Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53A302ACCD6911EFA720BD4F762E951A.roa
File: 53A302ACCD6911EFA720BD4F762E951A.roa (raw, json)
Hash identifier: FFVseIxYdwcm/ZjUnyZkIWEwqutHmSEctCkY9aPxvJI=
Subject key identifier: 52:F3:ED:C4:F1:DD:8C:2E:DD:4E:20:BF:41:42:97:AB:3B:DC:28:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53A302ACCD6911EFA720BD4F762E951A.roa
Signing time: Wed 08 Jan 2025 02:36:13 +0000
ROA not before: Wed 08 Jan 2025 02:36:09 +0000
ROA not after: Sat 13 Dec 2025 02:36:09 +0000
asID: 984
IP address blocks: 156.247.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65369 (0xff59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 02:36:09 2025 GMT
Not After : Dec 13 02:36:09 2025 GMT
Subject: CN=677de49d-0e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:38:58:15:6d:c1:5d:a4:b2:7b:17:e8:19:
4b:0b:06:50:4d:89:60:05:00:bd:c0:01:d7:1c:33:
f9:3b:25:ac:78:04:87:cb:27:69:30:97:01:7a:b1:
ad:a3:39:cc:ad:fe:72:5c:aa:24:f3:23:72:27:73:
2b:0d:e3:dc:9e:38:89:61:5e:20:1c:0b:9b:90:01:
fc:c3:c2:15:09:1d:be:16:4a:15:e3:69:92:bd:c5:
12:03:9c:65:9d:0e:13:27:18:a0:49:2b:a5:cd:41:
08:9d:85:c7:89:56:d2:b5:8b:1f:38:77:b9:ea:71:
62:ff:a0:97:b3:e7:c8:05:a5:31:ee:3d:1f:08:24:
b4:0b:e8:31:a9:c0:ff:46:1a:3a:32:41:96:48:a9:
bb:68:d9:c7:cc:5d:5f:93:b2:30:77:c2:59:fd:fc:
60:dd:ca:92:00:47:e7:ea:fa:80:6b:00:57:8a:95:
b0:e1:eb:70:11:0e:6e:ce:0a:13:7e:70:b1:71:ef:
94:39:06:d9:a0:9b:89:f0:7a:78:c9:21:e8:82:f1:
7d:56:1d:cb:55:ca:5b:be:9f:85:82:1b:43:0f:e7:
69:59:4c:04:14:54:a8:66:5b:40:8f:69:59:62:0a:
94:ce:11:c5:11:77:a5:23:60:b7:29:06:68:46:2f:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F3:ED:C4:F1:DD:8C:2E:DD:4E:20:BF:41:42:97:AB:3B:DC:28:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53A302ACCD6911EFA720BD4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:46:e0:0e:c1:6b:e7:51:91:9d:d3:c2:56:6f:2e:98:ff:4d:
a2:10:ba:c4:01:5c:a8:85:b7:c3:dc:85:95:62:1d:16:a0:9a:
08:db:ba:93:0c:ae:d4:53:9d:f2:16:54:9a:0d:96:38:22:32:
66:a9:87:62:4d:73:1f:c3:77:15:b8:d8:61:5d:2a:65:d0:e4:
fe:e8:66:a8:05:ad:70:c0:f0:75:af:ad:68:c9:5e:90:da:37:
2a:bf:71:f2:e2:17:e9:a9:39:85:8a:36:a4:92:3c:04:d1:9d:
6a:85:61:7f:a1:88:65:ae:92:49:ab:cd:11:c2:13:b9:47:f6:
6f:bb:17:09:ad:ee:d0:7d:77:06:87:1b:dc:78:59:24:b2:15:
6b:11:db:cf:57:ad:1c:06:ae:ca:37:fd:0f:3b:ae:64:63:29:
44:a7:3c:d9:94:c8:26:9b:98:69:9a:e7:0a:90:f9:12:a3:4c:
25:7c:af:d8:92:61:df:c3:0a:2f:96:0a:e5:1b:86:fd:bd:2a:
f3:cb:af:3a:a5:47:8b:0c:66:1a:50:4a:5e:c2:e1:3c:a2:11:
a4:19:45:12:29:78:90:ba:c5:c1:0e:69:59:96:38:be:09:cf:
77:19:7d:1a:75:29:e4:9e:a8:c1:48:00:e5:d6:b1:7a:7a:ed:
af:92:30:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:35 2025 by rpki-client