Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/516FA5FECCFF11EFA9E4AEA3762E951A.roa
File: 516FA5FECCFF11EFA9E4AEA3762E951A.roa (raw, json)
Hash identifier: COMrefyVRG3oemT5N+j7VBh+H9NZlFJQzCDRxSPy38c=
Subject key identifier: B7:AA:A0:CE:CD:B7:07:14:27:4E:26:DD:97:D7:5A:31:25:1D:46:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/516FA5FECCFF11EFA9E4AEA3762E951A.roa
Signing time: Tue 07 Jan 2025 13:57:23 +0000
ROA not before: Tue 07 Jan 2025 13:57:19 +0000
ROA not after: Sat 13 Dec 2025 13:57:19 +0000
asID: 984
IP address blocks: 156.238.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64611 (0xfc63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 13:57:19 2025 GMT
Not After : Dec 13 13:57:19 2025 GMT
Subject: CN=677d32c3-4ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:02:0f:0c:ff:f4:3f:c0:8c:d5:d1:06:b7:
be:36:fd:5f:d4:bd:78:5f:6b:72:3e:5f:59:76:03:
44:73:f5:3d:93:0e:44:67:ea:24:4e:80:61:14:ec:
ce:58:6c:e1:b7:0a:9a:29:22:ba:b3:5f:d2:9c:6a:
6e:ec:ae:eb:1d:b9:ba:7b:d4:e6:d8:a4:c4:c7:20:
4c:2c:fa:f6:b3:be:c7:1f:d3:24:a4:80:bb:3e:be:
8d:75:78:1d:16:1b:c2:2d:66:b8:94:d9:c3:b0:66:
23:2d:88:7d:fa:87:91:10:10:95:c0:4e:1a:2a:04:
b2:6f:ad:dc:6e:80:60:fa:ce:c2:be:84:8d:c2:06:
3a:da:63:d3:83:bf:e9:12:42:86:97:ea:9f:af:6e:
45:16:17:c4:a6:09:ca:e4:82:47:85:01:b3:3f:16:
c2:21:bc:7e:89:18:81:84:3f:61:3c:3b:e1:d8:2c:
b2:89:9f:e7:81:99:b4:62:f6:2a:77:f1:b7:cc:a8:
d5:d6:15:1f:cc:a5:ea:40:a7:7c:42:c4:d3:ce:8c:
df:83:57:36:ce:dd:65:21:4b:eb:74:6e:ee:25:26:
ea:a8:28:61:cc:04:a8:87:b9:b5:85:d7:63:53:d8:
0e:dd:4d:2f:9a:a0:ed:f8:c9:99:53:db:da:da:59:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AA:A0:CE:CD:B7:07:14:27:4E:26:DD:97:D7:5A:31:25:1D:46:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/516FA5FECCFF11EFA9E4AEA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:85:20:9a:1e:c2:16:6d:b6:e7:70:79:66:35:c1:54:c6:92:
4b:69:d0:b5:3d:e5:7d:62:1c:d7:71:60:50:00:12:2a:5a:2f:
27:f2:df:3a:c6:09:5c:9e:69:a8:7a:f1:ef:f0:40:46:8e:45:
d5:86:cf:01:6f:88:96:5f:81:76:93:69:1f:eb:8c:ad:96:da:
8a:96:64:78:b9:1c:81:a1:78:d7:20:0f:32:e8:13:0e:fb:6b:
07:8d:cd:8e:a5:4f:6e:e8:5e:e4:66:a0:8c:a8:f0:24:1f:66:
74:00:bb:88:f1:23:6b:7f:1b:48:09:dd:aa:7a:08:70:79:3f:
90:19:62:b1:9f:55:1d:ab:4c:96:4f:f7:56:cf:ed:c8:4a:8e:
47:65:78:c5:ce:29:ed:48:4d:7f:32:75:8a:fd:c6:7b:0c:a4:
fd:83:3b:cf:75:df:44:b3:87:4a:ca:0b:81:f7:95:49:1d:7e:
00:d0:8b:30:9d:ba:1b:dc:65:d9:ee:c0:60:91:37:04:a3:4b:
58:ce:9e:4e:5b:f0:25:1c:22:9a:48:a1:ab:ce:36:83:76:39:
26:9b:54:74:5c:8b:7f:87:b8:4d:4d:d2:29:89:26:54:ca:58:
90:9b:12:20:a5:4b:c0:de:c7:22:c7:a4:c5:ab:bc:fa:49:9e:
f9:27:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:15 2025 by rpki-client