Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E58ABDACDA011EFAF1E18B1762E951A.roa
File: 4E58ABDACDA011EFAF1E18B1762E951A.roa (raw, json)
Hash identifier: XscI7lJwe4IpI8LGO/3liELuUBfYgl2Qau7eLfv4SK0=
Subject key identifier: C1:67:C9:60:E6:16:49:92:9C:2D:0B:A6:6A:B4:61:05:5C:67:5A:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E58ABDACDA011EFAF1E18B1762E951A.roa
Signing time: Wed 08 Jan 2025 09:09:47 +0000
ROA not before: Wed 08 Jan 2025 09:09:43 +0000
ROA not after: Mon 13 Dec 2027 09:09:43 +0000
asID: 17561
IP address blocks: 156.253.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65743 (0x100cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:09:43 2025 GMT
Not After : Dec 13 09:09:43 2027 GMT
Subject: CN=677e40da-82d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:46:55:b8:43:56:04:c5:75:09:7b:81:45:
d8:a5:d7:93:78:b7:8e:78:05:f9:41:d8:9f:82:63:
ab:85:83:ba:1d:46:bd:6d:70:43:2e:ff:27:ec:06:
8f:14:63:0c:3c:eb:34:72:7b:8f:20:31:25:1c:83:
04:66:3f:69:b0:64:0f:bc:1c:f2:b0:ea:c6:3b:e9:
25:a6:e1:11:73:88:7b:be:48:1a:01:85:00:f6:ad:
92:8b:19:02:27:89:8c:2f:6a:c3:3e:52:10:3f:d3:
eb:3d:ea:82:ff:12:2a:30:69:31:dc:33:0d:05:58:
ba:7b:f3:aa:ee:78:b5:45:bc:2b:0f:bf:88:03:37:
c6:54:bb:28:63:a1:29:ca:33:29:af:c3:ce:b5:8f:
93:80:61:2e:4e:6a:ad:78:45:ab:76:d7:6b:db:c2:
7e:d8:93:dc:9c:9c:73:c4:d9:07:53:d2:7c:f7:13:
1d:10:f8:49:21:2f:23:42:fd:8c:b4:f4:44:30:1d:
36:a6:82:6a:7c:d7:b4:f8:fd:4c:76:ec:03:41:bd:
94:b0:c8:d8:0d:27:68:4b:a6:7a:b0:59:1e:89:6e:
48:24:61:22:07:bc:50:bc:26:48:97:6f:81:dd:d4:
71:36:94:e3:9d:93:9d:d5:df:ec:c2:44:c6:a2:f0:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:67:C9:60:E6:16:49:92:9C:2D:0B:A6:6A:B4:61:05:5C:67:5A:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E58ABDACDA011EFAF1E18B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.36.0/24
Signature Algorithm: sha256WithRSAEncryption
69:71:4d:eb:ac:ce:e5:22:81:67:45:50:f5:63:6d:e5:6c:cf:
0d:ed:ff:c3:50:f5:16:ee:4f:e2:d4:45:47:11:50:0d:cf:df:
39:67:0e:39:02:a9:8b:e8:46:c9:69:38:91:12:8b:da:1b:8b:
38:7e:aa:c5:3c:22:9a:52:5d:76:de:53:fc:ed:38:a4:e4:59:
7a:27:b2:25:30:26:cc:e7:ea:86:6e:0c:4b:26:26:b3:45:b3:
2f:5e:dd:86:60:66:44:24:91:07:f4:d9:18:25:06:12:09:58:
7b:81:40:60:9a:94:bf:40:f7:2f:8c:7f:2b:1d:47:bb:f9:4e:
e4:0d:e5:58:67:6f:ca:03:bc:e2:7d:bf:cd:a3:55:b8:21:5b:
f6:82:63:9f:9c:a5:35:85:07:c6:f8:ef:95:43:b8:9b:04:e8:
36:35:f0:09:1e:d6:3c:e5:66:b8:19:79:d5:6f:9d:1f:16:f8:
26:fe:11:f7:1f:24:12:d6:ce:7f:23:69:3c:6f:ef:74:1c:48:
ba:42:e6:b5:70:52:f5:4a:39:97:e8:d5:dd:e4:bc:40:73:3f:
41:c1:0a:06:ed:7d:cb:c5:4d:13:ab:88:cd:b3:64:09:82:35:
a4:dc:00:15:95:e9:79:fd:90:c8:73:d4:c0:24:ca:1b:cd:18:
62:c2:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:17 2025 by rpki-client