Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/442FD0D4D3E011EFBEFD9F5A762E951A.roa
File: 442FD0D4D3E011EFBEFD9F5A762E951A.roa (raw, json)
Hash identifier: VMrTK43PPW87t3LDYUJokP300fd0U2SS+kBkUVwOGLs=
Subject key identifier: 3E:B6:65:31:78:5D:EE:61:86:3D:33:31:A3:C4:C8:94:C5:D8:AD:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/442FD0D4D3E011EFBEFD9F5A762E951A.roa
Signing time: Thu 16 Jan 2025 08:02:44 +0000
ROA not before: Thu 16 Jan 2025 08:02:40 +0000
ROA not after: Sat 01 Mar 2025 08:02:40 +0000
asID: 398443
IP address blocks: 156.229.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67818 (0x108ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 16 08:02:40 2025 GMT
Not After : Mar 1 08:02:40 2025 GMT
Subject: CN=6788bd24-bcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:43:3d:36:17:e8:21:10:e0:54:29:42:21:37:
19:97:51:44:49:60:2f:df:63:b6:2c:47:eb:56:e4:
a4:c2:08:2a:ab:9f:c5:95:bd:f3:7b:23:af:d5:c1:
3e:12:fd:fc:88:ba:cd:3a:12:3f:8e:90:61:89:0e:
59:37:ed:c7:c2:7b:30:b8:40:6d:95:b3:08:7d:21:
b8:5e:c0:85:29:d8:dd:d5:82:8c:9f:e6:d7:b3:b3:
30:f9:84:3e:a1:9a:25:6f:3e:c6:96:00:6a:54:f3:
de:40:95:d6:75:bb:48:6c:58:bc:03:37:74:88:52:
84:28:2d:08:cd:ef:97:7a:bb:46:f6:e3:f1:41:aa:
26:9a:e8:9d:0f:97:e2:fb:70:e7:e7:49:16:ea:9c:
ba:5a:dd:50:da:f2:6d:9e:93:97:0c:3c:9c:5a:b9:
62:a5:86:17:58:53:db:2c:d9:41:6c:37:28:9b:14:
88:ca:c9:1e:04:7f:9f:ec:2f:02:57:f3:60:f7:f7:
d2:ac:48:4a:99:66:65:d7:25:85:ce:9d:63:e3:74:
7a:31:b6:c6:7d:20:cc:07:8f:5b:83:a3:31:45:a6:
42:8d:93:87:a9:e2:d2:e9:4c:1b:9c:b4:f3:04:56:
e8:08:82:14:f5:7f:0e:e3:d1:d2:ed:a5:4f:31:4e:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B6:65:31:78:5D:EE:61:86:3D:33:31:A3:C4:C8:94:C5:D8:AD:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/442FD0D4D3E011EFBEFD9F5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.192.0/19
Signature Algorithm: sha256WithRSAEncryption
71:41:18:85:ce:e3:9c:86:d0:9d:8a:73:3d:f0:c6:d1:fc:25:
94:19:9c:89:67:08:05:d9:ed:7e:25:7d:f5:36:23:f3:62:03:
79:3b:a5:dd:72:8c:50:07:c8:af:1d:6f:2a:55:23:ef:0d:e2:
86:24:1a:80:5b:17:fd:3b:6d:f8:5f:f9:18:69:11:c9:dd:23:
8f:48:1f:cf:47:7f:b2:eb:5f:d7:3b:90:f2:94:b1:80:31:7c:
ad:42:91:06:ca:d3:61:a8:20:b3:06:ec:d3:68:87:4e:50:06:
d8:4b:a3:ad:00:3d:02:ac:ca:6c:e6:ff:5f:18:68:7a:bd:87:
ea:34:c8:38:5e:b7:9d:0a:63:83:9f:e4:68:d0:c0:c4:ec:dd:
61:d5:fc:dd:66:75:d6:98:8c:86:87:24:b0:a1:c7:ca:73:ce:
85:68:d9:af:73:10:29:b0:1d:25:9e:a7:0f:20:84:4e:41:ff:
dd:1b:f9:de:67:a2:78:58:42:1e:31:c5:d0:2f:28:e1:a4:ae:
50:1c:18:19:db:3c:0e:00:db:7f:ba:10:c0:76:c7:dd:4a:89:
84:d8:97:7a:19:61:27:d4:e3:90:84:5c:cb:87:eb:ed:86:ec:
7c:e1:33:ca:34:d0:20:7a:44:91:69:a2:99:7e:b6:ef:65:0b:
42:f2:6b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:04:09 2025 by rpki-client