Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33E68A08CD3511EF97350278762E951A.roa
File: 33E68A08CD3511EF97350278762E951A.roa (raw, json)
Hash identifier: Jrw/vA6GhTEpldSULU2NsQwxUi12n2NS+arXM5KrPv0=
Subject key identifier: 91:1C:9B:F8:1D:54:A4:43:10:2D:A4:48:78:C2:46:C9:39:BF:A8:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33E68A08CD3511EF97350278762E951A.roa
Signing time: Tue 07 Jan 2025 20:23:06 +0000
ROA not before: Tue 07 Jan 2025 20:23:02 +0000
ROA not after: Sat 13 Dec 2025 20:23:02 +0000
asID: 984
IP address blocks: 156.243.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65043 (0xfe13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 20:23:02 2025 GMT
Not After : Dec 13 20:23:02 2025 GMT
Subject: CN=677d8d2a-8ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:0a:9a:1a:3e:c6:ae:f5:ec:11:48:36:46:
4d:ac:04:94:26:6e:4e:2d:aa:c6:e3:09:d1:8f:4b:
44:c2:cd:4d:5c:f2:1a:07:ea:d8:b6:c8:9a:f8:52:
45:64:f4:95:db:d5:91:a1:43:ce:fd:b1:a6:98:6c:
a1:af:9f:25:4d:22:c2:79:bb:80:9a:aa:27:9a:c7:
da:67:fe:29:67:cb:be:de:fb:74:76:74:d8:87:e7:
84:8b:2c:65:ba:7c:40:3b:2f:6d:a4:ce:ca:be:8b:
93:19:20:b2:37:e6:eb:fc:1d:ad:6b:fc:45:62:53:
7d:b3:06:1f:fd:32:05:7d:39:6a:3b:d4:d7:75:a4:
db:b3:eb:56:f6:fc:85:e7:1b:8c:d2:2e:da:41:c1:
16:3f:c6:18:60:12:0a:56:6b:61:1e:70:98:c5:1a:
b1:34:f0:07:ba:58:c5:15:8c:79:3b:95:1b:5a:b0:
1b:4b:b8:bc:80:f9:ae:c2:fa:cc:53:01:94:16:94:
c2:61:51:d8:97:ae:2a:25:44:f9:fe:23:98:db:9a:
de:ea:a7:8a:4e:bb:f3:cb:2e:1e:11:af:e2:ce:24:
38:d8:6f:fd:85:ea:37:38:b1:bc:81:95:1f:30:df:
af:3a:51:80:c6:da:56:2d:81:22:d9:1c:a1:e1:23:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1C:9B:F8:1D:54:A4:43:10:2D:A4:48:78:C2:46:C9:39:BF:A8:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33E68A08CD3511EF97350278762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4d:48:27:ef:e7:59:6b:34:23:a9:89:43:50:7a:85:34:6a:
07:e4:bf:d5:e2:a7:09:a8:86:3d:03:3b:3d:54:94:53:af:40:
2a:09:d2:97:fe:25:68:d7:46:cd:8a:14:dc:80:4f:76:fd:8b:
84:fc:e7:76:11:c7:38:d9:68:c2:b2:46:9a:ee:ae:77:df:b5:
b8:a3:d8:7d:86:a2:54:fa:d2:39:be:1b:27:40:23:02:88:42:
34:6e:d4:d3:2c:c8:68:7c:6e:63:b3:60:dc:c0:e2:c4:80:ca:
59:21:78:f3:4a:88:aa:24:8a:ce:3e:27:94:46:26:1b:59:64:
4f:eb:e1:e1:ad:09:fd:bf:f1:2f:c5:5b:c3:eb:a3:2c:38:62:
e4:9f:4c:b6:8a:75:21:1e:58:df:e3:f0:b2:09:a2:d4:67:08:
04:cf:11:80:9c:db:d7:17:cc:91:23:89:75:9e:de:39:e8:5d:
39:df:47:f2:ac:94:fb:2d:f3:38:98:ae:85:39:ab:19:37:cd:
68:b6:20:3d:ca:18:44:52:2b:02:0f:28:10:a5:53:88:de:3d:
ab:cc:b5:28:cf:da:3d:07:55:0c:f3:ac:34:57:dd:73:31:4e:
a5:de:0f:dc:5f:f7:d7:ab:06:d3:41:40:85:eb:6d:94:de:8b:
ae:19:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:21 2025 by rpki-client