Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82792686D18011EFBDA07F43762E951A.roa
File: 82792686D18011EFBDA07F43762E951A.roa (raw, json)
Hash identifier: Z+GO4q72E0yNum4Z9hWya4W8S9p2j7E4Er4/vJfg7/8=
Subject key identifier: 5A:D4:86:9A:17:9B:3D:A1:B6:38:26:93:1A:FA:F4:F0:D4:A8:21:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01069C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82792686D18011EFBDA07F43762E951A.roa
Signing time: Mon 13 Jan 2025 07:32:15 +0000
ROA not before: Mon 13 Jan 2025 07:32:11 +0000
ROA not after: Mon 17 Feb 2025 07:32:11 +0000
asID: 273478
IP address blocks: 156.232.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67228 (0x1069c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 07:32:11 2025 GMT
Not After : Feb 17 07:32:11 2025 GMT
Subject: CN=6784c17f-279f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2c:0c:86:97:28:1a:54:7a:02:e3:b2:38:6e:
41:d4:8e:91:91:8c:38:c5:1e:ba:13:27:ca:f4:41:
bf:83:dc:de:4e:66:d2:bd:38:5d:23:9b:4f:ca:79:
fe:f4:64:69:e7:4a:c9:89:ec:5c:6e:ec:e1:e1:ae:
c2:85:b2:5c:b1:c1:2d:9a:f5:66:e8:6f:00:9d:d7:
58:0d:ad:98:47:8c:de:8f:81:02:50:89:c5:f7:90:
3c:ce:23:53:40:e2:bc:42:01:e0:a7:3d:bc:f2:63:
d7:1c:77:25:06:d0:42:71:6b:18:06:d1:9d:4c:f7:
5e:13:c2:fe:24:27:c4:bb:4e:ce:c4:00:2f:d5:14:
5f:3a:ad:cb:ca:a2:65:57:c6:f0:d3:8c:41:81:49:
79:04:34:cc:7a:f5:9d:84:d6:a2:72:fb:8e:55:28:
1a:53:b5:56:89:b8:a2:66:d9:9e:18:81:61:cb:29:
31:8f:d3:eb:df:a1:22:ef:39:bd:4f:79:66:40:07:
fd:67:94:94:96:37:69:a8:3b:86:92:d2:3d:a0:25:
c6:df:1c:1a:f8:3e:76:ac:7d:43:cb:63:b1:c9:0d:
a0:4c:ff:a1:78:9f:75:a2:64:6c:5c:1b:81:56:3b:
87:42:d8:44:17:4e:e7:30:9d:7a:83:3c:13:8c:11:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D4:86:9A:17:9B:3D:A1:B6:38:26:93:1A:FA:F4:F0:D4:A8:21:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82792686D18011EFBDA07F43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
77:08:f3:a8:63:eb:9f:12:2a:45:ae:15:14:24:c4:d2:46:98:
11:e2:38:c1:e1:f2:56:aa:d9:9e:9b:ca:8e:93:ff:f2:8d:6f:
46:f8:7e:5b:bb:43:e2:32:2c:4c:41:39:e2:47:01:26:a3:84:
a5:29:5e:c8:0f:43:02:15:aa:be:29:c2:d1:2f:7c:7b:3d:f0:
5a:dd:44:59:8e:ec:9c:f2:0e:51:86:7a:b1:a0:b8:2d:1a:0b:
16:2b:d4:3b:c4:0b:a8:f1:49:21:29:7e:14:c2:7e:f2:2a:89:
ce:cd:45:58:e1:c4:04:e6:0d:15:76:ce:c3:05:7c:19:72:0e:
23:c3:a0:f3:9d:63:5d:64:a9:a9:40:8c:86:17:7d:11:78:14:
5d:8b:de:0d:bf:5b:8c:ef:2a:2e:31:40:e5:6c:83:42:a8:a6:
af:21:ce:47:5c:36:09:22:cf:41:59:9a:f3:e1:80:d1:6c:4e:
cf:7e:30:2c:4e:cd:cc:ca:45:d7:82:85:e8:22:c4:2d:16:b1:
5a:a0:50:8c:8f:9b:72:57:9b:b2:ad:a4:79:61:76:47:2f:9e:
53:4a:64:e0:1f:d5:cc:0f:30:50:e3:1c:c8:5d:80:76:47:dc:
b2:71:b3:84:ab:f7:bc:9f:2f:4a:2e:4e:e8:1f:6f:c0:31:3e:
51:e8:d3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:23 2025 by rpki-client