Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/808C648ED4B711EFA67E9A55762E951A.roa
File: 808C648ED4B711EFA67E9A55762E951A.roa (raw, json)
Hash identifier: I4Jokr3lyjY0jd2c9XaJKfJmDy/tEKRIeUBz/cEVyEU=
Subject key identifier: 67:06:21:28:33:47:D5:C0:66:7A:93:3C:DA:5B:52:A8:0D:3B:CF:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010967
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/808C648ED4B711EFA67E9A55762E951A.roa
Signing time: Fri 17 Jan 2025 09:43:27 +0000
ROA not before: Fri 17 Jan 2025 09:43:24 +0000
ROA not after: Sun 14 Dec 2025 09:43:24 +0000
asID: 4809
IP address blocks: 156.242.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67943 (0x10967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 09:43:24 2025 GMT
Not After : Dec 14 09:43:24 2025 GMT
Subject: CN=678a263f-143b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:02:ea:b3:35:34:31:2f:5e:20:9a:0b:ab:
7b:3b:20:74:8b:ae:87:33:7a:d2:d7:72:a6:7a:4e:
2e:cf:9c:04:ce:4b:c9:33:fd:24:92:c4:d2:85:fa:
02:73:4e:ea:9e:8a:2a:26:e4:a8:16:49:46:8d:fa:
9a:0c:79:fa:65:33:4b:01:e8:34:d9:ab:50:54:4d:
e8:1d:d6:5e:47:80:e6:8c:f8:51:d6:62:99:b7:16:
ea:b7:c0:58:02:b9:80:45:25:46:7c:45:7e:6d:40:
97:ed:fe:22:e6:1f:f1:89:61:92:26:96:2c:4a:92:
f4:aa:62:61:c5:f5:5a:67:b2:7a:bb:2e:8a:db:69:
cf:5c:51:e8:d4:9f:e9:71:83:5d:fa:27:8d:9d:b1:
73:8a:73:3a:5f:f6:10:3d:5f:0c:9a:3f:61:c6:2f:
ed:b1:0a:51:46:ca:06:b8:3f:2e:ef:1a:3d:8b:eb:
49:9b:e0:2c:0d:92:0e:74:e6:46:50:22:ff:cd:12:
40:dd:9a:8f:e4:c7:89:ff:33:7a:ba:b9:40:81:43:
a7:29:14:c6:4e:8f:99:d0:e0:fd:cf:75:e2:28:04:
f5:e9:93:af:9b:8f:16:4f:72:0b:6a:a3:59:80:46:
b2:f4:e3:ee:55:1e:1c:0a:30:21:0c:87:61:4a:d2:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:21:28:33:47:D5:C0:66:7A:93:3C:DA:5B:52:A8:0D:3B:CF:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/808C648ED4B711EFA67E9A55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.8.0/24
Signature Algorithm: sha256WithRSAEncryption
38:27:76:ef:78:2b:f1:0b:e3:6f:98:5c:af:e7:66:d4:0a:5a:
29:8b:7d:c4:9e:dd:99:59:4a:ac:24:fd:87:43:21:d6:cd:6c:
c3:5e:bf:90:04:c1:92:8d:1a:a8:0e:24:48:7b:e6:f9:f6:6b:
71:e4:fa:fa:83:02:19:af:75:cf:0d:4c:4c:f9:a5:95:4a:d9:
cf:7b:2c:02:ed:6b:89:cb:d1:0c:c7:41:cd:64:c6:f8:14:c4:
ee:78:33:98:7b:fc:83:cc:8f:1a:0c:a7:5e:79:ca:96:90:cc:
1a:d3:85:5a:26:aa:93:6f:49:33:14:c5:32:56:84:c4:6f:9e:
8b:ea:84:e5:39:be:a2:2e:95:84:bd:b9:46:9d:44:ff:cb:f5:
00:aa:cd:ce:73:5e:db:c8:80:62:13:a3:4c:82:cc:73:d8:db:
c0:f5:28:0e:47:d8:aa:c3:1d:1a:72:2b:da:a8:c0:4e:da:a6:
07:79:a2:33:c2:25:77:21:e2:f0:6c:6d:29:f1:cc:8c:a4:51:
26:52:fb:e5:bb:65:56:0f:34:81:b4:86:a2:9f:3c:24:d0:4b:
b4:73:a2:9a:a2:f7:17:ee:bf:23:bd:ed:f5:05:f2:fe:e3:3f:
60:90:ce:96:6b:63:cf:a4:18:ab:db:66:df:81:09:84:b7:60:
dd:c5:df:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:25 2025 by rpki-client