Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/379726D2CCE811EFB66BB593762E951A.roa
File: 379726D2CCE811EFB66BB593762E951A.roa (raw, json)
Hash identifier: ZIs18rpH2n2b16IYME50tAXTElnyX+sMFfO6rV1jjbo=
Subject key identifier: 69:9D:CC:E7:D0:7E:8F:18:9D:76:AE:5F:46:12:27:AB:97:C5:99:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/379726D2CCE811EFB66BB593762E951A.roa
Signing time: Tue 07 Jan 2025 11:12:01 +0000
ROA not before: Tue 07 Jan 2025 11:11:58 +0000
ROA not after: Sat 13 Dec 2025 11:11:58 +0000
asID: 984
IP address blocks: 156.235.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64481 (0xfbe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 11:11:58 2025 GMT
Not After : Dec 13 11:11:58 2025 GMT
Subject: CN=677d0c01-137a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:58:99:b9:3a:06:60:35:a9:f4:ca:79:2a:
30:b5:41:02:af:f1:7b:54:dd:f7:a7:50:9b:21:54:
e6:00:a3:66:d6:f6:90:cd:03:91:2b:93:00:97:d0:
c4:c5:37:6b:30:0e:3b:34:df:41:0f:83:e6:cd:85:
ce:08:5e:9c:13:03:0a:c4:6e:7b:72:14:11:cd:f0:
be:f5:a8:ed:ce:85:9d:7c:6b:59:6a:5a:97:ab:bf:
34:bb:75:d4:aa:e9:ed:eb:1d:a8:21:33:2f:e8:0d:
39:d3:ba:dc:99:fc:4a:0b:3d:f9:4f:ee:6b:fd:0f:
b8:e5:25:0d:08:18:c6:62:b6:7c:f9:27:c4:88:39:
9b:31:65:72:11:f7:1a:bb:8b:87:61:96:4a:68:28:
f6:ce:81:4d:91:78:a0:4a:04:03:1f:75:37:4b:a1:
9f:05:ea:e1:a2:35:06:28:e7:01:72:65:55:17:71:
52:aa:91:64:8b:e0:a5:5e:2c:89:5d:5c:38:7e:ec:
d1:e5:ad:74:2d:96:48:d0:88:9c:37:a1:21:a6:77:
d6:1c:84:bf:79:eb:ef:9a:b2:11:6b:36:99:be:85:
36:32:5c:e1:b7:31:4f:f2:31:78:3d:c5:18:9c:c8:
85:84:6f:fe:83:c5:6e:bb:9f:7d:d3:d2:e0:8c:68:
20:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9D:CC:E7:D0:7E:8F:18:9D:76:AE:5F:46:12:27:AB:97:C5:99:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/379726D2CCE811EFB66BB593762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.88.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c7:8d:1f:60:26:33:c5:30:fa:93:67:ee:ca:68:f2:24:99:
53:50:c1:9a:38:7c:c0:e9:8d:ad:7f:d6:65:38:ef:28:db:28:
0c:02:38:c6:9e:0e:05:17:fc:bc:63:be:bf:4d:eb:ed:33:3d:
9f:d5:d5:34:67:c2:92:26:94:a2:1e:ab:4e:17:ed:ec:9f:46:
f6:f5:0c:0c:6d:68:c9:6f:e4:58:d8:b9:89:74:71:df:4d:ba:
60:1b:ce:9e:2f:90:cf:5c:bb:21:26:9c:0d:d3:20:04:73:3b:
8a:f6:0a:8e:4c:26:f2:08:81:77:87:3d:f8:56:63:56:74:c1:
e8:46:3f:9b:3c:59:2f:24:c8:23:b1:a2:e6:b9:bc:66:71:39:
9b:18:45:5b:34:df:af:c7:ea:0f:a0:f4:a4:77:01:db:59:0f:
59:3a:dc:6d:9c:16:c1:9a:8a:b9:1d:fe:da:c9:6e:8e:da:48:
f8:a6:a1:fd:d7:44:1c:85:c8:22:7a:30:ad:45:d8:e2:a8:28:
0a:a4:5d:2b:36:b6:a3:57:19:7e:52:30:d6:1d:3e:bc:63:05:
98:dc:00:57:dd:12:e1:f6:c7:be:c5:ab:4b:01:1e:09:ba:e4:
ad:ce:92:d7:41:92:ff:01:4a:57:ae:c6:0a:3c:26:90:6a:a0:
5f:5d:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:46 2025 by rpki-client