Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90465D84CD9C11EF855D7499762E951A.roa
File: 90465D84CD9C11EF855D7499762E951A.roa (raw, json)
Hash identifier: G1TW7pUzv4f2He1d/bcRRvbpvXodQqKeV856HDkd6gU=
Subject key identifier: 4B:31:E9:3F:79:43:8B:37:41:49:2E:D2:5B:D7:34:A9:E5:58:EC:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01008F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90465D84CD9C11EF855D7499762E951A.roa
Signing time: Wed 08 Jan 2025 08:42:59 +0000
ROA not before: Wed 08 Jan 2025 08:42:55 +0000
ROA not after: Sat 13 Dec 2025 08:42:55 +0000
asID: 984
IP address blocks: 156.252.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65679 (0x1008f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 08:42:55 2025 GMT
Not After : Dec 13 08:42:55 2025 GMT
Subject: CN=677e3a93-240c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:f8:e4:fc:6c:65:68:9d:82:89:00:38:fd:
40:22:69:93:0e:cc:ae:67:76:7a:1e:bf:02:2b:25:
49:67:af:a0:3f:f0:93:e5:cd:88:cc:91:23:69:14:
6b:01:91:10:ac:9c:d7:80:ab:c3:2e:8e:2d:af:26:
bb:25:b1:92:5e:41:98:49:cd:64:37:08:52:cb:df:
76:b7:97:72:7e:a8:c2:14:01:37:8f:b0:2b:f6:35:
e2:b6:48:f4:ad:e4:94:ba:35:b3:b8:d2:84:7f:72:
95:09:92:d5:11:02:2f:05:1f:61:85:d8:38:65:9e:
7c:e5:aa:cb:09:01:3c:3a:34:3e:19:22:7e:cd:bd:
66:73:4d:b5:5c:8e:9e:e1:4a:4a:f3:af:95:ed:0c:
d6:25:95:c7:93:50:b2:a5:35:de:00:90:a7:09:70:
60:37:80:81:2c:23:f1:e9:56:1f:b6:43:4e:fc:45:
d5:f4:6b:cb:72:20:92:47:0e:62:4b:5b:4d:77:e9:
d3:e6:04:ad:40:e9:c4:82:70:b5:96:8a:6c:48:5b:
22:85:d8:ab:95:5e:b7:b5:06:c5:75:f0:e2:f1:bd:
cd:7d:f1:8e:3f:00:88:12:0d:a4:97:2f:55:8b:5d:
35:c1:31:b8:5b:f2:4d:cb:98:b6:1b:4b:b4:db:c7:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:31:E9:3F:79:43:8B:37:41:49:2E:D2:5B:D7:34:A9:E5:58:EC:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90465D84CD9C11EF855D7499762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fd:3c:f8:7b:f4:5e:90:41:30:5c:e8:b6:76:6d:9c:85:f9:
02:f2:37:dd:ee:de:f9:6a:64:0f:21:94:f4:6b:b9:b2:77:da:
2a:ea:ab:ec:d7:cc:35:93:aa:24:ac:ca:d6:ea:1d:be:1c:e7:
50:47:5d:83:fd:6e:6d:5d:c9:40:67:3d:18:d9:59:ca:42:21:
b9:a3:b2:41:74:fe:dd:a5:ab:95:c5:34:e1:1a:d3:9a:50:7c:
fc:a4:f7:06:7a:11:7e:e3:0b:78:e1:28:ad:da:f0:92:0e:3d:
57:53:62:85:9c:96:44:6f:42:91:15:9f:51:11:4e:a9:37:fd:
ac:7f:65:49:32:39:e6:95:0d:43:66:85:3c:d1:96:0e:ed:35:
0d:d3:6f:bd:5a:87:87:de:67:aa:0d:c5:83:40:08:63:e9:6e:
c0:0b:f0:12:bd:cc:c3:31:0f:e0:28:c2:0f:11:13:1c:9c:a3:
ac:e3:49:e1:cc:2b:81:f5:a8:17:89:a1:fc:cd:3a:f8:d9:40:
74:0e:96:92:7a:b0:4d:91:59:b6:69:58:3c:25:d0:36:85:dc:
35:78:f4:58:cb:e9:87:b9:ff:57:23:51:7e:56:f5:06:3b:5a:
98:f7:84:87:6f:93:8e:c6:44:74:0f:bd:b4:ed:07:88:4d:20:
11:e3:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:04 2025 by rpki-client