Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43BDE95ECD7511EFBA0220A2762E951A.roa
File: 43BDE95ECD7511EFBA0220A2762E951A.roa (raw, json)
Hash identifier: Nk5waGnUb1nxFzLxyp0meva2xn/cDUYxIhxdUOWo6Fg=
Subject key identifier: CC:F3:67:7A:A2:46:BC:AB:D9:BD:6A:16:8B:2E:62:06:B5:1D:45:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43BDE95ECD7511EFBA0220A2762E951A.roa
Signing time: Wed 08 Jan 2025 04:01:40 +0000
ROA not before: Wed 08 Jan 2025 04:01:37 +0000
ROA not after: Mon 13 Dec 2027 04:01:37 +0000
asID: 17561
IP address blocks: 156.248.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65451 (0xffab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 04:01:37 2025 GMT
Not After : Dec 13 04:01:37 2027 GMT
Subject: CN=677df8a4-4b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:2b:fa:76:12:2c:b2:93:1e:3c:15:f7:b3:
66:07:99:53:69:53:45:65:85:ec:87:01:9e:e0:7f:
3a:2e:d0:83:13:e9:e4:8f:33:34:5c:a5:0e:f7:ce:
a4:de:81:91:28:80:8a:9c:14:ae:8b:c0:e0:d4:e0:
0b:02:a9:b2:83:e2:d9:7b:0d:7f:65:b2:03:28:78:
65:16:d7:a7:aa:e6:2e:e4:79:d7:b7:2a:03:fa:f8:
9a:5d:24:84:f5:6d:eb:e2:54:01:24:df:d6:8d:b8:
f8:80:7e:53:b7:08:a4:3c:ac:48:eb:17:18:f4:9e:
93:a8:c2:bb:a2:a9:ca:ef:fe:83:ab:28:ee:18:0b:
56:76:c3:80:3a:07:13:4d:7d:59:92:f9:d8:67:d4:
b3:68:f5:4e:e3:cd:a7:c4:a6:39:e5:92:c4:42:14:
1b:83:c0:77:25:94:65:95:82:ae:db:b5:ee:10:45:
66:a0:b9:25:d0:5c:b3:1e:e0:88:b3:60:fe:5a:30:
63:70:f3:fe:71:1f:b2:96:42:f3:c9:b2:25:95:7c:
0c:42:3e:28:54:22:af:da:9d:6b:05:8d:2b:5a:c7:
f0:ee:0e:2d:71:78:91:45:81:01:7d:04:9c:06:4a:
1c:3e:f7:4b:d3:d4:10:e1:6e:25:e2:a6:b8:a5:a4:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F3:67:7A:A2:46:BC:AB:D9:BD:6A:16:8B:2E:62:06:B5:1D:45:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43BDE95ECD7511EFBA0220A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.87.0/24
Signature Algorithm: sha256WithRSAEncryption
13:45:56:ef:e0:23:3b:a9:33:28:13:11:84:6e:e4:23:9d:57:
72:57:ef:5c:fb:8b:fc:65:c1:9c:82:da:eb:15:06:91:22:48:
42:d3:0f:b3:27:dc:73:2c:93:3d:e1:ca:5a:6c:fa:c5:44:86:
3b:f1:ab:e5:d7:9f:2e:08:13:2b:ed:3c:49:ea:bc:58:db:42:
b9:42:e8:cb:ad:f7:9f:b2:3a:02:dc:53:27:49:4a:32:0f:b8:
a0:d7:cc:f5:c8:62:2a:a6:65:77:a4:ec:b3:d2:5f:81:eb:a4:
32:28:c4:f3:6e:a4:52:de:55:89:3a:7a:99:68:f4:be:a8:18:
bd:bd:22:1a:00:5c:31:91:ff:12:81:e9:c8:35:ba:96:c8:3c:
29:95:8d:57:59:6d:46:db:b4:5d:51:c6:89:58:14:ab:30:29:
0e:09:a0:c8:9a:ca:f0:97:9a:49:97:ac:f3:e9:92:d8:9e:68:
e8:6d:cb:00:f6:0d:6a:83:dc:ec:0f:9d:3b:c3:4b:f5:3d:b8:
39:ec:02:cf:4f:55:39:79:cf:2e:8d:c6:0e:9c:38:c9:d6:4e:
3b:7b:61:97:88:dc:1b:91:22:24:2a:f9:3f:3c:24:0a:47:b2:
9c:87:2b:52:ed:0a:cb:57:0d:b3:c4:66:45:65:23:35:0c:7c:
aa:1f:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:03 2025 by rpki-client