Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F47A9ACC32F11EFA0ADF240762E951A.roa
File: 1F47A9ACC32F11EFA0ADF240762E951A.roa (raw, json)
Hash identifier: o4z8yXVX+7geYlIIF34nHGk3tVKMR2bb8uUV92aTG7g=
Subject key identifier: 52:3E:DC:C2:FC:97:B1:13:61:36:9D:F2:48:C0:D5:46:F3:1A:4F:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EAF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F47A9ACC32F11EFA0ADF240762E951A.roa
Signing time: Thu 26 Dec 2024 02:14:23 +0000
ROA not before: Thu 26 Dec 2024 02:14:19 +0000
ROA not after: Wed 10 Dec 2025 02:14:19 +0000
asID: 984
IP address blocks: 156.243.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60151 (0xeaf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:14:19 2024 GMT
Not After : Dec 10 02:14:19 2025 GMT
Subject: CN=676cbbff-af87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:54:79:88:4d:bf:22:46:65:3e:8c:42:fe:
18:96:47:05:e5:27:d6:e6:f3:41:fa:cb:14:57:12:
71:fe:f1:95:2d:6e:7e:e5:74:4e:b1:2a:bf:51:41:
83:a1:7c:95:74:ea:00:7f:34:fe:c5:2a:b4:16:72:
cd:f8:29:c2:8a:ff:d0:39:e5:30:af:34:7f:57:1c:
af:15:2a:ed:a3:cd:bd:28:86:01:91:fd:5a:33:09:
04:e5:a4:08:72:42:8e:df:af:89:9d:87:86:f8:c2:
05:98:dd:8d:60:87:83:6e:9b:f3:93:12:4c:54:32:
4e:a8:19:c7:2d:58:0c:33:b3:d5:c8:16:c8:c7:b6:
8d:f8:8e:1c:e4:39:a2:5e:72:ca:22:27:2e:4b:31:
28:60:08:20:c2:6b:2e:e1:cf:fc:2e:c1:d8:26:e3:
ec:d4:62:34:5f:d4:58:c5:2e:ef:a7:69:0a:88:48:
d7:07:35:0b:ff:26:f0:49:69:61:b3:b1:9c:7e:d2:
a3:98:b9:97:f4:e7:24:6a:cb:0d:c2:2e:e4:26:4d:
d9:fd:d0:d6:0e:f7:c8:02:9e:7e:89:92:c1:60:a1:
19:6f:6d:bb:4f:97:2c:58:da:03:b1:88:30:c4:6a:
fd:34:88:bc:32:52:79:11:59:09:d3:d2:2f:0e:e4:
46:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3E:DC:C2:FC:97:B1:13:61:36:9D:F2:48:C0:D5:46:F3:1A:4F:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F47A9ACC32F11EFA0ADF240762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.226.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6b:be:50:3d:5c:b2:f6:aa:a3:24:00:de:f2:3b:2e:02:64:
95:d9:1f:92:a8:f3:b6:86:a5:ea:47:58:c6:a8:6e:ca:f0:7b:
85:74:5c:e7:ae:09:96:6b:e7:5f:ae:5f:2f:2a:1f:39:69:d7:
8f:29:0a:79:17:ce:a2:9c:16:22:3e:a3:2b:86:d1:48:2c:ee:
f8:1a:78:84:0b:6e:70:36:1e:15:f6:0e:66:8f:9d:24:62:e6:
b1:61:c7:85:ec:e9:d1:e5:b7:24:79:ad:01:86:68:c8:dd:21:
1f:ef:b8:e0:94:e4:39:19:65:e3:d6:11:d9:07:43:bf:05:0a:
e2:cd:0a:9a:d9:85:0b:71:df:a7:86:b3:6b:7c:36:72:62:98:
d4:83:63:b3:fe:14:3c:6c:f2:a1:cf:af:64:44:f4:e9:ab:8b:
e7:b2:0d:be:59:a5:fc:7e:f9:7c:f9:29:a1:74:8b:ca:99:d3:
3a:a5:4e:be:c5:bf:a7:5f:fe:5d:17:51:93:51:97:03:36:d0:
7d:32:76:c2:c6:df:6d:0f:14:05:f0:d8:5f:1d:1d:ca:a7:92:
a5:bd:5b:16:6c:a8:8e:2a:2a:62:81:d1:98:ed:e7:72:b4:d9:
ef:61:eb:66:15:6d:f2:2c:24:e1:15:67:16:e2:55:3d:36:fc:
3f:a8:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:32 2025 by rpki-client