Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF1282ECD9A11EFB0819E89762E951A.roa
File: 4AF1282ECD9A11EFB0819E89762E951A.roa (raw, json)
Hash identifier: 37W6Qxx1+ZjgJKhZa0D/+bvpryL7AsiyUWV8NJ3N0zY=
Subject key identifier: CA:10:1A:19:68:CF:2D:B4:90:DC:0E:AA:43:75:F5:52:CB:42:58:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01007D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF1282ECD9A11EFB0819E89762E951A.roa
Signing time: Wed 08 Jan 2025 08:26:44 +0000
ROA not before: Wed 08 Jan 2025 08:26:40 +0000
ROA not after: Tue 16 Dec 2025 08:26:40 +0000
asID: 984
IP address blocks: 156.249.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65661 (0x1007d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 08:26:40 2025 GMT
Not After : Dec 16 08:26:40 2025 GMT
Subject: CN=677e36c4-49d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:54:c8:13:71:66:a0:7d:a9:3b:1c:94:94:
7b:9c:90:73:79:55:2b:bd:10:2f:6f:37:ab:f5:87:
d3:ba:4b:3c:e1:25:7a:51:e7:90:fa:ac:a8:ac:aa:
6d:24:ac:33:5a:83:3e:aa:f7:2d:c8:13:7c:a0:7e:
b6:8b:3f:66:c2:6e:48:75:51:b7:8c:dd:9a:7a:0b:
b7:2b:0c:4f:a4:33:cc:6b:09:cc:c8:4b:ac:8d:fe:
29:48:20:fe:60:b5:66:34:0a:b1:18:ef:28:a9:49:
d3:5c:f2:b3:aa:1d:fc:57:cb:11:9c:8f:64:5f:a0:
b1:4a:dd:18:a9:fb:c2:0d:d2:67:de:37:65:1b:d6:
aa:94:da:d1:c0:6d:b3:07:91:e5:1e:97:7b:0a:8d:
98:cc:c6:57:06:83:25:cd:a1:37:8a:ce:d1:c0:8e:
3c:47:fa:8d:66:fd:37:39:c4:15:c2:89:bd:b9:a5:
c7:4f:64:87:ef:93:a0:f0:e1:4d:0b:57:9a:88:d2:
5e:a5:ca:03:0a:8d:58:52:21:67:95:10:00:b8:a5:
64:ea:64:bb:49:81:72:50:1e:cd:1a:cb:ff:2b:e7:
62:13:14:8d:21:83:ae:80:a4:3d:b3:19:da:bb:47:
03:20:63:21:c0:29:22:ee:7d:02:db:c8:b4:e8:d2:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:1A:19:68:CF:2D:B4:90:DC:0E:AA:43:75:F5:52:CB:42:58:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF1282ECD9A11EFB0819E89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:aa:09:0e:64:d3:a1:76:cd:75:ed:ad:ca:c6:23:75:0e:cc:
2d:65:c9:45:21:fb:b0:ce:6d:d5:92:59:9e:b3:0f:36:42:7a:
c3:3e:b3:eb:fc:5c:b4:e7:14:6c:91:a0:02:c0:24:66:9c:ea:
60:69:ae:93:80:72:8a:17:83:cf:02:85:b2:c3:75:3c:f2:c3:
7f:ed:ed:05:29:e3:56:9e:d0:c0:50:76:77:6e:e5:29:7a:c7:
eb:40:95:ad:ed:03:11:af:52:54:73:1a:e0:ef:78:da:3a:03:
4c:c3:eb:ca:d3:0e:65:8b:c6:a1:5e:b0:9c:c2:6f:73:34:a1:
40:f5:1e:46:09:be:bd:b2:9e:45:aa:a4:bf:b9:20:0e:8f:cf:
0e:3d:72:f9:e1:1c:ea:09:d3:8a:ca:84:c6:d6:88:0d:05:6c:
0e:14:3c:58:6a:f1:6a:0f:ff:46:39:78:71:b0:1a:b0:38:65:
ef:7d:90:9e:e2:91:1d:d6:95:bb:61:81:7b:b7:16:a7:d2:d9:
e2:47:36:bb:66:9c:28:a7:3e:3e:0b:31:b8:6f:5c:4d:98:47:
fa:d6:bf:de:7a:a1:5a:7d:c4:bf:f3:91:22:6c:99:e2:29:31:
77:d2:a1:e0:9b:cf:71:d5:93:34:0c:61:a9:32:e6:b3:ce:f8:
17:87:d0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:54 2025 by rpki-client