Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46EDB0D6CCD111EFB201CB82762E951A.roa
File: 46EDB0D6CCD111EFB201CB82762E951A.roa (raw, json)
Hash identifier: 2pjcnVOZh687fqNkd9NCJm9441+G3R67jc8/I2ul8QY=
Subject key identifier: 61:3B:64:A6:6D:76:BB:B4:72:99:F7:CA:5C:8E:45:DB:BD:2A:D1:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FACF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46EDB0D6CCD111EFB201CB82762E951A.roa
Signing time: Tue 07 Jan 2025 08:27:48 +0000
ROA not before: Tue 07 Jan 2025 08:27:45 +0000
ROA not after: Mon 13 Dec 2027 08:27:45 +0000
asID: 17561
IP address blocks: 156.233.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64207 (0xfacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 08:27:45 2025 GMT
Not After : Dec 13 08:27:45 2027 GMT
Subject: CN=677ce584-286f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b3:2f:55:4b:14:43:97:c5:79:5a:30:d6:bb:
66:9d:79:87:89:56:40:8d:04:7b:dd:db:f8:1d:66:
6f:6c:58:ce:8b:22:da:57:02:bd:ee:0d:1c:3f:ae:
5e:b8:ae:e0:3e:d9:73:04:6c:f5:5c:17:67:97:49:
3a:fd:60:c0:fa:02:3d:1c:a6:f5:1f:6a:fb:ec:c3:
46:fb:32:46:1a:a7:b3:d5:73:02:9f:b6:7e:d0:44:
8a:1f:8e:e3:65:1f:c0:23:55:c0:a8:85:87:81:14:
05:9b:cf:c9:1f:e3:42:46:9c:05:2f:05:a6:ef:f1:
3c:25:87:43:1b:50:d3:17:72:13:aa:db:41:ee:0b:
ae:b0:56:bd:62:55:c9:eb:e0:80:4a:11:ab:e3:f7:
fe:1a:f7:b0:35:bd:ea:06:2e:d1:5f:91:6e:90:f6:
98:c0:b1:10:2e:7d:05:c0:92:86:55:8c:b9:4c:ca:
3a:13:2f:f4:46:12:3b:14:ce:34:25:3c:3c:fd:93:
cd:b9:fe:59:06:6a:02:6b:e1:53:b4:5c:80:1e:03:
df:04:ce:75:f3:4c:c8:2c:f5:2a:a1:e3:6a:05:91:
5d:a3:ce:83:7e:17:8b:36:bd:f6:e9:37:4d:db:e3:
51:c2:f0:b9:e1:69:24:b7:3c:8d:28:59:7a:b9:95:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3B:64:A6:6D:76:BB:B4:72:99:F7:CA:5C:8E:45:DB:BD:2A:D1:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46EDB0D6CCD111EFB201CB82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:27:eb:6a:11:35:c6:64:29:04:f1:8b:12:eb:90:cc:38:09:
b3:05:15:08:17:87:d0:62:4e:9c:53:65:bc:4e:2f:a5:67:4e:
1f:5c:ba:3f:93:4c:9f:b9:20:a7:16:dc:b2:24:82:c3:f9:59:
14:d5:0f:7e:e2:2b:60:59:12:a4:f7:33:0e:ce:e3:dd:9a:01:
aa:e5:c4:3c:71:09:d8:33:e5:74:c7:7c:0d:64:d5:61:a4:9f:
ca:e6:fc:85:a9:e1:10:b2:e6:df:69:a0:cf:78:dd:19:82:f7:
77:47:da:79:1a:f7:4d:de:f1:1f:46:c9:17:1a:26:59:32:15:
90:b3:e6:01:05:9c:9c:5f:0a:71:dd:c6:68:a6:2b:73:cf:ad:
28:96:83:8f:81:ad:47:5d:7d:6a:0d:f7:87:62:9c:4d:60:90:
ec:1f:68:90:ca:f2:e2:35:b5:48:ca:35:b2:a6:1e:6c:7a:e9:
f3:05:0f:33:e2:81:d0:3e:e1:a0:aa:dc:81:8b:0d:fb:40:79:
a9:cb:a1:09:db:5b:c8:48:cc:8f:d7:79:71:48:3c:65:c6:ce:
0f:39:5e:19:1a:7d:74:8e:30:01:e1:6c:34:98:b4:28:c3:30:
c1:32:7e:9e:db:28:10:07:ed:ca:f2:ac:33:8a:b7:40:d4:4d:
6a:7c:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:12 2025 by rpki-client