Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9007AC12CD2711EF8D3B6EA2762E951A.roa
File: 9007AC12CD2711EF8D3B6EA2762E951A.roa (raw, json)
Hash identifier: 0EGULr/GPNbrjHK3ZsctepDx4HRQUKSJ26P7pXHTOj4=
Subject key identifier: 88:3E:B0:5A:5B:AE:A6:01:BF:B6:C5:8E:B6:93:B9:A1:23:06:F1:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9007AC12CD2711EF8D3B6EA2762E951A.roa
Signing time: Tue 07 Jan 2025 18:45:27 +0000
ROA not before: Tue 07 Jan 2025 18:45:24 +0000
ROA not after: Mon 13 Dec 2027 18:45:24 +0000
asID: 17561
IP address blocks: 156.241.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64935 (0xfda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:45:24 2025 GMT
Not After : Dec 13 18:45:24 2027 GMT
Subject: CN=677d7647-bdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:c9:95:cc:83:01:89:67:eb:21:b2:49:46:
53:07:53:25:01:a9:69:84:9a:15:19:75:26:3b:47:
be:6b:84:71:f6:40:b2:c3:09:58:46:32:7d:9e:88:
a4:28:74:4e:9a:c7:f8:39:e0:63:d7:23:a1:a1:1d:
56:89:2c:71:28:30:e6:5d:79:86:00:b3:27:56:22:
32:d7:c0:02:ec:8e:f3:8d:c6:19:5c:ea:08:81:b7:
ed:67:e9:41:59:e5:2d:cc:ca:27:b8:a9:76:7b:bf:
e3:4b:ef:7f:64:7c:b1:25:57:dc:18:c2:ba:10:f7:
eb:70:9d:50:3f:a3:16:f0:2e:b8:35:28:e5:a9:07:
b1:dd:45:27:35:89:38:6e:6a:87:2d:4e:4d:6e:7f:
2a:fb:81:c4:bb:c8:30:e1:9a:b2:14:0d:54:86:32:
64:6e:19:58:f7:64:1d:dc:51:11:b9:31:60:ab:c4:
80:a1:ce:f0:e4:26:71:c5:79:f2:cd:b9:3b:6f:e3:
5b:8c:6d:64:e3:95:34:83:e4:8f:09:d0:cd:e3:76:
5c:cc:90:fe:71:2d:43:9d:0e:0d:95:fc:62:47:7f:
28:26:79:22:85:5a:a2:11:c9:29:17:ae:36:15:d2:
05:ff:cd:fb:c5:25:cd:b5:24:4f:4d:e9:08:44:01:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3E:B0:5A:5B:AE:A6:01:BF:B6:C5:8E:B6:93:B9:A1:23:06:F1:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9007AC12CD2711EF8D3B6EA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fa:81:1d:39:f8:a0:7c:ed:c8:fa:5e:dc:7a:eb:c5:69:ef:
25:27:a4:51:4a:0c:0a:1f:13:a8:25:ae:26:6a:f9:95:a6:52:
6f:5f:c9:f7:b1:02:0b:c9:46:12:91:ea:2b:2c:0c:20:05:ee:
55:2f:43:95:0d:8b:d1:13:0b:a0:23:a6:3e:8d:29:1b:51:19:
30:ba:c8:9a:de:1d:a0:60:d8:83:70:fd:ee:a9:e2:6c:b0:2d:
50:c1:e9:64:2a:a8:38:d1:6f:9e:c8:b1:4b:64:bf:1c:90:94:
6c:4d:c4:3f:e1:63:a4:52:71:e5:bd:2e:54:81:b9:fe:ef:63:
cb:78:71:3b:ee:dd:fd:5f:ba:15:16:a0:86:73:f5:93:f6:ad:
d7:d0:96:bb:0f:9a:6b:b1:f9:7e:2c:d6:61:7f:24:99:5f:2a:
00:a2:cf:57:ee:f2:39:f3:8c:7f:dc:46:b4:c7:cf:66:36:48:
94:7a:04:de:5d:91:51:97:81:14:d5:53:b2:cf:e5:5e:67:36:
56:2b:01:6e:13:0c:b2:85:6a:3d:a2:ca:b9:01:af:52:51:6b:
ab:a7:9a:e3:26:55:63:d6:1d:a0:ff:69:aa:6b:25:48:a3:ea:
45:40:b5:ed:8f:3f:13:aa:52:1a:4e:f1:e9:74:83:06:fe:1f:
2d:1d:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:59 2025 by rpki-client