Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273F5D44CC1211EF9BFFF0BE762E951A.roa
File: 273F5D44CC1211EF9BFFF0BE762E951A.roa (raw, json)
Hash identifier: ytru27RHzEM5wtircl+Y1GZjGrqKPvQLYTZGJf2MeeM=
Subject key identifier: 2A:4C:1B:41:55:F6:5E:D5:EA:16:D5:96:EF:5B:46:94:32:89:1D:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F86D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273F5D44CC1211EF9BFFF0BE762E951A.roa
Signing time: Mon 06 Jan 2025 09:39:41 +0000
ROA not before: Mon 06 Jan 2025 09:39:38 +0000
ROA not after: Thu 06 Feb 2025 09:39:38 +0000
asID: 200373
IP address blocks: 156.233.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63597 (0xf86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 09:39:38 2025 GMT
Not After : Feb 6 09:39:38 2025 GMT
Subject: CN=677ba4dd-ae33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:41:29:8a:71:75:f4:dc:27:03:e1:28:b9:
ba:32:28:51:93:87:73:23:a8:cd:0a:d9:cc:18:72:
8e:92:87:38:4e:96:3e:37:23:1e:eb:f5:86:71:60:
56:73:2e:b1:f2:da:0f:13:a2:1e:67:ba:f3:31:40:
1d:71:d2:94:53:e3:49:7e:4a:15:ba:8c:dc:a8:bb:
6e:de:51:cb:8c:aa:f0:bf:57:22:44:af:11:89:dc:
7c:12:b4:a8:68:bc:c8:4c:34:70:1d:fd:31:37:48:
44:6b:09:a7:a9:b5:85:05:85:f9:54:9c:7a:a1:d1:
08:e9:43:b0:29:b0:6a:83:54:f1:74:67:65:fb:59:
7b:b3:37:dc:cd:94:8c:fa:f9:e9:f2:c7:c1:f3:df:
f3:6c:bc:e5:7e:d4:6f:73:be:c8:b5:db:18:5b:77:
85:0e:5b:9a:da:51:d0:3b:bc:b8:00:67:85:9d:cc:
bc:83:31:2d:d1:b5:ef:94:33:6b:d0:e2:04:f2:94:
ab:d8:75:f5:24:fb:53:ba:a2:0b:b2:87:5e:4c:3f:
14:01:a0:b5:25:69:74:fa:9b:72:0e:86:c8:19:09:
22:56:f1:9a:89:0a:2b:b4:7d:fa:79:2b:2f:7b:48:
1b:79:b2:60:61:d2:23:be:3b:dd:14:78:1f:fa:8e:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4C:1B:41:55:F6:5E:D5:EA:16:D5:96:EF:5B:46:94:32:89:1D:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273F5D44CC1211EF9BFFF0BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.84.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:a5:2d:a0:2f:0d:ce:71:7d:fe:04:06:0d:81:d6:b2:40:7f:
cd:99:75:9d:a2:2c:e6:a0:1a:26:a8:38:11:2a:b8:be:0d:7a:
92:30:01:26:9c:3e:b7:a1:c9:f7:2f:0a:0e:5b:a4:7b:17:13:
0a:4e:a2:85:1d:0a:ee:32:3c:02:c6:fc:a0:67:af:fa:55:b5:
9a:d4:5f:74:cb:6a:6f:a3:6f:5b:fa:ff:7e:7c:1e:cb:25:e9:
bc:9f:9d:80:78:a9:68:c7:2d:0b:5d:3c:70:56:ec:40:c6:60:
20:4f:3e:99:c5:ef:c3:30:00:33:93:41:c3:dc:a3:c8:2f:6a:
05:1d:67:60:ee:a9:af:d3:15:eb:e0:ca:d1:20:06:f7:0c:83:
96:f0:25:0e:a7:01:ed:95:d9:a6:4e:7f:41:e7:1f:67:52:50:
2e:2a:f8:b9:4e:ca:cd:83:b3:18:a1:00:e6:82:78:d8:70:00:
bf:b9:11:d8:4d:12:55:ee:3b:8c:19:66:6f:67:ef:4d:df:bd:
df:e8:80:e9:81:dd:f8:f6:84:35:8d:67:a1:74:43:cd:16:06:
26:f6:35:2b:a7:c2:f0:f3:46:cc:4a:4c:7d:87:89:a9:aa:86:
43:89:66:70:27:be:68:4e:43:f1:50:90:a0:c0:92:c0:6c:b0:
31:27:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:52 2025 by rpki-client