Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23D7F998D24511EFBE42F7A2762E951A.roa
File: 23D7F998D24511EFBE42F7A2762E951A.roa (raw, json)
Hash identifier: PnIlMD8UPiRE5G+pD1T3ueVibE9VPjys7YVHD1CtpuY=
Subject key identifier: AC:E8:FC:22:43:74:60:30:D6:AC:24:E7:FE:9B:DF:9F:79:A9:37:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23D7F998D24511EFBE42F7A2762E951A.roa
Signing time: Tue 14 Jan 2025 06:59:47 +0000
ROA not before: Tue 14 Jan 2025 06:59:43 +0000
ROA not after: Thu 15 May 2025 06:59:43 +0000
asID: 400619
IP address blocks: 156.224.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67274 (0x106ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 06:59:43 2025 GMT
Not After : May 15 06:59:43 2025 GMT
Subject: CN=67860b63-36a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:da:0b:11:8f:e4:d1:99:93:6d:1d:dd:97:
8a:30:3e:c8:a3:c7:fd:4e:2b:7b:9d:b1:f1:80:fb:
65:ed:68:2a:68:ad:41:55:89:f6:53:35:ea:c5:92:
3f:fb:01:da:6b:b3:0b:8d:37:bf:50:31:9e:cd:7c:
ca:2f:90:ac:1d:e4:7e:ec:a2:fc:72:5d:04:75:b1:
9b:0e:90:dd:d3:6b:2e:6e:08:20:28:c2:58:b0:45:
0d:96:d1:3f:79:b8:97:b8:c6:ba:d8:91:c8:24:50:
38:82:e3:c2:58:b3:d5:9e:99:61:20:07:65:7a:07:
30:ee:c2:f6:38:7d:95:17:a2:d5:08:19:7c:ae:ca:
29:8a:6f:b7:2f:b7:f5:74:c6:73:17:61:08:17:94:
01:67:38:b0:b8:a9:b6:9e:63:46:b8:ab:34:bd:e3:
2d:bf:12:a7:c4:db:26:2e:ea:24:c4:af:fa:c3:04:
1c:69:fc:1c:47:9c:00:b5:e2:a6:02:f8:08:b0:d8:
fd:b2:fa:e1:e8:84:b6:a4:dc:1a:cc:67:1a:d2:60:
fe:7e:3b:47:9e:c2:91:a2:aa:7e:0a:c2:a2:83:3e:
a2:34:72:3a:96:0e:7c:73:7f:89:f8:72:7e:8c:36:
74:3f:b6:33:c3:e6:53:2d:9a:d8:3d:77:0d:1b:78:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E8:FC:22:43:74:60:30:D6:AC:24:E7:FE:9B:DF:9F:79:A9:37:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23D7F998D24511EFBE42F7A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.16.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:8b:98:d2:fb:31:a6:de:7e:c2:eb:ab:7e:d7:1d:06:06:a6:
de:e7:f2:f2:88:74:30:c0:13:75:6a:f7:8d:3f:88:fb:a5:99:
73:f2:54:ac:35:36:9f:6f:d6:01:f6:b7:ce:e0:b2:27:a4:cc:
1a:c1:d4:03:0c:91:a7:0f:08:11:9a:d3:8b:f3:8f:97:69:f0:
75:93:50:cf:48:64:59:a9:73:e5:c7:d1:d1:89:49:7c:8e:a3:
fc:41:99:48:77:bb:a3:89:cc:7a:d4:64:51:a1:51:5a:4d:ea:
9c:6b:a8:cb:d1:9e:dd:27:13:ff:50:11:b5:80:42:26:ae:c8:
c0:3a:58:0d:69:a8:cf:3f:d1:9b:6b:86:a2:ac:f6:9a:84:20:
89:28:13:12:f4:1b:92:f9:9d:17:48:f2:36:7d:e2:9a:41:b7:
f5:84:14:5f:99:25:56:9f:b7:e9:7e:85:97:ab:0c:e9:0d:7b:
2a:47:c4:84:c4:16:a9:3e:89:de:e2:2e:02:c6:74:49:64:40:
23:87:0b:88:6a:ea:34:3a:9f:ca:94:f2:4a:e4:c2:27:6c:3a:
df:db:37:ec:a8:60:f9:c2:24:63:d5:48:16:fa:c5:87:a1:26:
74:02:75:d0:01:41:d3:69:82:d9:cb:32:60:8d:6a:39:8a:f2:
3b:7f:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:55 2025 by rpki-client