Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53F303D2D17F11EFB3D34DBB762E951A.roa
File: 53F303D2D17F11EFB3D34DBB762E951A.roa (raw, json)
Hash identifier: rCR7bP1cAVsCCpzrTK0i+iN2ItpmQFbtNLyJxdq+rI8=
Subject key identifier: 7C:50:BF:62:68:6F:AE:D7:6F:A7:F4:BB:E2:9C:8C:C6:E4:1B:58:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010692
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53F303D2D17F11EFB3D34DBB762E951A.roa
Signing time: Mon 13 Jan 2025 07:23:47 +0000
ROA not before: Mon 13 Jan 2025 07:23:43 +0000
ROA not after: Thu 20 Feb 2025 07:23:43 +0000
asID: 60223
IP address blocks: 156.253.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67218 (0x10692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 07:23:43 2025 GMT
Not After : Feb 20 07:23:43 2025 GMT
Subject: CN=6784bf83-8229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:7c:82:08:5b:48:5b:d1:32:39:e8:ac:c9:
ca:48:fd:94:a6:4b:9b:e9:7f:3a:69:e1:a0:fc:65:
94:2d:b3:1d:ff:d3:79:c2:a0:f9:b3:84:82:a4:92:
35:d5:76:a4:13:d0:9d:07:6b:2d:d5:fa:ea:fc:30:
b2:e2:d6:b7:02:72:b0:03:dd:3f:ea:1a:60:61:36:
88:09:94:03:04:9e:13:db:81:08:b7:d9:a6:43:7f:
b6:a5:13:8e:94:44:80:65:3c:5a:17:f0:50:8e:37:
8f:69:4d:e0:8c:aa:5c:77:68:4a:40:2b:e1:7c:30:
a5:6f:1d:bc:f0:53:b2:1b:ed:9d:76:79:fc:e4:53:
81:eb:f1:50:5c:db:82:7c:46:8b:eb:a1:c9:6f:57:
c6:a3:ca:bd:02:d6:8e:6e:60:a2:d1:90:94:28:2b:
64:08:c3:3d:32:14:d3:e1:b8:27:84:60:96:e3:5d:
f2:40:6d:dc:03:43:d6:3f:e8:8c:89:29:86:35:bc:
81:82:a8:d7:16:8e:f1:c7:ac:cd:c7:7b:5c:36:d8:
ca:21:7e:70:80:ae:c7:54:88:db:b6:1c:13:41:9d:
4c:64:b9:79:da:52:59:c8:49:55:02:11:38:7c:83:
d0:24:07:17:dd:04:b2:8c:58:21:65:50:33:58:cc:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:50:BF:62:68:6F:AE:D7:6F:A7:F4:BB:E2:9C:8C:C6:E4:1B:58:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53F303D2D17F11EFB3D34DBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.219.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:4c:d0:8b:60:fe:79:a1:4d:a0:02:f8:ff:95:b7:ec:52:ab:
b2:ff:97:fd:1e:0e:34:4d:57:c8:44:31:c6:9e:5c:dc:62:b2:
94:1b:81:ab:b5:c1:78:c7:ca:55:d3:f4:dd:8d:be:b5:f6:0e:
0e:80:40:c7:a1:38:74:88:80:35:95:cf:2f:1c:76:5b:5b:eb:
ea:5b:2d:8f:d8:76:b3:fa:08:7e:c8:74:b1:19:bb:b7:4d:c9:
60:60:0f:fc:cf:21:fc:a0:21:ad:4a:66:2a:b0:6e:f3:dc:29:
56:8c:8f:02:d1:3c:f1:0d:76:a4:f8:b7:18:95:ad:00:8e:77:
32:58:e9:4b:6c:eb:ec:a8:8e:33:3a:94:91:f5:d1:52:34:35:
27:6f:17:a3:f1:99:4f:5a:13:a1:72:01:07:38:d2:5e:23:05:
23:37:f8:33:b3:f8:81:c5:aa:2f:77:78:93:81:0b:32:2b:c5:
93:e4:4a:4d:12:31:ac:55:14:0d:86:43:e8:78:99:fa:1a:80:
04:34:dc:af:17:aa:26:9a:ae:0b:38:1f:34:ba:93:cc:25:f9:
54:92:03:af:f3:9a:c9:c3:11:e7:df:95:6f:24:16:d7:9d:f8:
6e:39:5f:d1:70:03:74:ac:69:d9:3e:34:2a:93:bb:79:8b:6f:
fd:b8:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:05 2025 by rpki-client