Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70B505EECE3F11EF8046A0AD762E951A.roa
File: 70B505EECE3F11EF8046A0AD762E951A.roa (raw, json)
Hash identifier: v0BOsnT0rj7DmTcQKEJgpcFXmdqx2r+/RigAdujxyak=
Subject key identifier: F0:98:14:48:E5:DC:BC:58:22:D6:B5:DE:7D:05:07:3E:D2:21:D0:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010265
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70B505EECE3F11EF8046A0AD762E951A.roa
Signing time: Thu 09 Jan 2025 04:08:54 +0000
ROA not before: Thu 09 Jan 2025 04:08:50 +0000
ROA not after: Fri 09 Jan 2026 04:08:50 +0000
asID: 17561
IP address blocks: 156.245.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66149 (0x10265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 04:08:50 2025 GMT
Not After : Jan 9 04:08:50 2026 GMT
Subject: CN=677f4bd6-1c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:75:c2:05:41:c3:ac:b6:70:1d:30:8f:20:
e4:94:7b:8e:93:61:fd:6f:b0:69:65:06:8e:a0:87:
9e:f3:ea:56:10:81:55:7b:cc:a7:50:55:8d:7e:28:
fb:13:21:78:20:50:d9:09:a3:fb:11:7a:ba:ba:ff:
5f:f7:9b:05:0c:bd:ea:45:b3:4f:0c:02:8a:d5:ab:
e3:14:95:5b:3c:80:bf:c5:f8:68:69:a7:35:43:65:
54:41:ca:f9:c4:7d:2c:87:a3:a5:22:34:bd:a6:a9:
82:ba:ee:54:08:35:94:37:0f:e8:b5:46:59:d3:3e:
45:12:ac:62:b5:d7:48:ef:c0:42:0d:dd:fe:da:b0:
a4:7b:8e:81:39:65:5a:95:0a:bf:8b:59:33:4e:e8:
09:49:95:76:ed:63:6f:7b:d1:66:32:66:b2:05:1c:
6b:5f:7f:dc:03:f4:42:62:64:4e:91:1f:c8:53:7a:
81:b1:ae:62:91:83:be:1c:da:1c:7f:90:11:f7:8b:
20:ee:fc:9c:88:12:35:52:00:5a:6f:3d:46:cf:e7:
f7:dc:9b:f6:80:44:b7:75:a2:06:d5:3b:d7:31:8e:
e6:70:ee:98:d7:01:c9:cf:e3:b0:7f:99:3a:48:f1:
1e:c4:04:b5:d7:4b:41:b5:af:0c:93:73:41:20:34:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:98:14:48:E5:DC:BC:58:22:D6:B5:DE:7D:05:07:3E:D2:21:D0:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70B505EECE3F11EF8046A0AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.102.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6c:58:ba:e7:d6:46:0c:ca:d0:72:2a:fe:df:0e:2d:c2:a2:
07:08:34:a7:c6:ae:13:75:6b:ef:ef:65:c5:8f:bc:5c:d1:21:
c8:df:89:00:3d:63:1a:84:f0:52:05:c6:ca:33:20:f1:c2:56:
96:f1:aa:42:f7:72:b5:ee:a8:d3:6c:35:f7:e6:26:17:34:dd:
be:32:79:c0:89:e4:af:cf:32:88:ce:90:ba:c3:c6:5f:3f:ea:
69:71:40:cc:54:24:3e:37:87:29:a4:56:e5:0b:9c:9d:04:8b:
11:9c:71:f3:07:12:5d:34:eb:e5:84:bf:12:f0:5f:ae:87:c0:
c0:58:0b:69:a9:13:78:d4:ab:6e:03:38:77:45:27:06:ab:df:
b2:2c:da:cc:e5:0c:0e:6d:e3:72:94:54:f8:a2:c8:9f:7e:59:
d1:8a:e5:4f:97:23:24:69:1b:03:aa:b0:45:3b:eb:a4:e4:31:
10:79:01:e7:6c:ca:d9:a1:dc:e7:db:6a:64:66:c4:f8:94:c9:
a3:fc:80:f2:37:fa:03:c6:8c:b1:49:3d:d9:14:b4:f8:fe:2e:
e4:b8:95:87:4f:9c:7e:7d:62:5d:83:dc:a0:40:fe:bf:35:3b:
bf:80:44:b0:e9:40:5c:53:41:1c:a7:80:8e:e8:7e:38:51:33:
9d:46:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:54 2025 by rpki-client