
ad:8a:f7:92:67:0e:52:ba:ac:3c:b1:71:45:51:0f:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:89:7D:8B:B3:16:0F:C6:55:5B:E3:13:3D:19:CE:B0:1B:0F:33:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CCFF026DFE511EF87CFD07C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:2e:49:03:7d:a1:57:27:e0:6e:78:f0:25:b7:53:bf:7f:e1:
3c:cf:00:11:9c:dc:82:5d:a0:fc:33:a8:73:a6:c0:6e:d9:59:
d9:b4:62:0f:6d:f4:9e:1c:ef:42:e5:2a:55:41:5a:8a:e7:02:
3b:8b:fb:76:37:b3:98:52:af:3e:f2:54:48:ab:f6:2d:d1:b8:
74:e0:72:cf:db:d1:05:a8:a9:b7:a1:d7:bb:5d:79:f8:d2:2e:
9a:e5:6f:f9:7a:46:33:10:9e:c7:4a:0a:b1:06:cb:a1:a9:a3:
e8:f2:6b:c1:58:d8:f8:73:7f:c4:39:31:76:9d:4a:ce:f2:5e:
de:e3:44:17:78:50:bc:85:cb:8a:7f:d5:40:d0:00:cc:9c:9e:
9d:f1:23:e6:05:bf:23:b0:29:8a:c1:1a:2e:94:fe:0c:20:ee:
ae:23:d9:a0:4d:01:0e:81:ac:50:8e:14:e9:c0:4f:d7:42:73:
48:ca:3b:32:80:96:91:f0:97:65:a0:af:85:de:91:14:ec:ce:
fc:85:6f:c5:a3:6b:70:8a:5c:fa:a7:c9:ad:c3:9e:1a:4a:79:
8b:56:9a:06:6c:2e:f2:7e:72:22:e5:d1:0e:fc:2a:52:a2:bd:
c9:8a:ae:7c:7f:d4:7f:fb:93:b1:62:e3:1b:be:e5:93:69:f7:
c2:9b:31:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:17 2025 by rpki-client