Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64EBCC84CCC311EFB78B2DAA762E951A.roa
File: 64EBCC84CCC311EFB78B2DAA762E951A.roa (raw, json)
Hash identifier: nUjSjlqYvdz4Eu8FkY1WlY3WZN0E1Jyp77yyC64uh8U=
Subject key identifier: 28:87:F7:62:2A:D5:C0:77:ED:C8:6B:D9:FC:79:00:DA:59:B1:FF:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64EBCC84CCC311EFB78B2DAA762E951A.roa
Signing time: Tue 07 Jan 2025 06:48:26 +0000
ROA not before: Tue 07 Jan 2025 06:48:22 +0000
ROA not after: Mon 13 Dec 2027 06:48:22 +0000
asID: 17561
IP address blocks: 156.233.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64064 (0xfa40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 06:48:22 2025 GMT
Not After : Dec 13 06:48:22 2027 GMT
Subject: CN=677cce39-6733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:82:72:3f:5c:7e:6b:d4:36:bd:30:4c:1b:ad:
b5:f9:1e:29:7b:5a:19:98:a2:0a:d7:71:9c:f7:a3:
59:d9:8f:37:65:38:4f:74:4f:dd:38:05:c0:46:78:
4f:31:59:81:e1:16:2f:0b:a5:11:c5:96:b0:e1:41:
09:89:bf:b4:8a:10:9f:69:a4:9f:19:6f:3f:12:00:
31:93:aa:68:b4:b8:53:30:89:59:73:5c:75:dd:f4:
7c:97:88:8c:e3:4c:48:d8:20:26:2c:c6:90:f3:9e:
fa:a1:8f:eb:e0:fa:9b:c5:6a:91:f0:31:a5:0f:3a:
05:bb:87:e2:97:38:a0:df:0d:d4:f6:64:b3:e8:9c:
b8:7c:24:c6:b3:a1:e9:cb:1f:d9:4a:b1:f4:f8:92:
1f:c3:3a:8a:5f:7c:78:35:79:50:c9:9d:bf:d6:c1:
fa:f4:db:6c:58:1b:c5:d5:7c:b7:4f:e0:cb:09:96:
1f:88:95:9c:39:28:7c:e0:78:a0:3c:a1:d6:2b:13:
58:b0:fb:6b:b1:6f:d3:25:79:1c:f8:42:fa:89:2e:
96:bb:80:52:7c:9c:49:bb:ca:da:70:28:f3:5a:1a:
31:86:35:09:c7:5b:f8:c3:ac:1e:ac:5b:b7:4a:25:
73:33:95:7e:b5:81:8d:e2:37:4e:fe:4e:b5:46:2f:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:87:F7:62:2A:D5:C0:77:ED:C8:6B:D9:FC:79:00:DA:59:B1:FF:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64EBCC84CCC311EFB78B2DAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.51.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ac:95:89:7c:4e:43:f1:e1:95:27:cc:22:2a:d9:20:9d:6c:
ad:1d:75:e5:13:ee:e0:ec:36:3c:0b:cd:ab:f5:2c:bd:ee:0e:
bf:ab:de:1b:56:03:da:8c:ff:f0:ce:85:f4:00:53:5f:e9:19:
f8:df:b7:5f:2e:fa:d9:0f:f2:f8:dc:c1:9d:15:63:61:d4:5f:
27:e5:a7:08:e1:b8:ba:91:49:b2:7f:0f:e4:ac:b9:b9:e3:8c:
b5:d7:c7:fc:6f:51:f6:a9:2d:36:ce:95:49:17:19:dc:bb:8f:
a7:fc:f2:b7:31:04:2d:da:49:cb:cf:05:59:69:64:37:8d:bf:
ed:7d:e3:ae:31:1e:6f:06:bf:5f:0b:7b:c0:a3:98:fb:9a:9a:
a9:98:03:d1:d9:ad:66:16:0c:7e:70:bc:89:5b:f6:e3:c8:5d:
58:76:c5:a4:86:39:37:fe:93:8a:bc:53:47:74:7b:88:77:a3:
87:42:bd:4c:0c:29:89:08:79:f8:78:e7:1b:63:45:58:29:69:
1f:35:e2:76:b6:2b:72:ee:e7:cc:60:fa:3a:dc:97:44:92:b7:
01:07:b2:1f:55:0f:e2:ec:ca:ad:90:52:c9:d0:e9:77:a9:27:
d1:e4:8a:30:ec:a2:48:cb:75:d8:fd:27:a3:29:a5:70:09:02:
1b:5f:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:48 2025 by rpki-client