Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EE4DF7ECC9311EFA7D0ED65762E951A.roa
File: 3EE4DF7ECC9311EFA7D0ED65762E951A.roa (raw, json)
Hash identifier: +EawUORQR1oRBSUR35e/0Ep/mmWnmNKg+jGgJBXl8ts=
Subject key identifier: 92:62:DB:33:08:CC:E4:97:FE:89:9B:46:AA:2F:47:00:86:C9:BB:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F91D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EE4DF7ECC9311EFA7D0ED65762E951A.roa
Signing time: Tue 07 Jan 2025 01:03:46 +0000
ROA not before: Tue 07 Jan 2025 01:03:42 +0000
ROA not after: Mon 13 Dec 2027 01:03:42 +0000
asID: 17561
IP address blocks: 156.227.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63773 (0xf91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 01:03:42 2025 GMT
Not After : Dec 13 01:03:42 2027 GMT
Subject: CN=677c7d72-a9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:38:c4:95:87:ba:25:4a:5a:a5:0e:2c:19:
89:b4:00:9d:bc:31:e2:db:90:29:5c:2d:e1:88:5a:
5d:7c:e0:1e:d3:37:d4:f7:0f:d8:2c:8b:c6:c1:09:
35:e5:94:5a:2e:d8:79:f2:1a:34:a4:78:4d:ff:68:
f5:d1:ae:16:33:6b:1b:10:17:17:b0:34:07:de:ee:
2a:6e:52:84:8a:ce:3b:90:9b:6b:a7:42:9b:17:d5:
05:d6:c3:a4:cc:0a:0e:2a:ad:a7:27:a9:a1:21:7f:
b2:77:28:55:e5:9f:3d:c1:74:11:0b:93:2d:8f:77:
8a:88:46:a7:fc:1c:4b:0e:a0:67:4e:b9:47:5e:1f:
51:47:d1:f4:5e:b4:28:73:bb:c7:cb:8b:a1:1f:1c:
61:3f:21:47:59:81:5d:7e:71:74:6e:d1:88:b6:6c:
43:cc:2c:62:ec:f2:59:f9:0e:61:cb:a5:16:6f:c4:
20:9d:4a:ea:4a:69:7d:70:e2:53:02:87:e3:e0:f3:
c3:73:80:36:62:1b:d2:82:a1:3f:aa:d2:6d:11:6d:
e9:54:87:9c:31:05:06:d4:c5:59:0d:14:3f:5a:e9:
d9:aa:d1:e8:2d:90:01:77:e7:80:ca:e7:0a:9a:f9:
ab:4e:81:b5:01:1c:7b:de:25:49:cb:36:3a:ac:dd:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:62:DB:33:08:CC:E4:97:FE:89:9B:46:AA:2F:47:00:86:C9:BB:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EE4DF7ECC9311EFA7D0ED65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.67.0/24
Signature Algorithm: sha256WithRSAEncryption
53:6f:2f:90:7e:b4:75:84:99:b5:4d:5f:6e:76:85:00:7a:cd:
f2:c2:1e:37:3a:60:96:c5:d5:cb:ce:34:b6:6a:62:88:b9:56:
dc:d7:05:bc:64:8f:4d:36:a8:7c:93:27:25:b2:44:59:d3:0d:
d2:17:7c:6d:61:c0:5c:ff:e4:21:7a:c0:98:ab:8a:d9:91:04:
b4:a9:f8:78:c3:ab:34:11:a8:a2:3e:6f:1a:e1:31:0a:3c:6d:
f1:18:2f:14:3b:87:ab:e3:63:04:f0:42:c3:50:1d:d9:e0:4e:
42:b4:86:90:a4:8e:fe:51:d9:ca:a9:20:67:a7:47:c3:ac:a9:
05:05:63:3a:f3:9d:21:da:26:25:76:ff:0f:16:38:52:0f:9f:
bd:a2:4b:e6:1f:ba:8f:72:f5:a8:af:c2:35:e5:8d:7b:ef:73:
58:3a:80:97:d5:05:8e:38:b8:2b:fd:6b:ff:4d:4d:97:d1:3c:
3b:9e:ee:50:95:0f:30:9b:33:71:10:0d:6c:6b:85:43:b0:2a:
5f:54:3e:64:bc:32:e2:39:05:99:71:5a:91:89:7a:1d:a6:b1:
2a:a7:7f:49:44:2e:57:b3:f7:07:94:dd:a9:07:df:d1:48:19:
7a:9a:49:7a:55:5f:a7:ff:0b:99:ab:8b:c4:a4:ee:8c:82:b7:
52:41:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:02 2025 by rpki-client