Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F465B0D2EA11EF94C766BA762E951A.roa
File: 82F465B0D2EA11EF94C766BA762E951A.roa (raw, json)
Hash identifier: uf0QbEt6E04ntxKOpiPNzDoSnJPlx8OMQq3IAHIwCg4=
Subject key identifier: 91:D9:7D:61:3D:44:55:C8:F8:6F:8E:74:68:9E:47:67:D5:35:0E:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010753
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F465B0D2EA11EF94C766BA762E951A.roa
Signing time: Wed 15 Jan 2025 02:43:33 +0000
ROA not before: Wed 15 Jan 2025 02:43:29 +0000
ROA not after: Mon 03 Jan 2028 02:43:29 +0000
asID: 17561
IP address blocks: 156.230.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67411 (0x10753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 02:43:29 2025 GMT
Not After : Jan 3 02:43:29 2028 GMT
Subject: CN=678720d5-3b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:aa:da:ab:10:2e:d7:e7:4c:01:a4:96:01:
c1:7b:53:85:7e:fc:a8:ba:68:72:5d:21:83:c0:b7:
94:45:ad:5b:b7:94:9f:b4:14:ea:64:80:ef:49:75:
08:5d:70:24:40:ec:57:e5:07:f1:39:93:d7:39:9b:
cd:27:00:42:f0:e1:07:7d:18:94:1f:15:5f:7c:a5:
59:b3:bd:6b:71:ab:e3:84:07:d9:41:0f:c5:f5:be:
80:fa:0d:79:7f:4d:0c:92:54:c1:7f:61:b0:cb:67:
28:dc:ed:18:75:6f:58:4d:39:e3:62:60:d1:d1:e4:
74:23:32:b8:f8:bd:93:94:75:d5:eb:61:c1:a1:c8:
07:b4:ac:96:eb:45:5a:76:b5:99:6d:a8:28:a1:63:
66:0a:e5:9c:50:8e:21:b1:92:57:97:a6:ad:45:31:
6d:cb:77:b6:4f:83:53:a6:19:1e:d9:26:98:25:1f:
db:36:32:7d:a2:5d:44:81:36:dc:b7:2b:c2:32:ea:
52:26:b9:36:f0:cc:5e:88:b2:27:92:33:98:50:09:
b6:d3:c3:22:9c:6d:58:8f:52:05:af:36:6e:18:99:
aa:de:22:1f:c8:86:25:2a:c7:66:f2:88:75:c2:4f:
c4:03:82:71:44:f5:e1:51:18:43:b5:6a:4c:ad:61:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D9:7D:61:3D:44:55:C8:F8:6F:8E:74:68:9E:47:67:D5:35:0E:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F465B0D2EA11EF94C766BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.17.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e8:91:2a:24:e5:88:e7:c9:3a:c8:70:e5:af:13:f2:c4:67:
62:be:4f:1e:96:ae:fd:a6:0b:f4:b1:4d:f1:32:7c:0d:7c:8c:
8f:57:71:ae:24:cc:cd:d8:ce:10:a9:9d:90:a9:48:78:59:5d:
72:b9:b9:9c:11:35:26:f6:43:e6:9e:d6:17:08:75:6b:a7:0d:
89:64:66:e8:36:3e:96:0f:a8:9e:b2:95:e0:46:01:65:b6:da:
a3:ff:df:f9:c8:ea:bc:c7:80:a2:6a:c0:89:8b:d8:79:a2:85:
40:98:77:81:1a:62:4a:5a:f1:63:19:ae:d6:91:d4:8e:9f:c5:
42:38:6b:ab:51:d9:b4:4d:31:7e:56:fa:8a:2e:55:8b:9a:a8:
d0:12:40:76:ab:ba:35:71:d7:06:22:fb:09:f1:a5:f3:d0:3f:
8a:95:d4:b9:ea:f7:fa:ff:46:05:5c:10:75:d8:4f:78:52:75:
df:6c:96:e5:d2:c2:0f:92:9a:21:9c:90:79:8d:74:5c:5c:68:
1c:b6:e6:37:0c:32:2e:cb:e9:ce:3e:54:8b:3b:51:43:63:b7:
82:67:88:be:b2:72:ca:0b:b2:19:59:c1:5d:ec:93:ce:3c:25:
e2:69:b0:de:b5:6f:bb:f3:b8:ba:32:87:3b:ee:cc:9e:a3:6e:
0e:47:a7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:03 2025 by rpki-client