Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A0C9B72D2EC11EFB47BF748762E951A.roa
File: 3A0C9B72D2EC11EFB47BF748762E951A.roa (raw, json)
Hash identifier: 4Q4CRc4Jg03YGuFc7H+qKJ/APNVBRZV1+ylgHeHewjw=
Subject key identifier: 7B:96:7D:6E:E8:09:39:0A:3F:3A:99:8C:8D:2B:CA:07:5A:5E:91:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01075F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A0C9B72D2EC11EFB47BF748762E951A.roa
Signing time: Wed 15 Jan 2025 02:55:50 +0000
ROA not before: Wed 15 Jan 2025 02:55:46 +0000
ROA not after: Mon 03 Jan 2028 02:55:46 +0000
asID: 17561
IP address blocks: 156.233.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67423 (0x1075f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 02:55:46 2025 GMT
Not After : Jan 3 02:55:46 2028 GMT
Subject: CN=678723b6-0bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:fa:36:60:81:fd:b8:29:81:41:36:76:d1:
2a:60:25:14:a1:ad:7b:c2:cb:97:aa:db:71:c7:cb:
77:35:22:87:9c:0e:fb:a9:1f:22:4d:d7:e3:10:04:
26:c4:a8:66:57:f7:8f:10:35:a4:00:38:62:8c:48:
c9:ca:c9:c7:f1:4e:3d:14:d1:74:bc:1c:36:21:d4:
b8:ad:8a:c7:30:42:b1:eb:51:51:91:43:ad:56:04:
a4:28:d0:fc:8e:91:cd:6e:76:95:fa:f1:e4:00:ec:
b5:07:2d:d1:8a:f1:3b:16:20:e3:a5:53:80:f0:31:
d7:f7:98:38:10:72:10:6c:10:73:b5:8e:14:e3:2a:
a8:18:a4:ee:03:5b:ee:f5:1d:53:9e:2b:fb:65:b7:
15:db:bc:c1:34:87:94:d3:d8:e5:97:ed:5a:6a:0a:
67:a3:ae:ea:79:79:77:82:29:c8:a0:de:10:db:8e:
82:b8:01:b4:bc:e0:04:f9:4d:f8:3f:42:35:88:d1:
ab:f3:6b:c5:b1:b6:a9:dd:fb:87:55:07:d4:91:a6:
90:fa:de:ff:cd:bb:1b:31:9a:1b:f0:00:c2:66:1c:
2f:c9:ca:5b:3b:06:34:22:d2:b0:7d:8d:58:a8:f0:
7f:67:72:9c:c3:fe:1c:a0:bf:9a:73:c9:e3:5f:e8:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:96:7D:6E:E8:09:39:0A:3F:3A:99:8C:8D:2B:CA:07:5A:5E:91:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A0C9B72D2EC11EFB47BF748762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:61:d4:ee:85:bd:8b:6f:f8:6f:21:50:92:7b:9b:77:1d:57:
4c:ec:3e:6f:a0:ad:6d:0a:ab:a6:cf:63:b9:98:c6:da:a2:f9:
4b:bd:1d:97:5e:ee:3f:c3:81:3f:30:ce:81:33:65:24:14:0f:
be:b4:18:cf:31:97:3e:a0:9d:cc:31:ed:7d:df:64:29:45:53:
ae:e6:2f:f5:be:d9:bc:3d:e4:9f:1b:83:6d:20:42:3e:4b:c7:
c2:ac:12:e2:86:8f:19:50:32:c6:d4:20:3f:07:44:7f:6b:21:
19:45:c1:e2:50:20:ba:0a:d2:d6:55:20:43:b5:57:36:af:7e:
00:c0:0c:b4:5b:1b:ea:71:7e:ee:54:92:1d:63:ac:79:63:85:
15:5c:77:a6:fb:eb:3c:ce:ec:e8:41:73:6b:55:62:db:18:54:
7b:a0:46:0b:81:ae:c8:94:d3:b0:83:90:97:c3:9b:f2:45:56:
c6:26:56:2f:48:c9:e0:56:25:ef:70:88:51:a9:be:4d:65:30:
d2:5b:ba:35:b0:ba:42:23:61:12:dd:2e:4e:b6:ca:45:5d:c6:
9c:6d:fb:d4:c6:65:a7:a1:17:ab:d4:27:e4:e2:6c:e6:fd:fb:
a4:46:f9:84:71:ca:1e:09:0d:96:6b:70:5a:bf:71:d6:7e:59:
30:d8:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:47 2025 by rpki-client