Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/863EC8AEC33711EFB87D217D762E951A.roa
File: 863EC8AEC33711EFB87D217D762E951A.roa (raw, json)
Hash identifier: tOD97D1S8nDqIxGedp5g/WSF+sCOIvEiqd3NEdr57NE=
Subject key identifier: 9B:D3:45:BD:B7:26:EA:27:A0:22:BE:BF:99:82:37:EB:1C:AE:C6:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/863EC8AEC33711EFB87D217D762E951A.roa
Signing time: Thu 26 Dec 2024 03:14:31 +0000
ROA not before: Thu 26 Dec 2024 03:14:28 +0000
ROA not after: Fri 10 Dec 2027 03:14:28 +0000
asID: 17561
IP address blocks: 156.244.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60251 (0xeb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:14:28 2024 GMT
Not After : Dec 10 03:14:28 2027 GMT
Subject: CN=676cca17-b0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:18:7a:9d:bd:56:65:4c:40:31:bd:94:67:a9:
b7:18:ee:54:02:a3:cc:c6:82:ba:31:f4:2d:9a:58:
7d:69:20:fe:a3:64:4a:c7:27:a2:a2:d1:68:99:1f:
ca:c5:c9:ed:d9:1b:a6:c8:28:c7:75:bf:11:8e:d9:
a8:27:5f:8d:b2:45:69:9f:bf:08:c9:dc:f5:03:cd:
72:2b:6d:73:6c:ec:a6:f5:50:b2:9f:19:70:be:4e:
35:59:3d:91:d8:de:83:de:7b:f2:7d:b2:69:96:82:
f3:33:ea:30:4c:cc:a0:1c:c4:f2:df:35:d8:6e:80:
8d:7c:b2:a1:2b:e3:64:c4:c0:4b:3b:ba:76:59:ee:
de:b0:07:10:76:5e:ac:b3:5b:44:8c:1a:b0:cc:ab:
4d:35:55:87:5f:98:02:55:04:d3:cd:99:e1:50:b2:
9e:d0:4a:96:67:97:96:3c:59:8f:88:d5:ce:3c:4e:
8f:89:5e:ad:95:2d:31:1e:4b:c1:10:24:03:99:51:
70:f6:1a:c8:3c:f0:b0:9b:88:8c:6e:27:f8:8b:a5:
18:b5:71:db:6f:90:cd:cd:66:38:fd:bd:18:65:43:
f3:23:6d:6a:36:8d:cf:03:6a:95:f3:2e:01:94:df:
b2:4e:79:70:3e:3f:5c:f7:c3:48:2d:ea:dc:5e:dc:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D3:45:BD:B7:26:EA:27:A0:22:BE:BF:99:82:37:EB:1C:AE:C6:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/863EC8AEC33711EFB87D217D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.169.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a5:98:05:dd:32:6d:0c:ff:8f:99:ed:58:d2:f1:54:e3:f4:
7d:71:6b:10:1f:a9:1b:f9:3d:1b:cd:49:73:62:22:d7:fa:ef:
9c:e0:a1:dd:b0:e5:5e:9b:69:eb:73:01:ff:5e:33:61:ce:25:
11:38:30:a2:44:20:da:5f:80:b6:24:d8:39:96:16:53:da:32:
53:c3:4d:00:c9:8d:8a:5f:28:5e:fa:c3:e0:99:12:84:a5:06:
60:1d:f1:ef:4f:c9:e0:40:bc:4a:b0:a3:66:e7:cc:db:51:90:
4e:c6:10:d3:4e:cf:d2:fa:64:95:eb:6f:30:c0:24:b4:25:c9:
a8:3c:3d:a5:30:4d:46:41:2a:04:77:ed:24:9a:01:74:5d:6b:
ea:ab:0b:b8:19:38:c1:59:db:4e:29:3a:ba:d0:2a:37:97:68:
46:04:c9:81:f0:25:f8:e9:ee:af:d8:6c:5b:11:e4:be:ac:9d:
2e:f2:c8:25:f0:00:9b:42:0a:59:04:6e:01:b8:0c:0c:b9:99:
be:f2:a2:88:cf:18:21:b4:c7:fc:91:bf:01:08:b6:df:46:31:
42:a8:cf:1a:16:bc:da:37:8c:ba:6f:74:8b:80:b6:65:01:7a:
43:a0:52:3f:18:b4:72:83:cf:04:95:90:b1:07:47:0d:29:c2:
20:e9:61:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:41 2025 by rpki-client