Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23531D6CCD5011EF93EE39A1762E951A.roa
File: 23531D6CCD5011EF93EE39A1762E951A.roa (raw, json)
Hash identifier: q8JJLz+rIb2zZ42bQTH2Dw346fD3YbD3daruv8m3OwY=
Subject key identifier: 9C:52:79:4A:1D:05:44:AA:8D:8F:CA:99:96:56:56:53:81:D7:25:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23531D6CCD5011EF93EE39A1762E951A.roa
Signing time: Tue 07 Jan 2025 23:35:55 +0000
ROA not before: Tue 07 Jan 2025 23:35:51 +0000
ROA not after: Mon 13 Dec 2027 23:35:51 +0000
asID: 17561
IP address blocks: 156.247.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65253 (0xfee5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 23:35:51 2025 GMT
Not After : Dec 13 23:35:51 2027 GMT
Subject: CN=677dba5a-76d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:f1:40:8c:47:ad:b6:6b:57:0b:49:42:4c:
d9:5c:d6:f9:d4:92:da:24:30:31:a1:32:0a:1f:ea:
68:6c:3d:7f:23:b8:80:ed:36:43:2a:fd:23:e1:8f:
27:8d:f4:0b:57:80:bd:61:26:ef:2a:15:27:ae:ae:
73:83:0f:44:2e:da:12:fc:fb:73:d0:4a:02:f5:be:
ea:9a:09:20:ab:79:25:13:4e:69:e2:ae:a5:4b:fd:
22:16:08:c7:1f:02:23:0a:bb:ed:db:d3:6f:54:55:
ce:51:26:40:dd:9a:f4:98:75:ae:26:1b:d9:d7:f1:
c3:f1:d6:f4:5b:36:1c:9f:12:bc:25:a1:95:0b:17:
17:7f:9c:68:1d:ef:a6:69:77:78:6e:62:58:37:cd:
ed:4d:46:f0:c8:0f:d2:f7:73:22:dc:6a:4b:2c:f8:
90:11:1d:f0:c0:33:a9:65:4a:cd:40:8c:f2:92:8a:
64:5d:de:b5:2d:95:dc:84:6a:66:80:72:9a:f2:65:
b5:3c:05:2f:64:37:44:ba:a1:14:9f:5f:8f:fe:fe:
c4:c5:ca:3d:a0:28:74:6a:57:c3:33:5c:cd:1b:7e:
48:11:0b:86:2b:65:a9:41:2a:3f:aa:51:b2:8e:54:
c0:18:47:1c:04:d0:bd:3f:89:c3:9d:a2:f5:ab:6f:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:52:79:4A:1D:05:44:AA:8D:8F:CA:99:96:56:56:53:81:D7:25:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23531D6CCD5011EF93EE39A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.27.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f2:b8:96:75:f6:cf:ed:7f:16:54:e2:ca:cd:c7:1f:5e:98:
42:82:8e:62:5c:00:c2:48:f2:c3:8f:4f:4d:28:f1:f3:1b:52:
52:cd:6e:c4:be:e5:5a:ad:0e:0f:ba:e3:b9:b2:21:57:7b:2d:
5e:8d:45:48:ae:98:07:ed:7e:18:93:7e:b1:73:2f:b5:d7:c0:
25:8f:6e:44:10:49:4e:9d:2f:33:0f:4f:7e:7f:9b:64:1d:37:
0b:53:ab:82:e8:e9:f5:ae:83:19:e6:a7:b2:6e:e5:bb:43:c7:
0d:e7:52:42:db:ac:17:ed:02:ce:3c:aa:58:71:fd:bc:ee:b5:
11:8e:1c:fb:da:7c:d0:17:6c:11:47:63:b8:b9:b1:65:01:e7:
e4:c7:2a:49:5d:dd:0c:de:0c:69:76:cf:8c:40:0c:7a:0d:3b:
d5:7b:08:f2:0d:85:6b:27:f9:32:07:cf:1e:db:6a:f6:05:f3:
51:71:eb:64:9d:0b:29:97:e6:e3:0e:2b:0b:6a:8e:51:61:2c:
77:94:cd:e7:99:82:44:6d:a5:a6:4e:29:5b:f7:d9:fe:15:f6:
8c:15:4a:e3:35:69:70:58:d7:8e:2d:36:31:a3:9e:05:83:c8:
db:10:94:fb:e6:15:f8:ab:c6:55:7b:fd:c1:00:35:aa:75:5b:
17:a5:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:09 2025 by rpki-client