Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7863BB58C32E11EF89D5BCBA762E951A.roa
File: 7863BB58C32E11EF89D5BCBA762E951A.roa (raw, json)
Hash identifier: /VkTzq2ke+CRV4+zUBTUx3unyEJEQd4t4IaGNwhrePE=
Subject key identifier: A4:7E:10:D5:D0:2A:AB:7F:50:C0:E1:F9:E4:72:FA:F3:5C:63:11:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EAEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7863BB58C32E11EF89D5BCBA762E951A.roa
Signing time: Thu 26 Dec 2024 02:09:43 +0000
ROA not before: Thu 26 Dec 2024 02:09:39 +0000
ROA not after: Wed 10 Dec 2025 02:09:39 +0000
asID: 984
IP address blocks: 156.243.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60143 (0xeaef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:09:39 2024 GMT
Not After : Dec 10 02:09:39 2025 GMT
Subject: CN=676cbae7-02c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:dd:89:6d:58:cc:58:dd:a1:9a:37:1e:22:
d6:a8:d8:fd:5f:6a:20:f9:5c:0d:48:cd:57:49:09:
ef:b7:22:df:e7:cd:a0:d7:47:79:84:cf:b9:26:16:
c4:84:62:52:f8:69:06:43:ba:67:ad:64:ec:77:66:
a5:dc:2f:5c:8b:f1:53:2f:c4:54:47:44:f8:a8:60:
8c:1d:5d:e7:27:0e:ff:36:e5:32:52:98:2d:24:eb:
b2:22:49:07:55:76:95:89:ee:1e:82:23:3b:55:07:
6c:6e:1d:67:18:f6:1a:e5:80:43:2f:a5:7f:4c:3c:
1a:25:00:69:9d:59:03:08:23:5a:cc:1b:ee:38:aa:
1f:8d:4d:03:a6:9b:99:d5:6d:9d:01:b6:2b:59:46:
a6:88:61:52:23:0a:31:76:cb:4b:81:ad:70:99:da:
73:20:98:d3:f8:eb:38:44:62:f6:7e:75:69:f1:bb:
d6:df:5a:00:8e:e9:b6:46:7b:52:ea:d9:b4:d0:cc:
66:22:72:67:80:2a:1d:9e:69:49:7a:b1:de:66:73:
ad:2c:13:33:a0:24:7f:8f:14:90:0e:a4:97:11:07:
19:28:36:99:ab:e4:a4:d1:ae:83:83:1a:34:0f:2a:
7b:fa:5b:52:21:90:82:56:25:48:49:e1:b4:92:cd:
52:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7E:10:D5:D0:2A:AB:7F:50:C0:E1:F9:E4:72:FA:F3:5C:63:11:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7863BB58C32E11EF89D5BCBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:3a:c0:25:40:3d:ff:4f:73:4a:65:86:a3:b7:e9:16:73:32:
01:37:a9:05:c7:77:a2:09:05:f7:0c:4b:83:e0:3d:e5:7c:5f:
08:ce:a4:21:e7:c8:22:3d:13:ee:22:f8:bc:da:a2:55:a9:55:
68:5d:f5:f6:04:51:e4:03:b3:8a:8d:79:fd:f4:46:88:30:78:
b5:4d:ae:02:9b:f8:04:99:fe:18:7b:96:8d:dc:5c:95:63:2c:
31:42:b3:3e:c1:78:13:93:c4:7b:af:05:4b:8f:ef:e4:e3:c3:
46:1b:9e:0d:50:83:99:7e:51:ad:3a:16:ef:f5:fa:93:4e:62:
23:0d:34:9f:3c:82:26:39:3a:1d:0c:d4:67:bc:c6:ac:fb:aa:
2f:f6:6b:31:25:fe:71:76:02:c3:14:80:d3:cc:28:4d:12:17:
54:3b:fb:8a:13:b2:36:da:91:bf:11:27:de:60:09:3f:8f:5d:
d7:4a:09:ed:02:3d:71:36:b9:67:69:1e:99:f2:c6:27:9e:49:
f3:23:e1:2e:97:a3:1e:bc:4d:85:63:be:06:80:fc:4c:9d:f6:
4c:3c:91:29:33:61:5a:2c:8f:6c:10:a6:53:00:9f:78:f6:43:
6f:bb:44:dc:d0:71:f6:7c:7b:a1:b7:ac:84:6e:14:c8:48:dd:
2a:76:01:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:44 2025 by rpki-client