Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B3CAF60C33F11EFA9DED8B1762E951A.roa
File: 5B3CAF60C33F11EFA9DED8B1762E951A.roa (raw, json)
Hash identifier: gpeGnUehFiAiASp88UZga3iCAHFlZWTkJlMiTq8UNhg=
Subject key identifier: 72:57:9E:47:CC:97:8F:37:B0:39:24:2F:42:6F:22:56:76:57:6E:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EBB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B3CAF60C33F11EFA9DED8B1762E951A.roa
Signing time: Thu 26 Dec 2024 04:10:35 +0000
ROA not before: Thu 26 Dec 2024 04:10:32 +0000
ROA not after: Wed 10 Dec 2025 04:10:32 +0000
asID: 984
IP address blocks: 156.244.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60343 (0xebb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 04:10:32 2024 GMT
Not After : Dec 10 04:10:32 2025 GMT
Subject: CN=676cd73b-eb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:48:46:bf:23:8a:12:7c:0f:8d:8a:cc:8d:
af:aa:20:e8:d3:2b:9b:c5:19:56:ee:e9:c2:a9:3f:
90:e0:16:aa:07:2c:1d:e6:25:9e:01:9e:32:52:fc:
86:84:b3:a8:7a:e8:4d:0b:1d:a2:22:b4:a7:75:67:
a5:0c:28:3e:43:d2:c6:aa:c8:df:67:4d:dd:02:41:
d0:5d:b5:89:e8:cf:32:56:27:1f:f6:05:bf:aa:bc:
59:c6:35:df:06:5f:54:bb:52:e4:1e:d2:25:24:3a:
59:4b:20:19:8f:71:66:70:ac:00:f5:2c:73:9a:b8:
65:0d:9b:b7:cc:05:11:97:30:2b:40:88:c6:2c:6c:
5c:6c:3e:a7:c3:9b:64:4c:e5:8a:2e:1c:b0:d5:24:
0e:cc:b1:20:ab:ac:da:d5:88:2d:05:96:e5:fc:2a:
37:0d:1d:38:7d:2f:5e:bc:00:7f:50:e3:cd:6e:d3:
85:f6:3c:8b:4e:95:31:be:bb:eb:65:41:06:fd:c5:
c6:98:da:ba:31:10:31:ba:2f:7e:5a:e2:65:6e:08:
a7:16:99:93:54:ee:53:e9:b5:f3:96:1f:d8:56:8a:
ff:a8:64:f4:fb:23:7b:8a:3a:eb:96:46:b5:29:a8:
ea:54:2c:3b:a6:18:da:6c:ad:6b:e0:65:dd:c5:c3:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:57:9E:47:CC:97:8F:37:B0:39:24:2F:42:6F:22:56:76:57:6E:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B3CAF60C33F11EFA9DED8B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c0:1a:25:a0:37:bb:49:00:e7:c6:8d:70:97:7c:2f:2f:fe:
7f:fd:a4:f4:6b:fa:86:7b:6b:4e:d4:7d:27:f5:8d:33:85:4a:
c4:e3:89:be:5c:ee:ad:4c:dd:f7:28:74:ba:a0:d0:8b:72:8d:
c0:5f:1d:28:96:77:bb:4b:72:69:92:18:14:71:dd:46:73:93:
c0:50:e3:89:fa:79:ef:83:15:71:21:16:93:de:3e:d4:59:ce:
19:70:a0:ff:15:8d:da:7d:cd:1c:73:64:47:87:12:30:74:fd:
3c:49:e4:70:31:09:73:50:a9:0d:69:a9:aa:7e:47:2a:18:1f:
71:69:58:38:e9:7b:c0:35:19:fb:ec:0e:21:90:87:6e:5d:88:
e7:4e:d3:b0:06:2c:1c:9d:7b:92:db:ac:34:40:3a:fd:15:e2:
04:3b:27:41:7f:ef:c8:22:5f:6e:04:36:d5:43:9a:50:a0:e9:
52:3c:f5:85:96:60:b4:d1:ec:77:5b:7e:3b:c5:d0:fa:16:96:
18:5a:62:3c:19:34:d2:61:5f:a4:e6:24:e9:ce:ec:50:2d:a3:
ed:08:08:4a:54:62:df:c0:b7:c1:87:b5:9d:b6:a5:50:fa:fd:
da:a8:d3:b1:f9:4e:e7:84:fc:f9:fb:3e:b7:05:20:ef:01:9e:
a9:55:07:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:35 2025 by rpki-client