Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D64EBECDA111EFBC8EE7B5762E951A.roa
File: 20D64EBECDA111EFBC8EE7B5762E951A.roa (raw, json)
Hash identifier: vTg7VJD5az1XlBai9cz95tY+UYHJjJPqbIxtteuya8E=
Subject key identifier: 97:AB:69:2F:31:AF:FA:22:D7:02:29:AF:28:20:C6:9A:80:1B:F6:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D64EBECDA111EFBC8EE7B5762E951A.roa
Signing time: Wed 08 Jan 2025 09:15:40 +0000
ROA not before: Wed 08 Jan 2025 09:15:36 +0000
ROA not after: Mon 13 Dec 2027 09:15:36 +0000
asID: 17561
IP address blocks: 156.253.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65757 (0x100dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:15:36 2025 GMT
Not After : Dec 13 09:15:36 2027 GMT
Subject: CN=677e423b-e720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:44:9e:de:ba:11:f2:f4:de:7d:d5:69:e6:
77:50:40:3c:3a:7a:bd:8c:8c:52:d1:47:dc:45:14:
a2:60:17:64:ce:18:ee:e0:11:c9:f9:a3:71:17:c9:
42:ed:0f:44:10:43:92:ab:c6:88:42:e8:b6:f7:e9:
af:2c:96:93:1f:76:8d:68:d9:bf:eb:33:18:79:75:
1c:86:8f:ca:26:98:d5:20:20:be:cc:26:01:0c:8a:
72:fb:ea:45:f0:03:2c:ea:8e:d6:19:12:cd:da:68:
f6:2e:a2:2e:ca:a8:a3:a4:bb:a4:54:64:fa:d4:12:
b4:96:c3:98:55:94:bb:a3:2b:12:27:e6:42:be:2c:
e1:ba:34:61:90:48:51:4c:3b:b1:d5:c9:dc:c3:b2:
13:a5:1c:c0:c1:7f:37:d6:bb:cb:a0:90:e9:bc:fe:
15:19:46:45:93:6e:21:70:48:52:3a:91:ad:30:d6:
6a:92:a7:1c:f5:19:26:e3:0f:70:30:e1:03:87:84:
4a:de:40:b7:f7:74:41:df:ca:01:83:8e:31:1b:a6:
50:50:a1:1f:33:a1:18:4c:59:62:cd:8b:0c:27:7b:
3c:b0:4c:55:92:69:4f:0c:77:33:77:07:51:e0:1c:
64:ac:b5:98:70:30:d3:7e:a0:fb:21:0e:5e:6c:30:
be:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AB:69:2F:31:AF:FA:22:D7:02:29:AF:28:20:C6:9A:80:1B:F6:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D64EBECDA111EFBC8EE7B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.41.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2a:4b:97:45:74:b2:3a:c3:aa:b3:c5:29:e4:0b:b7:1e:25:
61:84:c7:d0:1c:d9:74:30:ad:49:6a:80:ee:96:6d:f0:d2:a2:
7f:40:39:8e:a5:cf:c0:b5:c2:4e:cb:dc:51:61:d8:9d:af:d1:
6a:e2:3f:e9:0f:e4:13:38:f2:91:ea:0b:be:9e:18:b3:0a:49:
93:16:3e:51:96:45:e0:a5:67:69:0e:e1:9e:0f:ee:c0:84:4c:
db:0c:61:3d:78:87:96:b0:02:3d:69:26:2f:bc:b9:35:4d:1d:
db:2b:5d:7d:cf:cc:59:f9:84:b0:56:40:04:fc:36:53:b5:cd:
22:bc:c5:c4:a6:06:32:d2:0d:c1:95:bc:77:5b:94:6e:96:03:
31:fe:8f:f9:53:da:49:bc:3c:3e:4c:6d:d9:70:2b:61:52:e0:
26:b5:9f:f8:c4:4e:aa:ed:df:ed:07:46:db:23:72:92:e6:2b:
f1:b4:4c:2a:ef:e4:31:c0:e5:e9:53:79:55:52:da:09:b0:8b:
6c:fc:bd:e7:ae:d2:f2:43:17:94:61:3c:48:58:0f:3d:af:76:
e2:65:84:79:61:fa:1e:68:d8:29:6c:0e:93:7a:5c:2e:d4:9f:
6d:4b:a6:3b:96:0d:fa:a0:19:00:a5:18:e7:9c:90:ae:9d:0d:
5f:d2:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:59 2025 by rpki-client