Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88B1CF8AD17B11EF9A576CA3762E951A.roa
File: 88B1CF8AD17B11EF9A576CA3762E951A.roa (raw, json)
Hash identifier: Bno8IdB6p6Ua5O0NeGdwxA1Pzrt1wW/9yo3DE46Sfuw=
Subject key identifier: 7F:68:9F:24:A5:76:5C:9E:47:3B:47:F2:C9:1F:A9:2F:25:64:77:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010674
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88B1CF8AD17B11EF9A576CA3762E951A.roa
Signing time: Mon 13 Jan 2025 06:56:38 +0000
ROA not before: Mon 13 Jan 2025 06:56:34 +0000
ROA not after: Thu 20 Feb 2025 06:56:34 +0000
asID: 7018
IP address blocks: 156.253.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67188 (0x10674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 06:56:34 2025 GMT
Not After : Feb 20 06:56:34 2025 GMT
Subject: CN=6784b926-c99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:2f:5b:58:61:76:63:55:15:e6:a7:e3:8d:
18:2a:a7:46:db:0a:68:4e:b2:bf:29:21:85:93:10:
1e:37:12:71:94:92:4b:b8:64:1d:38:75:76:ec:cd:
e1:dd:f9:ab:ee:76:70:5a:2e:9d:f7:09:29:ba:e9:
8f:d9:42:a5:b3:d7:b9:fa:d6:9c:e9:54:72:e0:09:
28:06:34:16:51:e8:33:87:af:f5:49:53:78:3c:1e:
6b:55:f7:ec:ae:d6:90:5d:c1:d8:31:e7:34:82:12:
0b:d5:78:89:01:87:60:29:b1:86:19:c2:ae:65:66:
05:87:a2:c0:bb:74:f8:aa:a1:1b:db:3d:4f:51:23:
92:5e:7c:76:ac:26:0d:d6:78:83:b0:f8:a4:0d:c4:
a1:79:b9:ec:34:42:37:6f:73:62:a2:a0:a4:05:8e:
e6:04:37:c1:b2:39:41:b1:da:ba:45:57:da:a6:27:
ba:71:26:ea:57:04:93:31:13:a5:56:66:28:47:cd:
22:47:4a:bf:b1:9e:1e:da:cb:3a:96:3d:f3:7e:4b:
cf:9a:af:02:75:0c:6f:bd:ba:85:7f:ff:6f:18:b0:
10:9f:24:f9:e6:4b:74:b3:42:14:de:67:4c:26:97:
2d:8f:98:8a:4f:ab:30:eb:b3:6d:33:be:56:ea:57:
58:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:9F:24:A5:76:5C:9E:47:3B:47:F2:C9:1F:A9:2F:25:64:77:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88B1CF8AD17B11EF9A576CA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.240.0/21
Signature Algorithm: sha256WithRSAEncryption
08:10:0d:59:c4:2d:de:03:df:6b:3d:2a:50:7b:ab:37:7c:f5:
e2:ad:d5:ef:46:26:e0:cd:16:f4:18:7d:b6:52:fb:d1:22:c5:
39:ab:76:62:19:ef:f7:de:8a:7d:ca:0c:f3:2b:00:16:16:be:
66:c5:b2:41:55:6c:2e:b4:55:3f:22:70:c5:3a:42:ff:37:72:
4a:df:c9:d4:cf:d1:7d:0c:2d:c4:01:18:e0:04:0e:e8:c0:5b:
cc:1a:d9:ea:cd:ee:d0:25:2c:58:a4:b4:1b:54:84:e4:0c:73:
f2:ff:6d:56:6c:c9:09:bd:f2:b6:67:35:17:7d:64:6e:fd:e2:
a7:c0:7e:1e:a0:f4:9e:c7:e2:4e:31:63:e0:61:3a:2d:a3:52:
4e:fa:ac:78:3d:43:82:26:e5:19:b7:ec:f6:35:e0:96:03:ce:
26:af:a9:bd:57:57:a6:be:f3:66:ae:01:cc:c7:ae:ac:13:ae:
00:e5:b1:9d:7d:b3:48:99:be:41:1d:09:10:60:fc:d6:0e:72:
fc:9e:6a:aa:2e:9f:7b:c7:14:ca:3e:e2:ab:77:40:e1:3f:f1:
16:ac:e1:c1:e8:92:34:8c:32:59:b1:15:0f:01:6b:5e:1a:3a:
6c:69:9d:61:1f:f2:ae:8b:53:5e:fd:29:80:98:5b:51:f7:e9:
d9:2a:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:08 2025 by rpki-client