Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BBFA01ECD3311EFAE4E556D762E951A.roa
File: 7BBFA01ECD3311EFAE4E556D762E951A.roa (raw, json)
Hash identifier: P6IZP3CzO8iuk27BTGXsSJHs27xQc4j9OklSYdmf8+Y=
Subject key identifier: D2:91:A1:4B:DB:79:3A:E2:C9:7D:15:76:9B:7F:9E:9D:44:F5:45:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BBFA01ECD3311EFAE4E556D762E951A.roa
Signing time: Tue 07 Jan 2025 20:10:48 +0000
ROA not before: Tue 07 Jan 2025 20:10:43 +0000
ROA not after: Mon 13 Dec 2027 20:10:43 +0000
asID: 17561
IP address blocks: 156.243.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65029 (0xfe05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 20:10:43 2025 GMT
Not After : Dec 13 20:10:43 2027 GMT
Subject: CN=677d8a47-2af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:88:56:de:1f:d9:ee:27:cd:90:1f:85:d3:
2d:ed:f5:e6:36:22:65:42:e6:d9:73:3f:01:58:f2:
ad:13:d9:a2:c6:6c:2d:6f:30:d6:42:51:6a:06:d4:
92:88:f1:cd:56:46:77:a3:79:f7:66:0e:2d:02:7b:
08:74:89:10:9d:07:24:6f:3b:33:6f:7b:aa:c3:50:
1e:6c:b7:30:9f:5f:33:a7:dc:45:f0:80:39:3f:f3:
7d:88:5d:20:24:eb:2a:2f:8c:23:77:ec:c6:46:b0:
73:17:9c:b1:0c:aa:e1:e3:ef:f7:f6:cc:8a:51:4d:
49:2a:a1:ef:2f:78:35:0e:3f:72:3f:93:b6:a4:e3:
f4:aa:43:a4:d8:2e:0e:1c:f8:ba:9f:4b:7c:b2:73:
a7:7c:f0:f5:d0:4c:6a:aa:d4:5e:20:78:30:8d:dd:
3c:a8:00:54:af:13:1f:a4:7e:98:d1:98:fa:66:29:
96:5b:5c:f1:0a:fb:97:b8:93:f1:0d:0d:e1:22:82:
9c:d0:cd:f3:58:12:f7:15:8e:40:10:5d:d9:5d:20:
e9:7f:38:cc:17:e4:99:7d:81:9d:b8:d6:23:6a:39:
41:19:5e:d9:6d:1d:cc:1f:04:fb:b2:91:27:29:f2:
a2:9e:c3:78:03:0d:92:63:7e:7f:46:24:9d:5c:42:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:91:A1:4B:DB:79:3A:E2:C9:7D:15:76:9B:7F:9E:9D:44:F5:45:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BBFA01ECD3311EFAE4E556D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.43.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:51:e6:65:ca:d2:a0:37:be:b0:8b:61:43:8e:44:1b:15:96:
6b:21:d0:02:ea:f0:b6:cd:19:d2:18:a1:c5:5a:20:17:6a:51:
30:66:63:53:25:91:6b:40:1a:c4:f9:cf:95:b3:67:0a:62:72:
90:71:03:ab:03:77:a9:65:81:5e:d6:1d:21:46:0a:46:cf:08:
21:73:7b:a9:57:6f:4f:74:ff:f3:92:a7:5c:40:d3:ce:88:0e:
aa:87:74:96:4b:39:a1:8a:a3:c8:de:70:0c:bd:23:7e:b1:80:
1e:51:e9:9d:5a:b8:8e:c1:fd:38:6f:6f:25:e5:e3:19:83:2d:
1d:59:13:fb:b2:19:87:49:5b:2a:4c:c2:9b:69:4f:ec:02:db:
7a:5c:70:dc:35:49:96:3c:89:c9:80:24:46:2f:2e:04:7f:2d:
61:21:46:bb:c3:5c:74:7a:17:34:79:05:19:ee:12:6a:7b:a1:
3f:80:88:7c:ac:dd:76:cb:31:65:93:23:12:3f:da:54:fe:b0:
d9:68:39:88:42:ec:1a:68:7b:b7:1c:09:27:43:b2:cd:95:8a:
5a:77:11:b8:02:0b:36:53:7e:c0:f1:54:a7:b2:7d:2d:68:47:
28:79:16:23:7e:41:37:ca:48:45:a9:2d:ba:08:1f:30:9c:2e:
41:da:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:03 2025 by rpki-client