Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E056528CCCB11EF8E45B05B762E951A.roa
File: 3E056528CCCB11EF8E45B05B762E951A.roa (raw, json)
Hash identifier: AE8kFoHJ6kyUS2fTlBxRxvw2i5NaiY990qYUCkcST+Y=
Subject key identifier: 3F:5A:39:CC:76:17:85:AB:EF:5B:E8:E9:E7:0C:EE:8A:47:E5:84:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E056528CCCB11EF8E45B05B762E951A.roa
Signing time: Tue 07 Jan 2025 07:44:36 +0000
ROA not before: Tue 07 Jan 2025 07:44:33 +0000
ROA not after: Sat 13 Dec 2025 07:44:33 +0000
asID: 984
IP address blocks: 156.233.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64124 (0xfa7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 07:44:33 2025 GMT
Not After : Dec 13 07:44:33 2025 GMT
Subject: CN=677cdb64-95be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:f8:3d:bb:98:57:b7:9a:6d:fb:97:70:ba:
58:dd:1d:6c:b8:69:40:3d:f5:3d:b9:48:3a:52:45:
b0:e7:10:83:d1:9b:5e:b8:0c:f2:72:0e:9f:ea:53:
bf:40:f1:ff:63:ae:0b:0e:f4:3d:94:d6:fe:96:b8:
59:18:35:9a:9b:3f:8d:34:67:bc:05:f7:c3:ef:1c:
3b:2c:8b:c5:24:df:12:70:43:af:11:5c:56:da:a6:
2a:7f:45:01:f2:02:ab:2d:3f:68:94:96:58:52:d1:
f9:2b:94:27:76:ca:d7:f2:be:d0:f9:f6:4a:26:ca:
13:fa:2a:23:db:a6:82:44:be:f3:75:c0:24:74:53:
2a:e8:d6:77:69:bb:c6:8e:a1:2f:b3:f2:7b:88:c0:
ff:c1:9e:c5:d5:64:de:e4:b3:19:c6:06:10:c4:32:
21:70:12:78:13:32:a2:c6:d4:bb:54:8c:50:d2:ed:
1e:ec:bf:7a:9f:8d:32:d2:1b:f1:f6:e8:b3:ae:0b:
19:85:d0:6f:a0:6a:e7:1d:ca:4e:34:7a:d8:8b:ca:
8e:2d:93:56:c1:9d:18:b8:64:9c:60:b2:95:12:1e:
04:c2:01:2e:a0:d1:d3:0c:07:1f:3b:c0:05:a9:7c:
a4:0c:92:b9:78:60:2e:37:05:9b:cc:7d:a3:84:94:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5A:39:CC:76:17:85:AB:EF:5B:E8:E9:E7:0C:EE:8A:47:E5:84:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E056528CCCB11EF8E45B05B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.113.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a2:d6:80:8e:51:c4:fd:6f:1d:fa:b5:ae:e4:c0:8a:00:ad:
d0:6b:ec:25:64:6e:9a:96:11:94:69:28:c7:7d:50:80:77:d3:
17:3b:59:cb:1f:9c:76:2f:e9:37:b3:ff:69:eb:ec:33:4f:a7:
f4:75:3e:03:c3:e7:7a:14:40:4b:fd:a8:5d:05:95:15:62:b7:
3a:67:cc:be:21:63:8c:c6:7d:2d:39:fd:9f:3f:8d:ad:33:b2:
15:d0:97:be:f8:c8:13:b3:06:36:b0:07:26:a2:d7:76:0b:c6:
e9:9f:92:92:3d:94:3d:99:e1:75:6a:ca:5d:0b:03:9d:01:14:
9b:d9:cf:fb:11:6b:0a:bd:6c:c2:a6:c9:60:41:19:53:86:66:
41:df:b0:5e:5c:80:95:c4:d9:07:75:9e:7f:21:5f:cb:43:6a:
7d:8a:7f:79:a9:7f:a5:f8:eb:6d:fe:6a:43:96:2f:19:3c:0e:
c9:22:cf:ac:32:24:3c:01:1c:ba:e7:87:1b:0a:e3:04:f9:ee:
d7:f3:89:b9:11:29:ee:54:7c:a4:b5:c2:c4:27:d6:b6:1b:93:
9b:3b:ad:b7:27:f1:a1:ff:b8:e0:f0:82:13:08:b3:fd:14:68:
e7:3d:ea:3b:c4:13:59:87:41:92:f5:b8:92:52:ae:4f:d7:73:
8b:57:74:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:04 2025 by rpki-client