Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C84FFE4C33D11EFA8BC3CA4762E951A.roa
File: 7C84FFE4C33D11EFA8BC3CA4762E951A.roa (raw, json)
Hash identifier: uob9e6r9L93uYU/BG7w3gIDZHNo2S8nVQpVZtJdSngs=
Subject key identifier: E1:11:23:EB:9B:D5:46:0B:B0:01:5C:42:10:98:E4:3B:AA:B5:65:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EBA1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C84FFE4C33D11EFA8BC3CA4762E951A.roa
Signing time: Thu 26 Dec 2024 03:57:12 +0000
ROA not before: Thu 26 Dec 2024 03:57:09 +0000
ROA not after: Fri 10 Dec 2027 03:57:09 +0000
asID: 17561
IP address blocks: 156.244.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60321 (0xeba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:57:09 2024 GMT
Not After : Dec 10 03:57:09 2027 GMT
Subject: CN=676cd418-fe05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:70:45:64:bf:1b:4c:12:79:3c:4b:04:ea:
98:c2:29:f1:91:ee:0f:44:92:ec:09:2a:78:e6:23:
61:cc:66:56:ac:f2:88:59:7a:97:57:98:8f:96:7e:
14:ab:e2:07:92:ca:e7:fd:24:b6:12:6a:7b:7e:b6:
1f:1a:5a:fb:17:8e:bc:44:7e:6c:31:bd:6a:56:4d:
b4:3e:11:ab:66:e7:37:d0:04:12:28:86:ff:ee:2a:
3e:e5:f9:f9:ea:58:aa:99:52:a0:b9:3e:a7:21:c9:
8f:ef:91:23:7b:78:19:b9:ea:8c:e2:ce:99:8e:70:
f3:bd:ca:69:53:47:59:fd:77:63:71:2e:09:28:c4:
b9:12:8c:52:e2:ff:e2:1a:f2:6b:c0:ba:70:4d:24:
17:f5:bb:29:e1:49:58:ad:14:e0:e5:89:74:1d:91:
a7:aa:14:56:2b:b5:d3:ab:22:cc:a2:c5:74:8a:ef:
37:03:ab:7e:62:00:33:ed:b8:2d:12:f1:79:3a:4e:
db:a7:a0:2b:da:98:02:6b:08:22:84:85:f3:bf:81:
bb:2c:9c:45:5a:70:14:62:ae:74:cc:ff:ea:ce:9f:
8a:71:f7:a6:ec:d4:77:51:59:5f:57:2d:c4:73:91:
1b:a5:59:48:d3:93:22:bc:dc:e6:cd:43:0a:e3:09:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:11:23:EB:9B:D5:46:0B:B0:01:5C:42:10:98:E4:3B:AA:B5:65:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C84FFE4C33D11EFA8BC3CA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:75:c6:14:c2:3e:97:fc:09:1d:9e:fc:f3:87:7d:ef:31:5f:
21:96:62:0a:0c:87:0b:34:9a:bb:c7:26:e6:50:ce:23:0e:b5:
4d:43:e8:de:40:49:c0:18:e9:f7:53:03:ef:b9:36:02:49:1c:
d9:98:72:23:68:4e:81:c2:53:04:30:db:10:a7:14:4e:c8:14:
56:bc:15:0e:51:64:66:87:83:78:e1:a6:e7:f1:a0:d7:14:85:
d2:15:28:bd:17:fe:d4:64:c2:40:da:9b:7c:cb:80:80:5c:dd:
82:e8:0f:31:bc:c3:87:cc:6e:c3:6c:55:c7:6c:14:69:d1:cb:
e0:5a:1c:29:94:5d:7a:18:c9:72:1b:4f:1c:93:2d:16:ba:33:
75:c8:47:c7:26:18:5a:a9:69:e2:2f:04:f4:5c:10:cf:11:a5:
15:6a:d8:aa:3b:3b:ea:77:f9:3e:01:ac:27:df:86:58:0f:fb:
41:88:96:23:14:36:25:04:47:01:42:39:f0:32:07:73:2f:22:
12:19:b6:3a:4a:06:ab:8d:3e:08:dd:f1:60:61:6a:22:ad:ed:
6f:92:db:ce:19:e7:30:26:72:99:50:33:f8:2b:a0:1f:0f:b0:
f4:63:ac:4a:3d:5e:48:0d:79:3f:df:22:48:cf:b2:f4:84:18:
47:17:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:35 2025 by rpki-client