Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A23952CD4011EF9115BFBD762E951A.roa
File: 64A23952CD4011EF9115BFBD762E951A.roa (raw, json)
Hash identifier: YyHk/sNwmA0wgQP3xughkWJLD5sSZ1tuUcuoG8IybLw=
Subject key identifier: 48:C1:50:38:18:80:54:76:F7:2B:92:60:57:79:1D:A3:28:96:DC:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A23952CD4011EF9115BFBD762E951A.roa
Signing time: Tue 07 Jan 2025 21:43:12 +0000
ROA not before: Tue 07 Jan 2025 21:43:09 +0000
ROA not after: Sat 13 Dec 2025 21:43:09 +0000
asID: 984
IP address blocks: 156.243.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65131 (0xfe6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 21:43:09 2025 GMT
Not After : Dec 13 21:43:09 2025 GMT
Subject: CN=677d9ff0-e49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:19:c8:cc:12:bd:7e:cc:2d:3b:d4:34:73:
0b:77:2e:22:48:48:08:9b:a3:06:74:90:92:64:85:
c0:cb:e6:ed:93:41:df:41:a5:80:fd:e5:fb:d8:2f:
c9:22:55:32:66:38:63:83:65:21:0b:52:7d:0a:c2:
ab:63:7a:5e:4a:cb:31:60:0f:a8:81:be:b4:b4:04:
4b:20:ba:67:b7:a9:c6:77:30:7b:57:d7:6d:3f:45:
b6:7c:7b:5f:9a:2f:87:06:7c:92:23:48:2b:c4:ef:
ca:a8:d4:f2:e2:34:63:4b:aa:2c:c8:1d:7a:af:d8:
35:ea:7a:1f:b6:1f:a3:f6:de:29:c3:f5:00:fd:74:
74:e9:f3:53:f0:61:b4:cd:a4:07:6c:c7:07:ce:f4:
a3:ff:a3:e2:0e:c0:e2:b7:63:d8:d5:ab:ff:1e:41:
8f:2c:23:bc:6f:55:92:6d:55:59:bc:02:48:19:6a:
b9:73:9b:21:28:87:a5:bc:e8:8f:2f:95:2d:dd:09:
6f:3b:d3:90:48:a5:11:73:e3:49:f6:3c:ea:b8:63:
2f:fd:53:da:f4:6a:9e:eb:5c:a1:f9:66:3b:1e:58:
31:45:97:4f:fa:67:86:89:df:33:a5:9e:49:49:ee:
bb:1c:91:fd:b4:ce:f6:2b:b8:c9:c0:7a:a1:89:db:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C1:50:38:18:80:54:76:F7:2B:92:60:57:79:1D:A3:28:96:DC:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A23952CD4011EF9115BFBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8e:31:64:5f:e8:78:62:45:8c:c5:04:1b:ca:8e:5b:64:e9:
6b:14:b1:a9:f0:8c:1a:10:01:a3:d1:83:ab:75:24:b6:fb:7e:
cb:50:6d:8d:1d:97:42:3d:fb:16:0d:26:7d:9d:be:e2:ba:51:
e2:ee:75:e9:29:88:c9:93:ed:2f:97:e0:6a:c0:e1:5c:a5:0a:
af:95:91:e8:b5:83:f6:17:db:67:0f:78:cc:32:f6:e0:71:e5:
68:68:17:bb:4e:1a:31:6f:6f:ab:41:fd:15:77:b9:04:bf:af:
e4:65:b1:01:e0:d9:4e:aa:df:00:93:4a:a9:10:8b:6e:6f:a5:
0a:cd:00:31:1b:c9:63:d4:16:b1:eb:00:01:2a:82:73:28:c7:
f6:e4:bb:9c:47:80:d4:91:ff:ce:1d:49:60:ac:94:e5:65:1b:
02:7b:5e:5a:9a:09:f6:e0:62:cc:79:dc:85:f5:3e:c5:6f:96:
65:52:0c:87:d2:2b:75:b1:36:61:4e:ab:8b:5d:91:38:45:2a:
60:09:64:7c:4f:8c:02:64:5e:36:79:f0:c4:5e:2f:c6:38:3e:
15:8c:5c:49:51:f2:29:b6:9b:10:f6:17:57:a8:54:c0:99:3f:
6c:d7:fd:6d:32:ef:af:cf:ed:51:72:bd:d7:32:6d:a0:45:4e:
a5:66:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:00 2025 by rpki-client