Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37328962C34611EF89E88C5C762E951A.roa
File: 37328962C34611EF89E88C5C762E951A.roa (raw, json)
Hash identifier: bpeJeWZwZbT+fVaLzQenEbCf0y929B9sjFoeMWcfTOM=
Subject key identifier: F9:31:14:60:C4:DE:FD:43:6A:25:E1:45:D5:93:8C:3D:42:B4:12:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37328962C34611EF89E88C5C762E951A.roa
Signing time: Thu 26 Dec 2024 04:59:41 +0000
ROA not before: Thu 26 Dec 2024 04:59:38 +0000
ROA not after: Fri 10 Dec 2027 04:59:38 +0000
asID: 17561
IP address blocks: 156.244.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60423 (0xec07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 04:59:38 2024 GMT
Not After : Dec 10 04:59:38 2027 GMT
Subject: CN=676ce2bd-5e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:52:ca:3c:ee:31:83:4b:ce:e0:4b:97:60:
fa:5f:92:5e:f3:8a:e5:33:a0:ea:31:88:c0:8d:20:
8e:d9:35:6f:49:5b:e7:35:fd:93:52:de:4b:ad:7f:
cf:ff:83:af:90:3b:2d:ec:32:37:e4:ae:d2:71:da:
d1:24:a8:27:7e:36:d7:5e:ba:38:b1:8a:d5:25:b3:
75:70:07:5b:ca:0d:56:90:3d:21:53:99:1b:95:e9:
d4:87:39:73:b9:b1:8c:95:37:2b:8e:56:a8:29:93:
88:a0:4e:00:6a:cd:a8:a7:8c:47:65:31:6b:13:aa:
4c:a1:07:71:6c:b8:a6:6e:ec:4c:e7:10:70:ef:dc:
fb:d4:3f:81:8f:fd:02:c8:08:fc:8a:2b:fc:68:4c:
6e:99:84:df:8e:4e:da:d1:1a:6b:9f:ab:f4:8d:2e:
35:36:e2:a6:a9:d7:7c:56:07:ba:c0:42:ce:8e:14:
7c:5e:1c:81:64:7b:dd:c5:0d:c6:16:16:c0:ce:f7:
ef:3e:a0:cb:e5:ed:02:71:f8:5e:0c:59:3b:4c:cb:
a4:c0:f2:15:d6:87:ab:51:0a:7d:30:c9:ba:90:06:
96:00:2d:16:cd:6b:e7:77:77:e3:28:d6:e4:db:26:
65:14:f5:90:ef:93:69:5b:d5:3d:2b:ac:f5:bf:2f:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:31:14:60:C4:DE:FD:43:6A:25:E1:45:D5:93:8C:3D:42:B4:12:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37328962C34611EF89E88C5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:2b:f1:c2:8d:dd:8b:13:b6:23:bf:e7:1c:23:d9:3d:54:77:
15:3e:4b:99:f6:0a:03:47:7f:c6:b4:aa:f1:8e:ce:7a:4d:4c:
55:28:69:77:26:7e:cb:6f:af:a9:5f:fa:46:07:7e:23:06:16:
2a:6b:b6:fb:2c:35:88:29:5b:6b:46:23:0a:63:46:5a:70:dc:
4b:54:94:d8:01:3d:2f:21:b2:92:be:37:35:46:45:85:1e:c7:
aa:71:c5:23:61:5b:2b:11:65:75:5d:af:5c:f1:98:e7:1f:fb:
95:a9:c7:9a:5c:61:45:f7:fd:a1:80:f8:a9:d2:e5:fe:51:09:
0e:41:76:cd:13:16:55:56:0e:87:26:08:42:90:92:d1:20:b5:
35:a5:40:c3:1e:88:ad:7a:48:1f:a2:e2:27:d2:83:7a:6b:20:
3c:fe:9e:1b:51:c9:86:28:3f:0e:87:21:25:01:1f:dd:93:89:
67:bf:69:38:c7:42:24:b4:37:fd:04:13:8b:89:0f:9b:5c:87:
58:b2:41:8c:0d:e2:99:e9:07:d3:cf:f1:b5:15:ec:e8:77:1e:
d7:f1:61:9e:db:00:37:9a:0e:4c:ff:40:ce:4c:3e:ea:1c:e0:
86:ce:4b:03:50:27:73:f8:0d:cf:79:c6:cd:a7:13:34:06:b7:
83:48:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:33 2025 by rpki-client