Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56968C74CCFE11EFB01A1E9F762E951A.roa
File: 56968C74CCFE11EFB01A1E9F762E951A.roa (raw, json)
Hash identifier: g3B7/Qv1pM3xHDBcFKWdlUBGS8bFUGpzOS5zHGbncBQ=
Subject key identifier: E4:48:D8:B2:D9:EF:B9:B0:DF:7B:49:1A:57:00:EA:A7:3A:0A:33:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56968C74CCFE11EFB01A1E9F762E951A.roa
Signing time: Tue 07 Jan 2025 13:50:22 +0000
ROA not before: Tue 07 Jan 2025 13:50:18 +0000
ROA not after: Sat 13 Dec 2025 13:50:18 +0000
asID: 984
IP address blocks: 156.238.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64603 (0xfc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 13:50:18 2025 GMT
Not After : Dec 13 13:50:18 2025 GMT
Subject: CN=677d311e-7f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:1d:30:ea:65:9e:26:67:52:15:cf:ec:20:
cc:51:61:7e:f6:22:99:74:d3:e5:cc:33:2b:40:86:
fa:5a:7d:24:63:d5:99:5d:a6:f8:7d:96:32:d0:17:
85:14:98:b7:62:3b:11:4e:3c:bd:1f:71:de:f3:d1:
fd:0f:81:de:34:8e:ef:0d:9a:19:6b:3b:20:5b:49:
53:a4:8f:8f:fc:a1:a4:7b:83:8b:ce:6f:1f:b3:dd:
01:42:d7:ed:6e:2e:4f:3d:bf:02:02:f4:b2:8b:ad:
65:1d:81:ae:1c:ec:de:f1:33:c4:c1:c8:ac:12:e0:
b2:ba:02:74:8d:fe:94:a4:8d:1e:24:56:78:fe:bc:
d4:03:4b:ce:8c:ee:e8:bc:6c:26:37:16:8a:d5:5d:
ee:61:cd:82:c1:1f:f9:cc:98:2d:68:69:71:49:31:
5a:44:6d:82:51:f7:df:ef:ee:31:6c:b4:29:38:d8:
d0:36:82:90:83:c0:bc:40:ae:1c:8b:74:08:27:82:
72:40:dd:bb:be:f6:19:e1:1b:5f:f0:01:3f:9c:77:
cf:32:95:32:cf:ab:23:70:57:b5:92:2a:64:34:41:
84:34:b5:22:5d:85:50:13:ab:dd:76:b4:50:3c:78:
f3:25:cd:a7:47:fd:6b:9e:81:c6:39:87:d6:5a:68:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:48:D8:B2:D9:EF:B9:B0:DF:7B:49:1A:57:00:EA:A7:3A:0A:33:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56968C74CCFE11EFB01A1E9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3d:bc:7f:67:e5:fc:9f:f2:4c:b1:da:f3:b1:ae:7b:c2:2e:
d6:36:f3:07:fb:13:c9:64:18:f1:ab:ad:17:57:43:f5:c0:f4:
10:d9:84:c0:68:6c:63:ee:3b:bb:d6:17:3b:6d:83:f4:13:f4:
18:13:67:e4:7b:d3:77:fc:80:75:d9:77:ce:c9:d7:17:af:9b:
97:87:c4:22:5b:88:e4:96:e4:40:d1:6a:ac:07:fc:30:88:d1:
86:a9:a1:34:0d:41:56:5a:bf:61:12:bf:91:69:bb:a7:8e:96:
a8:5d:13:48:28:e9:27:e1:db:ea:77:2a:f9:0d:79:1e:6f:26:
fe:e3:d8:b9:55:cf:7e:25:3a:cf:11:9f:88:12:f8:63:50:89:
a8:e3:74:0f:ac:51:cb:68:b7:80:f1:1a:30:01:b2:f2:a2:80:
79:fb:e8:5f:f3:34:a5:fb:ee:b6:9f:5a:a1:57:3d:e1:c1:6f:
66:a6:48:46:b1:8e:81:c9:0b:57:0a:95:ab:ac:f8:5a:fb:ab:
96:71:66:74:5a:fe:2d:c2:d2:05:64:c1:f6:d8:d2:ff:5e:e6:
92:60:ab:32:92:1a:81:38:7f:64:c2:56:f7:aa:b7:f3:2a:d0:
97:82:d7:8c:a4:c9:5e:a9:cc:6c:68:d1:f1:75:e2:9b:6b:8a:
18:61:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:23 2025 by rpki-client