Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70E17F5CCC9111EF8D1B5B59762E951A.roa
File: 70E17F5CCC9111EF8D1B5B59762E951A.roa (raw, json)
Hash identifier: yEiZ6qhcZcltdH+BAHyxkDQLm0KJzccOC/94HXrAUyo=
Subject key identifier: B3:25:FE:0E:8A:1D:05:1C:0B:E2:B5:4C:6C:8D:67:07:8D:05:57:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F90D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70E17F5CCC9111EF8D1B5B59762E951A.roa
Signing time: Tue 07 Jan 2025 00:50:51 +0000
ROA not before: Tue 07 Jan 2025 00:00:47 +0000
ROA not after: Mon 13 Dec 2027 00:00:47 +0000
asID: 17561
IP address blocks: 156.226.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63757 (0xf90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 00:00:47 2025 GMT
Not After : Dec 13 00:00:47 2027 GMT
Subject: CN=677c7a6b-e724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:75:48:5e:35:71:14:cb:27:cf:f8:65:ae:
2f:6e:9a:80:c3:ab:1f:78:ff:2a:5d:64:74:9e:b5:
55:79:53:54:22:29:75:f5:f2:85:0d:da:9a:85:57:
54:b2:67:fd:87:b6:33:4e:4b:11:4d:e5:64:80:d0:
c1:59:88:6f:5f:5c:92:94:ad:a0:a6:4b:08:1b:32:
d5:2e:af:29:12:3d:a2:04:78:30:1f:00:16:a0:04:
ed:ff:12:85:dc:57:11:19:62:7e:93:b2:38:5f:69:
e1:b7:91:cc:eb:b8:af:4f:f8:99:92:75:c6:97:fa:
f5:5f:88:78:d7:f8:a5:87:f4:83:c6:5a:0e:a7:1c:
ab:bb:e8:ce:4c:47:6b:bc:b7:8c:33:53:c5:c2:c1:
a5:cd:05:3f:81:02:99:79:f0:94:19:3c:55:5d:31:
ec:36:fb:c4:9d:f9:4a:96:37:c3:72:45:20:97:af:
cd:8e:ae:cb:55:8d:af:50:a2:9f:c5:39:10:ec:bc:
46:d9:8c:73:2f:40:f1:8d:da:1e:12:fa:0e:ab:cb:
84:98:0f:34:cb:58:79:20:bb:90:8f:57:16:70:20:
db:cf:21:fa:6f:6f:5c:a0:5c:5a:69:bb:d0:ac:1d:
02:4a:be:1e:38:72:a3:b9:76:b4:e5:c2:2c:15:d4:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:25:FE:0E:8A:1D:05:1C:0B:E2:B5:4C:6C:8D:67:07:8D:05:57:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70E17F5CCC9111EF8D1B5B59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.253.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3a:fc:de:29:41:4c:71:74:4b:1e:46:56:5f:6f:6e:8b:9d:
5d:2c:72:08:c4:57:92:eb:dc:86:90:21:30:ff:8e:47:68:3f:
80:ed:13:9d:61:fe:54:59:27:f4:d6:c6:62:88:17:4c:9f:0b:
f7:92:a2:0f:82:52:59:42:e0:1c:31:90:e1:0e:31:2b:c5:99:
8a:de:97:98:e5:cc:d4:1e:c1:42:09:1e:3e:63:f7:10:ba:d3:
f6:f0:ac:92:10:be:69:c9:1b:fd:7c:5d:97:30:6e:a4:9d:09:
34:88:7e:2d:ba:c4:8e:7e:d8:33:bb:68:09:54:61:64:a3:41:
22:03:e5:87:5a:15:e5:9b:93:9d:7d:35:78:3d:c5:e0:e5:ca:
29:e3:b7:d8:8c:20:4e:6e:2e:73:c0:ef:65:05:50:56:8e:80:
ef:83:74:de:37:21:f1:24:40:bb:5b:83:de:43:72:c5:e0:56:
d2:9a:e8:d4:1e:ce:b2:9c:e0:14:b9:0c:fe:45:59:fd:10:d0:
a0:92:a5:b5:34:67:82:0e:49:84:6a:8e:47:fd:f7:03:f7:21:
8e:42:a6:36:b4:b9:32:47:8b:71:ba:b0:fc:03:b3:9b:24:1a:
a5:d8:8a:59:3b:48:dc:e8:57:b1:13:6a:45:2c:1d:c4:f9:21:
69:29:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:58 2025 by rpki-client