Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33AAF57ACF2D11EF94095095762E951A.roa
File: 33AAF57ACF2D11EF94095095762E951A.roa (raw, json)
Hash identifier: r+geqH3qpzT39CSLz6bIOAVgmRh5r41WLIkkGy1HgSg=
Subject key identifier: C8:49:3D:17:A4:FE:C2:F8:B8:09:FC:5F:49:9D:35:00:6B:C1:C9:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01051B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33AAF57ACF2D11EF94095095762E951A.roa
Signing time: Fri 10 Jan 2025 08:30:52 +0000
ROA not before: Fri 10 Jan 2025 08:30:48 +0000
ROA not after: Sat 22 Mar 2025 08:30:48 +0000
asID: 135097
IP address blocks: 156.250.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66843 (0x1051b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 08:30:48 2025 GMT
Not After : Mar 22 08:30:48 2025 GMT
Subject: CN=6780dabc-5e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:d3:2b:d0:bd:f0:f5:62:0f:0d:a7:8f:ef:
d4:da:7f:70:b9:be:25:39:8f:6c:81:5f:2b:76:35:
82:ad:5a:0d:8c:dc:9b:e4:b6:02:29:88:c2:9d:2d:
b0:46:da:15:92:6c:9e:89:d8:dc:fc:9c:9b:d8:7d:
d5:5d:f5:94:5c:e0:98:0c:38:63:71:53:7f:3e:2a:
f8:b1:6a:c4:c5:5d:b9:8b:45:2f:bd:43:78:06:f0:
50:64:b3:a8:a2:25:06:5d:a5:b7:c7:d6:5f:49:56:
fc:7d:89:68:50:96:2c:91:dc:8b:d0:90:99:2c:9b:
f6:92:4c:14:e5:c8:01:b3:58:2a:06:e7:31:ea:de:
96:a8:8c:f7:be:de:cf:f9:ce:26:3a:ef:1f:52:88:
15:54:73:a2:e9:a3:10:f8:aa:2b:5e:15:f1:ae:44:
42:77:50:61:4c:47:ab:c2:3e:cf:64:ec:38:fb:3e:
57:6c:04:6b:b8:65:97:99:89:5f:9d:7a:52:c3:87:
a0:1a:a7:c7:5b:2c:2b:fc:a6:6e:a2:f8:f0:b7:32:
76:54:64:cb:fe:53:02:57:b8:7f:1c:3d:d8:10:c8:
33:fd:95:2b:56:b2:f1:25:53:4a:d0:06:df:22:ea:
57:69:22:6e:39:99:b6:3f:7d:9d:4e:3e:9b:4f:1a:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:3D:17:A4:FE:C2:F8:B8:09:FC:5F:49:9D:35:00:6B:C1:C9:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33AAF57ACF2D11EF94095095762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.4.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:1b:3b:d3:84:97:b9:1b:43:c2:de:b8:34:f2:8d:2e:a3:96:
b7:c9:34:17:0e:ae:a8:e5:ca:f1:27:15:45:44:88:ba:69:a1:
5a:bc:81:d6:bf:33:5c:d9:26:5a:9e:5c:37:50:37:29:85:89:
36:2f:04:a2:59:c2:2a:75:28:5c:b7:62:b5:e9:39:a1:13:39:
5a:34:f9:38:bd:e0:2f:29:8d:ba:f1:b0:7f:cc:b7:55:5f:0d:
a2:dd:d7:ea:6d:ab:c0:18:98:1f:23:60:a2:0c:54:cf:5f:c6:
1b:a6:6f:46:a9:ce:70:9d:7c:39:8a:45:cd:2a:36:b5:c6:a0:
96:28:f6:56:f7:09:82:7f:b0:e0:c1:d4:c7:27:c4:e2:a7:00:
49:d4:9a:65:85:18:2f:41:2a:90:06:3c:8d:8f:25:b4:57:f8:
8a:60:e0:cc:04:8d:a8:e7:16:ac:31:0e:db:86:20:72:b0:11:
84:7d:ee:0c:ae:01:11:6a:b1:7d:11:00:23:2e:ea:84:91:87:
8e:9a:d1:4b:94:06:37:e0:72:be:57:6f:6e:f2:b0:ff:ce:67:
e0:3e:6a:27:68:1b:4a:6e:13:4f:a5:9d:89:bb:cc:e9:05:f4:
82:47:ac:24:21:a7:85:d5:01:ec:da:34:ea:50:7b:33:93:21:
eb:67:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:00 2025 by rpki-client