Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/277FD7E2C32611EFAAE6377F762E951A.roa
File: 277FD7E2C32611EFAAE6377F762E951A.roa (raw, json)
Hash identifier: uBWOd7rcJ88AKwiJTiQo7v+uBZRjZbHTqlDoUE+vY+g=
Subject key identifier: AE:9D:41:92:63:CE:AA:6F:A8:60:55:72:B3:F0:E8:EA:5F:65:C9:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/277FD7E2C32611EFAAE6377F762E951A.roa
Signing time: Thu 26 Dec 2024 01:10:11 +0000
ROA not before: Thu 26 Dec 2024 01:10:07 +0000
ROA not after: Fri 10 Dec 2027 01:10:07 +0000
asID: 17561
IP address blocks: 156.243.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60043 (0xea8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:10:07 2024 GMT
Not After : Dec 10 01:10:07 2027 GMT
Subject: CN=676cacf3-994e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:60:8f:24:b2:e5:36:ad:28:db:68:ab:09:97:
56:01:00:56:62:d0:d7:77:f6:89:07:57:71:a8:24:
f4:a8:68:b8:4d:23:06:f3:d9:e2:87:50:54:c8:fd:
47:f3:17:da:8b:e2:67:ab:f6:83:86:b7:39:e6:af:
4d:5b:d5:83:6e:4b:ac:25:21:07:96:c9:0b:6a:33:
f4:aa:2e:33:72:e7:1a:f0:f8:8d:8e:49:12:b6:49:
fe:e7:c4:4e:df:62:d1:98:a9:9c:ca:9c:3a:fb:1d:
18:b8:08:c1:7c:3b:0e:54:14:ed:38:37:16:00:2a:
9b:37:28:1e:6d:d0:16:8c:0c:a0:39:1a:3c:c7:a0:
7c:64:1c:d7:d1:de:50:e5:f7:bb:ce:a5:eb:ec:b4:
c7:b5:45:20:ac:db:01:7a:ef:09:4b:97:a0:9c:e7:
60:16:a3:bc:d7:f2:2e:2f:b2:ab:28:a7:b1:6e:8e:
66:37:22:b5:b2:dc:b7:b0:b1:42:7f:f5:c8:ce:8b:
70:38:d2:34:58:d6:d0:ee:6d:d1:d0:95:b4:a2:05:
75:58:33:64:b9:d1:0f:87:62:da:5b:6a:9f:ed:e4:
e9:eb:58:91:df:b9:73:96:f6:df:0d:83:25:95:8f:
03:ed:46:a5:ca:20:6f:7a:98:40:f3:10:df:02:70:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9D:41:92:63:CE:AA:6F:A8:60:55:72:B3:F0:E8:EA:5F:65:C9:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/277FD7E2C32611EFAAE6377F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.132.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:40:79:87:58:54:f8:d5:c3:1c:cd:3b:90:e9:51:1b:5a:b4:
2b:4a:3f:5c:56:74:6e:6b:30:25:fe:b0:83:ec:7a:e1:0b:64:
83:f0:a3:bf:3a:58:c9:19:69:38:62:53:2e:e0:1b:44:ba:88:
f2:8b:a2:97:75:d8:95:46:91:f7:12:1f:a9:8e:43:e5:e5:8b:
04:ca:d9:2a:78:7d:dd:5f:60:7f:a4:69:09:33:4c:17:0d:ec:
5a:b6:77:14:2e:8e:5c:dd:c2:34:f3:97:c8:bc:24:58:43:8b:
e4:fc:0e:6f:7f:4b:3f:dd:5a:12:40:7b:29:cc:2d:31:b3:c6:
ed:62:41:99:cb:54:79:c7:f2:4d:2b:cd:5a:40:2b:20:83:ef:
a0:79:e6:a7:99:ae:c3:7d:bc:9e:34:e6:64:f7:9a:d9:f7:74:
a0:7f:be:c3:d2:9d:bf:bd:95:52:f9:77:97:2d:b5:41:57:fa:
e2:6e:21:0f:6b:5b:51:bd:f4:4a:41:bf:8b:26:96:de:49:fb:
a0:8c:88:ac:4e:de:4e:01:3c:c0:05:d6:4e:06:a6:33:fb:3d:
05:e3:94:2d:89:e7:b5:d3:67:43:bb:b8:cc:6c:16:bb:42:ac:
4e:ab:7b:89:b0:d3:24:97:9d:3f:20:9e:5e:e1:42:f9:6a:f3:
00:fe:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:09 2025 by rpki-client