Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/789E5A0ECD0D11EFB274527D762E951A.roa
File: 789E5A0ECD0D11EFB274527D762E951A.roa (raw, json)
Hash identifier: Orkvx3/5QhMU7N4xPKGxTukp33vyXx1YgjJB+GjGvS4=
Subject key identifier: 9D:9E:CC:5F:8B:C7:08:81:DF:70:93:EF:B6:99:4F:BE:B0:65:36:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/789E5A0ECD0D11EFB274527D762E951A.roa
Signing time: Tue 07 Jan 2025 15:38:41 +0000
ROA not before: Tue 07 Jan 2025 15:38:38 +0000
ROA not after: Mon 13 Dec 2027 15:38:38 +0000
asID: 17561
IP address blocks: 156.239.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64725 (0xfcd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 15:38:38 2025 GMT
Not After : Dec 13 15:38:38 2027 GMT
Subject: CN=677d4a81-208c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:5e:14:d9:c8:20:a9:f9:98:cb:54:fe:18:
95:50:87:82:f8:25:a7:cb:98:d2:4e:7b:23:c9:46:
88:8a:e9:c7:d3:3e:b7:90:2b:b9:f2:c4:4f:83:fc:
ec:50:73:57:27:78:f9:cd:81:fb:fb:ab:2d:b4:5e:
02:ea:67:04:4a:8d:15:6d:3c:2f:a1:a8:34:13:86:
93:3a:11:7b:1d:fb:7c:9c:b0:13:9d:5e:e3:b0:2b:
8c:28:f4:89:03:06:92:82:0f:2b:f7:8f:cf:0f:8e:
c1:46:47:4d:1a:05:bf:01:e2:71:00:b6:cd:76:1d:
a0:bc:b3:c9:01:f2:b5:cc:ca:26:d2:41:a1:96:7b:
eb:20:3b:22:aa:36:49:41:3e:cb:b5:d8:4f:ba:c4:
d5:37:f5:b0:7c:12:b4:97:9b:53:d8:53:01:b7:87:
f9:b7:ac:7e:b7:b8:9e:b2:d9:c7:92:f3:5f:8c:6b:
af:f6:05:a8:b5:44:6d:03:a1:09:c3:43:d1:58:c5:
5f:20:45:70:23:a9:73:1c:53:a6:06:4e:1e:45:76:
9f:d4:11:04:4a:2a:cc:ce:46:8f:de:ca:3c:b5:57:
26:35:93:ea:d5:51:6b:61:f7:1e:f0:1f:49:2b:5e:
46:a0:e5:05:cb:f8:31:0b:bc:7a:60:51:0b:ff:d2:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9E:CC:5F:8B:C7:08:81:DF:70:93:EF:B6:99:4F:BE:B0:65:36:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/789E5A0ECD0D11EFB274527D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.62.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c5:06:57:ec:ab:13:65:49:c7:1e:c6:8f:fa:09:dc:b7:ba:
f2:28:f1:db:d0:a0:d6:97:be:91:f0:80:0e:2d:c6:6a:d9:5d:
8c:ff:a5:c9:86:63:a1:45:a7:90:1a:0b:77:cd:56:fd:3e:ae:
08:85:38:aa:00:af:85:31:c1:bd:c7:d5:f1:41:7a:06:59:20:
6b:c1:f6:66:e5:c6:9d:e9:41:a1:77:7f:40:6e:a1:0d:31:20:
14:48:79:bd:91:cc:ad:8a:67:07:82:5d:71:40:cf:0a:ba:23:
0a:3b:7d:1c:43:a6:84:a9:29:10:7e:88:05:53:49:9d:1a:e4:
6c:30:6b:55:40:f6:a5:84:61:80:fe:a1:86:62:23:37:22:54:
29:4c:be:b8:ac:42:75:cf:f5:14:c4:94:50:fd:cd:fd:b6:a4:
e8:3f:09:89:1b:2e:f2:a4:2e:c8:f5:62:45:79:b7:c8:52:b1:
fa:5b:72:cb:5c:10:cf:32:8d:fd:37:63:c1:07:a3:4c:22:f2:
9b:12:0e:b4:16:32:00:05:ce:83:ed:61:6d:a2:2f:7c:8d:db:
fc:d3:57:fe:f3:7b:09:53:02:78:e7:9c:11:be:80:8f:6b:76:
ff:2c:0a:1a:ad:e8:81:8f:ab:f9:7a:76:a4:5a:ee:fe:07:a1:
49:0c:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:16 2025 by rpki-client