Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FE6A4FECCBF11EFB42E4D92762E951A.roa
File: 7FE6A4FECCBF11EFB42E4D92762E951A.roa (raw, json)
Hash identifier: 4+ncpzUP+qCUwD3CrBRiCybk5n7AFa4dzMjSZfA8dFA=
Subject key identifier: 32:0B:0C:16:5D:AB:BC:00:A5:CA:DC:85:36:B7:EE:7F:A9:F0:2E:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FE6A4FECCBF11EFB42E4D92762E951A.roa
Signing time: Tue 07 Jan 2025 06:20:33 +0000
ROA not before: Tue 07 Jan 2025 06:20:29 +0000
ROA not after: Sat 13 Dec 2025 06:20:29 +0000
asID: 984
IP address blocks: 156.233.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64020 (0xfa14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 06:20:29 2025 GMT
Not After : Dec 13 06:20:29 2025 GMT
Subject: CN=677cc7b1-36d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:63:4b:d8:6c:c8:db:e4:4a:a2:df:07:0b:f7:
f2:94:5f:b2:f0:ca:ba:1f:4c:57:e7:80:a8:d1:a0:
69:61:ff:b0:24:09:4b:62:4e:ae:31:dd:1d:1c:01:
ef:1f:33:a1:cb:6e:4a:70:3a:53:6d:ec:60:a0:40:
03:6b:2a:a1:0c:9f:da:b4:69:2d:94:eb:94:f5:85:
c8:c0:b6:83:0b:0d:be:5c:b9:6d:0f:b2:19:54:d4:
d3:f8:26:5b:e1:3b:6c:c7:96:f4:93:3a:09:ae:ff:
c5:92:12:fc:0b:35:a7:66:44:1d:a7:49:ca:f8:49:
f6:f5:e8:bf:71:ad:46:8e:d5:34:cd:02:c4:85:8c:
43:db:3d:ea:e0:78:97:11:3f:40:53:78:63:82:5f:
8e:22:50:e2:f1:aa:35:e3:f9:da:ef:61:7e:bc:7d:
26:bf:db:9e:b2:6d:7b:ee:66:8f:fd:45:04:74:65:
fa:46:1f:87:f6:ce:c3:e6:e3:a9:8a:a7:e4:ff:b1:
32:ac:ce:27:6b:48:86:90:6b:25:ab:ef:52:b5:2f:
9d:47:96:5a:5e:b6:7e:91:ae:ad:ab:63:db:68:87:
ed:7f:e7:ef:2d:d6:c9:eb:9e:28:8c:bb:eb:c4:be:
75:f3:97:ae:24:de:50:f8:5a:f7:0b:ef:e3:59:b1:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:0C:16:5D:AB:BC:00:A5:CA:DC:85:36:B7:EE:7F:A9:F0:2E:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FE6A4FECCBF11EFB42E4D92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3a:b4:b4:83:45:49:0d:fd:de:f8:24:58:cf:3b:8d:1a:c1:
a2:83:ec:64:0c:66:b9:a1:c2:1e:8b:3e:d5:4b:72:cb:1c:13:
cd:17:5b:64:b5:3b:13:7f:74:9b:0a:69:bf:7d:01:24:fe:c3:
b5:47:07:f0:b5:51:83:a1:87:d3:bb:63:8a:91:41:71:36:83:
9a:3d:6d:36:4a:1c:13:f8:db:30:f2:62:cc:d7:4d:f0:d1:13:
80:2c:d2:32:d9:f3:28:f0:d9:98:59:fa:bf:10:73:f4:a3:c5:
f8:ef:00:4d:78:ca:b6:41:41:30:c0:e0:dd:1b:83:41:6d:6c:
ad:c7:40:a9:82:5f:f6:3d:34:65:15:0d:ae:e8:76:9b:18:37:
5e:66:ec:62:03:50:fb:8b:99:d7:9f:a9:20:93:f6:74:24:a7:
3a:fc:1d:87:0d:69:f4:c3:8e:16:c0:62:6d:7e:fe:c6:e7:d7:
c0:7a:93:7f:22:a1:70:93:c2:ba:9b:fc:43:55:9e:30:35:81:
bc:4d:86:29:d0:6c:50:39:b9:53:22:a0:16:84:f8:b8:85:58:
4b:e0:23:9e:5c:ce:1c:5d:e9:0f:34:9c:46:53:a2:1b:0d:a8:
d4:67:3d:0b:74:5f:df:e1:fe:eb:d4:69:d3:77:79:e5:bb:59:
cd:3a:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:50 2025 by rpki-client