Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/693DEA64D24B11EF8FF97B4B762E951A.roa
File: 693DEA64D24B11EF8FF97B4B762E951A.roa (raw, json)
Hash identifier: 1C5DHmc2bfZUUX/QI0H3SsDQpkaA6akoGWTDMEHM2uo=
Subject key identifier: CC:24:41:26:91:03:F0:AA:C9:37:6D:6F:58:47:82:31:2A:03:DF:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/693DEA64D24B11EF8FF97B4B762E951A.roa
Signing time: Tue 14 Jan 2025 07:44:40 +0000
ROA not before: Tue 14 Jan 2025 07:44:37 +0000
ROA not after: Sun 11 Jan 2026 07:44:37 +0000
asID: 151206
IP address blocks: 156.240.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67316 (0x106f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 07:44:37 2025 GMT
Not After : Jan 11 07:44:37 2026 GMT
Subject: CN=678615e8-fcb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:a9:82:13:8d:0e:61:3d:ef:35:65:4b:8d:
d9:b1:0f:27:f1:03:86:4b:9c:b7:31:3e:c2:6f:94:
05:99:11:71:eb:6d:45:f8:07:89:8c:82:a5:ea:98:
22:ea:eb:d6:ef:33:52:21:5f:8f:39:62:1c:70:8b:
09:4c:15:50:82:f5:8c:10:4c:01:6c:c8:58:77:00:
78:cb:33:86:ae:09:b4:06:27:02:38:13:d6:7c:c1:
96:4a:f4:70:1a:e3:39:30:ef:24:05:47:c5:1e:76:
92:ea:cc:4b:7b:c2:e3:1d:f7:54:a3:bd:36:05:7a:
fc:25:40:54:5a:ce:e7:be:aa:ae:37:ec:31:9d:ed:
7c:54:aa:30:5b:de:ee:0a:6c:25:46:73:43:0e:27:
d1:b6:c8:a7:05:2c:65:35:a2:f1:4f:5c:aa:f0:73:
a7:2d:6c:ab:e4:59:f1:ab:5e:24:03:7a:4f:ed:b2:
6e:00:24:d9:10:25:4a:7c:4e:1b:39:6c:fa:33:13:
ea:e6:c5:21:ef:11:c7:88:44:fe:56:57:f5:6d:69:
ad:57:f4:f8:53:34:26:c6:7e:48:be:02:0c:bc:60:
68:27:ff:f2:7c:13:97:fd:c2:fa:25:ca:96:88:9a:
a7:bb:d0:ea:39:bc:85:8c:de:be:7b:c5:13:65:6e:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:24:41:26:91:03:F0:AA:C9:37:6D:6F:58:47:82:31:2A:03:DF:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/693DEA64D24B11EF8FF97B4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.73.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0c:8f:63:53:c0:22:59:d9:4a:80:c8:d9:b8:54:c1:af:ef:
d9:1b:16:b4:27:63:24:e1:5a:d0:4d:6d:76:42:77:f8:ca:f3:
13:0d:84:69:49:da:09:4c:ab:a5:5d:8b:3d:76:4e:2d:9e:86:
de:ca:ba:5f:40:b3:cf:a8:5c:fe:ff:69:1d:ee:70:05:97:d2:
9f:49:ef:c3:e9:91:f1:f6:dd:f5:0a:75:d2:7d:fa:ae:fe:7e:
cc:51:57:72:56:06:25:b0:72:f1:79:bf:4a:a6:f7:dd:ac:f1:
da:95:35:5b:af:96:f0:4c:47:36:31:f2:76:5a:b4:b7:29:32:
40:c7:d6:7b:d3:ee:3c:e5:24:9b:e5:f7:fb:0c:d9:ee:e7:f9:
d6:4f:29:c9:a0:7c:8a:6a:b4:e1:d3:5e:97:5b:87:33:18:e9:
ad:28:f3:27:85:1e:b5:1a:c7:79:0e:11:fa:d9:f6:01:12:0d:
7a:28:19:33:1c:f6:67:3f:01:60:e2:73:e4:52:72:04:5e:dc:
f9:e6:c5:5a:eb:aa:bd:7c:a9:6b:97:70:2c:bb:2f:79:de:d1:
1e:4b:53:0b:06:50:c2:5d:51:27:77:40:f8:4e:8f:ff:74:98:
f6:ae:3f:d3:77:54:ff:f9:38:30:02:95:2c:aa:08:87:c7:7d:
b4:e2:a7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:01 2025 by rpki-client