Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73C5E096BB7A11EF8F57E2A4762E951A.roa
File: 73C5E096BB7A11EF8F57E2A4762E951A.roa (raw, json)
Hash identifier: NjfJlaKV0mGLltWiQVqyWrItjre7n1sjuoxIq+GWGCc=
Subject key identifier: 10:D1:27:D4:C5:77:E2:10:CD:76:9F:30:CF:99:85:8F:92:6C:DD:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E416
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73C5E096BB7A11EF8F57E2A4762E951A.roa
Signing time: Mon 16 Dec 2024 06:53:27 +0000
ROA not before: Mon 16 Dec 2024 06:53:24 +0000
ROA not after: Tue 04 Mar 2025 06:53:24 +0000
asID: 136970
IP address blocks: 156.236.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58390 (0xe416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 16 06:53:24 2024 GMT
Not After : Mar 4 06:53:24 2025 GMT
Subject: CN=675fce67-624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:12:c3:df:4c:c3:47:fc:80:3a:e6:34:a0:
78:ea:9f:8b:e4:7b:c2:ad:9a:02:73:9e:27:41:78:
c5:5c:a6:b0:85:75:99:fe:a0:6e:6b:2c:65:9c:04:
42:74:d9:f6:e7:17:4e:c8:df:07:d7:2e:a3:76:aa:
52:dd:9f:f2:55:4d:75:f2:0d:50:43:1c:c6:08:69:
4e:5c:bb:ae:61:5b:cc:0e:63:54:45:e9:6a:a4:d7:
25:40:5e:93:9d:30:04:5d:c6:7a:22:a6:52:2c:b7:
58:14:29:ee:a5:77:02:34:32:be:7d:c6:f9:0b:87:
83:89:f1:f2:bf:52:93:8c:fe:1e:81:12:1c:f1:a8:
b9:26:04:62:a8:ce:07:d7:59:98:43:70:29:13:e0:
9e:3a:78:53:7c:8c:a4:37:28:00:16:fa:c5:ed:55:
5e:19:85:04:d9:cc:8a:49:d6:92:f6:f2:2d:e2:b9:
be:7a:21:40:ee:4a:9c:d2:e8:5e:87:48:58:20:f8:
7e:97:ea:00:da:fe:42:04:b1:a8:13:b1:38:1e:9e:
cb:c6:21:eb:90:39:d3:c4:1f:79:4e:c6:46:a7:af:
31:b7:b2:2e:d7:03:9a:6d:ca:29:b4:7d:e0:e5:33:
0a:68:81:b7:32:c2:85:5e:86:71:8a:a3:a3:af:15:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D1:27:D4:C5:77:E2:10:CD:76:9F:30:CF:99:85:8F:92:6C:DD:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73C5E096BB7A11EF8F57E2A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.64.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:71:3d:ca:97:51:e1:09:24:a9:56:ab:45:4d:65:47:f0:1e:
c9:78:d9:e6:2e:fd:1d:59:7f:a6:dc:5d:1b:2b:73:4b:a5:e5:
68:78:87:39:c6:2d:f5:52:8a:7f:25:5d:ea:43:f7:9b:62:5d:
fd:a9:f6:e8:39:58:48:ba:80:5c:8a:ca:73:fb:b6:8e:cd:10:
65:19:e9:e2:1b:5a:dd:60:0a:83:fa:19:bd:f5:94:d5:30:8d:
45:20:c1:df:15:ca:da:bb:0f:e1:f0:0a:48:9f:4e:9b:24:e1:
87:fc:7e:d0:41:c5:32:79:72:ba:53:3e:ea:3f:5f:24:8c:8f:
43:cd:63:a6:92:ad:41:4e:13:30:dd:8b:50:7e:23:18:16:e6:
4b:30:81:b1:4a:88:55:99:3b:76:2b:2e:7c:49:a4:78:ce:4c:
15:d7:51:63:53:2b:c2:f8:d4:bb:52:20:66:f8:ab:27:11:10:
11:31:9c:7e:f9:bf:1c:30:c4:66:f4:44:06:53:c1:4d:04:40:
4e:c2:9f:81:1a:3c:be:90:8c:b7:49:29:69:39:8b:8e:02:9b:
3f:33:e9:c7:9c:50:32:fc:c5:78:5d:2b:12:4f:00:4f:90:d7:
d5:55:3b:b9:b1:91:41:a7:22:06:ae:5c:ef:16:e6:8b:eb:dc:
19:b1:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:22 2025 by rpki-client