Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EFC5E0CD2F511EF972E4589762E951A.roa
File: 8EFC5E0CD2F511EF972E4589762E951A.roa (raw, json)
Hash identifier: 6oM5SePYMnqjWUnwatjU2XtoEr2aXINK0m6Q0cZzhJs=
Subject key identifier: D8:13:AA:CD:89:A4:B2:EE:77:F0:D2:20:B5:16:D8:18:3A:98:5A:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01079F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EFC5E0CD2F511EF972E4589762E951A.roa
Signing time: Wed 15 Jan 2025 04:02:38 +0000
ROA not before: Wed 15 Jan 2025 04:02:34 +0000
ROA not after: Sat 03 Jan 2026 04:02:34 +0000
asID: 984
IP address blocks: 156.252.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67487 (0x1079f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 04:02:34 2025 GMT
Not After : Jan 3 04:02:34 2026 GMT
Subject: CN=6787335e-6385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:96:2f:68:01:9a:53:67:c8:8a:55:6e:7e:
c5:8e:93:84:94:e1:53:9e:a6:0a:bc:2a:f8:68:2c:
c9:70:14:f2:d9:36:10:90:cf:af:6d:8f:73:cf:4c:
23:ad:c0:02:db:4a:a1:8f:9e:1c:b3:26:05:4d:a0:
38:56:de:9e:a6:7d:24:5a:c2:42:4e:51:95:d8:83:
7f:1b:70:54:a8:b1:8e:e3:83:76:49:66:22:b1:1e:
6f:2d:2d:b9:60:65:3c:d7:ef:f6:6b:b4:b5:06:ab:
65:a5:c5:85:d8:fb:40:b3:70:96:a3:4e:60:0b:e1:
f2:3f:2c:98:6a:75:0b:4c:41:31:d6:a2:f8:3b:e7:
93:63:7b:80:49:00:58:33:8c:5e:43:25:d7:ed:5c:
26:87:8e:77:f8:e4:ac:95:b5:84:b3:8f:07:11:ed:
83:47:ed:e8:80:c4:d3:6c:a5:f8:50:00:a1:f1:54:
16:7a:1d:2d:63:bc:5e:cb:ef:a7:68:f1:4f:45:e0:
e7:f5:60:53:bf:a0:c5:6d:7f:cc:9b:a5:fb:82:d0:
28:02:af:72:8b:7c:67:25:c4:4f:76:0e:a2:bb:ec:
52:93:3a:8b:64:68:6b:27:5f:bb:66:7c:52:05:c5:
4e:fc:47:0d:ca:7f:01:b9:9c:d6:01:43:53:b8:3b:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:13:AA:CD:89:A4:B2:EE:77:F0:D2:20:B5:16:D8:18:3A:98:5A:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EFC5E0CD2F511EF972E4589762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.1.0/24
Signature Algorithm: sha256WithRSAEncryption
96:33:98:50:3c:14:85:a2:3c:45:ab:25:48:34:de:55:64:f6:
37:a7:e1:ef:3d:8e:b7:2e:b2:e8:b1:2b:10:fe:20:99:c2:25:
98:f2:ac:db:92:8b:c4:c3:98:46:29:f2:3c:9b:26:f6:b4:76:
87:41:70:7b:2a:58:9f:3b:cc:d0:37:83:cb:66:d8:a3:96:f0:
21:74:58:29:38:c3:f4:3f:bc:35:53:80:ce:f0:bf:a5:9e:36:
c9:5f:98:cf:77:e8:be:65:e0:39:9b:5c:73:9c:92:b1:16:e9:
11:cc:c7:fd:05:59:30:b8:b3:06:07:c2:14:1a:7a:e1:af:04:
97:14:13:d3:7e:2b:35:40:7b:03:0c:91:fe:80:62:aa:d7:52:
1a:10:6a:79:b8:fb:c0:f9:e2:4e:18:88:b2:c0:38:25:9f:66:
e3:5b:62:c0:04:42:c0:8e:d1:92:a7:96:69:7a:78:b7:b0:36:
d1:d7:c1:ed:b6:a6:12:67:32:1f:c1:63:c8:d5:bf:f4:4b:2c:
9b:ae:4b:a2:da:9e:e0:f8:36:e6:d5:9d:8c:e6:ca:73:d5:4c:
f0:75:c4:bb:ed:d3:25:15:31:43:3c:6e:cf:b4:8a:7e:e1:f2:
cb:42:d3:78:7b:f4:51:b7:5e:dd:cd:21:ab:aa:9f:6e:b6:6b:
16:d4:0b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:13 2025 by rpki-client