Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D1006C8C99211EFA330926D762E951A.roa
File: 3D1006C8C99211EFA330926D762E951A.roa (raw, json)
Hash identifier: N3PRbiZoMmN0ldnRWuYG0tJldnqT9whds1K/+h41rpM=
Subject key identifier: BD:D3:D8:BB:09:1F:C4:AB:BA:DE:D7:16:8C:65:E2:A0:24:D0:07:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D1006C8C99211EFA330926D762E951A.roa
Signing time: Fri 03 Jan 2025 05:19:00 +0000
ROA not before: Fri 03 Jan 2025 05:18:56 +0000
ROA not after: Sat 13 Dec 2025 05:18:56 +0000
asID: 984
IP address blocks: 156.233.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62959 (0xf5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 05:18:56 2025 GMT
Not After : Dec 13 05:18:56 2025 GMT
Subject: CN=67777344-5590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:0a:24:4d:7e:4d:01:24:5b:41:33:c9:d1:
e7:4a:38:e9:e7:31:32:88:a6:6c:9f:42:19:34:f4:
34:34:a4:ab:6b:b6:1d:d1:fa:5e:d2:9d:5a:aa:b4:
7b:b4:db:3c:e0:41:21:6e:47:c2:ea:8e:49:ad:04:
d8:f4:2e:5e:de:56:f9:39:bb:a9:92:d5:a6:14:f2:
a2:8d:8d:09:25:2e:76:2d:57:e1:f1:88:c6:e9:49:
07:10:8c:71:56:9f:7a:8d:d8:42:26:1f:a7:49:f3:
d8:1b:09:3d:49:16:99:5b:9d:fa:d9:52:6f:aa:45:
62:c9:28:7b:86:27:f9:30:f5:7b:ec:5b:ee:f7:9a:
96:0c:2a:dc:7c:4b:b6:43:1b:3e:70:bf:20:5c:ab:
27:d5:f6:55:39:19:52:16:39:3c:85:29:62:1b:e4:
f2:0e:2d:71:d4:25:97:48:71:d5:36:c4:4e:64:68:
4a:ce:82:63:af:4a:42:64:8c:06:dc:97:bb:df:89:
78:c4:9d:86:e6:de:1d:66:b3:10:d2:93:5a:0e:6e:
8a:51:f7:5a:6e:e1:ac:f3:2f:71:9c:b7:e9:c6:51:
26:6d:37:92:a6:3c:8a:93:5e:89:b5:8c:8e:56:30:
3b:f2:85:24:4a:4c:f6:45:90:39:4e:8e:4b:9a:48:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D3:D8:BB:09:1F:C4:AB:BA:DE:D7:16:8C:65:E2:A0:24:D0:07:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D1006C8C99211EFA330926D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.114.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e8:8c:01:84:b2:15:d0:5d:f9:cf:98:44:2e:c2:77:87:95:
66:7f:87:a0:20:bb:2d:de:49:b7:d2:89:53:83:6f:fc:18:2e:
aa:74:f1:b5:2a:76:96:fa:d1:f3:3d:30:77:bf:93:83:c2:e7:
10:8a:f7:d5:19:67:09:65:57:37:91:35:92:63:34:1a:c5:56:
3e:8d:39:0f:d0:d3:7e:88:f3:fa:57:1d:29:a3:3a:3e:2c:c6:
d7:66:41:f8:13:c3:77:fd:2c:96:0d:27:a0:0b:b1:4a:6c:cb:
70:bd:dd:e3:34:bd:ec:46:10:6e:99:ee:05:97:4a:72:25:8b:
ef:a2:dd:40:1e:97:b8:2d:78:ca:fb:55:78:de:0e:ff:2c:81:
81:52:81:3b:76:6a:aa:62:bd:35:a2:2f:53:70:59:b2:c6:86:
7a:62:d8:2f:c3:eb:32:07:19:9d:2d:ae:ea:8f:30:26:39:61:
72:ed:00:0c:f5:bd:48:fb:23:cb:32:58:5b:7e:66:b2:62:0b:
fd:a6:9b:aa:71:9d:80:9c:76:d9:f8:42:0a:50:80:a1:e9:e1:
0b:54:17:4e:c1:8e:1a:9d:dc:50:5a:aa:73:94:c2:94:ee:0d:
d5:e5:13:a4:8b:43:72:17:43:dc:82:4d:43:e3:a2:4e:29:92:
94:c6:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:33 2025 by rpki-client