Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55AD68FACDC611EFB4C447A0762E951A.roa
File: 55AD68FACDC611EFB4C447A0762E951A.roa (raw, json)
Hash identifier: 0hLSLczNrWbIuRydFtVzD+3bG2vIGLaUFGRtSxU0j20=
Subject key identifier: 84:AC:3E:C9:34:12:77:55:2E:58:48:5F:3F:82:BB:DF:9F:1C:B0:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01019D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55AD68FACDC611EFB4C447A0762E951A.roa
Signing time: Wed 08 Jan 2025 13:42:00 +0000
ROA not before: Wed 08 Jan 2025 13:41:56 +0000
ROA not after: Thu 16 Dec 2027 13:41:56 +0000
asID: 17561
IP address blocks: 156.249.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65949 (0x1019d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 13:41:56 2025 GMT
Not After : Dec 16 13:41:56 2027 GMT
Subject: CN=677e80a8-08e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:76:15:df:17:39:94:06:63:02:a0:2a:0d:81:
d7:2e:ee:f2:eb:ca:c1:f0:83:28:ed:69:23:c6:72:
02:ba:60:d3:65:0e:59:d2:90:64:b6:cc:0d:26:2e:
30:b0:85:1e:a9:e7:0c:c6:0e:2b:2e:75:c8:fb:a2:
49:8a:61:3a:23:50:c4:8f:44:78:d2:dc:64:56:e1:
84:2e:99:dc:06:38:c0:a8:cb:f7:b1:2a:62:da:8a:
f4:c3:8d:5c:86:07:2c:35:3b:56:8f:99:ec:e4:5d:
a7:bd:76:89:56:21:26:a5:15:2e:45:c0:f5:97:ee:
ca:e5:99:8c:8c:63:f2:d6:6f:d7:db:35:d9:5d:cf:
88:24:2d:8e:de:5e:57:dc:33:2a:c9:14:1a:e3:ff:
49:ea:59:75:72:ee:82:3a:66:ca:3d:0b:39:e5:01:
6d:4c:84:fd:93:b9:43:aa:0b:7a:e5:0a:e2:02:0f:
ea:67:7a:ff:c1:9a:79:84:c8:46:59:06:da:d3:35:
c3:18:e5:36:5a:53:93:93:03:ab:21:9b:e7:23:95:
57:34:ae:d9:49:6e:f8:01:00:b8:88:27:a9:03:e9:
62:d1:1c:f2:53:2c:72:64:fa:23:80:b6:de:de:08:
98:6d:f9:cc:45:cf:13:7e:81:e9:15:e4:e7:4f:1a:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AC:3E:C9:34:12:77:55:2E:58:48:5F:3F:82:BB:DF:9F:1C:B0:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55AD68FACDC611EFB4C447A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.3.0/24
Signature Algorithm: sha256WithRSAEncryption
26:4b:68:5f:1d:01:3c:77:c2:f1:28:ef:8c:46:13:45:6e:0b:
e5:21:b1:29:63:8d:0e:d8:6d:36:31:3a:51:bb:93:8f:a4:e6:
86:9d:3c:6d:43:d3:05:0f:a8:ce:08:4c:a6:9d:8f:89:0e:2b:
4d:58:06:a8:77:e4:ee:33:8d:34:6b:2b:a7:f7:33:b4:b5:ea:
ee:7b:0f:11:e3:0d:8e:f8:ec:8a:86:84:43:cc:a3:38:5c:c7:
d5:0d:1a:25:4e:a1:75:31:9d:8e:66:e7:b4:c2:72:7c:f1:ae:
20:22:a3:86:f9:fb:95:c4:d4:d7:60:b8:64:0b:b7:fe:06:15:
1c:60:a2:8e:8e:3d:bd:f8:62:e9:11:83:55:96:97:59:b4:b8:
73:64:ae:a0:ce:cb:b8:00:b5:9d:d2:3b:4b:fb:79:86:a0:4d:
5b:56:97:c1:4d:b7:8a:91:f1:50:f5:50:19:f9:37:17:60:6a:
cb:fc:9b:41:30:5b:43:60:07:d1:60:67:19:35:7b:93:6a:69:
47:03:69:14:9f:0a:2a:ee:1c:dd:59:a4:d9:82:da:fa:f4:38:
d4:c6:b4:05:31:20:ad:22:5b:ce:0a:44:aa:33:37:05:5b:4a:
c1:97:27:2d:c4:b8:51:c2:f3:59:03:2b:5e:4b:64:89:0a:14:
26:93:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:45 2025 by rpki-client