Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B59173EC98D11EF9A639951762E951A.roa
File: 8B59173EC98D11EF9A639951762E951A.roa (raw, json)
Hash identifier: ptcL4dEPoXtnS4aXIpaANyRfRn8uNIWhV70AtkpJnbM=
Subject key identifier: B0:6E:20:53:73:DA:CA:4B:B3:6A:DC:E0:86:56:F5:B3:6C:FB:F3:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B59173EC98D11EF9A639951762E951A.roa
Signing time: Fri 03 Jan 2025 04:45:24 +0000
ROA not before: Fri 03 Jan 2025 04:45:20 +0000
ROA not after: Sat 13 Dec 2025 04:45:20 +0000
asID: 984
IP address blocks: 156.233.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62915 (0xf5c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 04:45:20 2025 GMT
Not After : Dec 13 04:45:20 2025 GMT
Subject: CN=67776b64-cf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:a6:a8:d2:8e:65:99:91:63:cc:a7:be:78:
80:7b:32:51:66:ec:c4:75:0e:d5:e7:f4:21:4b:47:
c2:7e:91:ce:06:9b:3b:39:7c:84:20:3f:5c:30:d4:
0c:61:70:83:23:c2:91:99:85:84:ba:5f:99:c9:77:
53:32:f0:25:b2:9e:15:7e:c6:ff:50:a5:1f:3a:e6:
bd:17:1f:9e:c2:56:50:82:6c:81:ef:77:9c:2b:fb:
48:53:95:ba:8a:d2:a5:75:35:75:c2:fc:75:7d:6b:
7b:2d:58:1e:2a:66:5a:68:9a:4a:df:fd:8e:27:33:
c6:b1:02:96:3e:ee:d8:d0:4f:c4:08:b6:17:a6:c5:
a6:bf:09:23:a6:de:69:22:6d:54:ac:18:d9:59:df:
56:35:17:94:21:03:e0:b8:68:b5:d7:74:1d:7a:91:
a5:ad:05:e8:5f:21:fd:ad:a0:8f:dd:25:ff:4e:71:
9c:d7:13:e4:e3:0b:d7:da:93:c2:8c:b8:b1:6a:10:
9f:b8:88:15:3e:f1:db:8d:3c:c0:d5:d8:e6:14:63:
f3:fa:b5:2b:4e:c0:f7:63:24:f0:fe:7d:0d:51:d5:
67:20:68:5a:86:18:1b:6d:05:be:c9:37:4a:e1:2f:
dd:15:a8:0a:69:3d:71:49:94:3b:4a:47:ed:09:2e:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6E:20:53:73:DA:CA:4B:B3:6A:DC:E0:86:56:F5:B3:6C:FB:F3:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B59173EC98D11EF9A639951762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ae:4e:6b:e3:06:96:20:b7:b3:9b:d7:e2:1b:bd:61:68:6c:
0d:6e:22:96:d3:aa:71:45:8a:9b:d6:42:97:f2:2b:1b:c8:42:
be:06:be:4b:35:ba:c7:87:7a:78:0d:6d:dc:3a:70:e7:83:cf:
ee:dc:06:10:75:cf:46:ae:26:be:44:df:fe:c7:fd:82:e4:8e:
02:8f:36:ee:57:d7:81:51:90:ac:74:08:0a:a3:ca:d9:c4:10:
42:be:cd:fa:13:db:e0:11:56:44:22:5f:23:12:ad:fd:64:19:
73:d0:ac:2a:88:48:b1:4f:ec:ea:e7:7c:0c:51:de:3b:5b:33:
7b:9c:19:00:cf:53:1c:9b:3b:e6:1d:07:b0:29:b4:fe:9a:00:
30:1f:1d:a4:6d:6b:0b:ef:00:5e:d2:e5:a0:20:57:ea:75:e7:
70:6f:02:76:f3:77:48:f4:0f:76:60:db:25:14:6b:99:ad:09:
8f:2a:d1:59:43:af:52:c8:07:7a:6a:e8:d7:0e:1e:7b:52:a9:
57:24:4f:a1:ba:fe:21:4a:03:51:d2:0f:80:20:85:02:56:a8:
75:3a:fd:14:66:d0:9c:2b:08:05:ab:14:43:94:78:30:59:eb:
f9:01:d3:63:80:ea:31:94:90:5c:0e:22:0f:33:7b:9d:85:b3:
10:3c:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:46 2025 by rpki-client