Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F55E1EC95111EFAB1D57BD762E951A.roa
File: 95F55E1EC95111EFAB1D57BD762E951A.roa (raw, json)
Hash identifier: l6zGYMCUxoVPYBBUqAs8AiY/QTXM221chT3kSamG59c=
Subject key identifier: AE:28:7A:5F:2F:A2:34:6B:B1:28:DA:6D:37:61:DD:10:8A:1B:2A:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F3CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F55E1EC95111EFAB1D57BD762E951A.roa
Signing time: Thu 02 Jan 2025 21:36:12 +0000
ROA not before: Thu 02 Jan 2025 21:36:08 +0000
ROA not after: Mon 13 Dec 2027 21:36:08 +0000
asID: 17561
IP address blocks: 156.225.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62412 (0xf3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 21:36:08 2025 GMT
Not After : Dec 13 21:36:08 2027 GMT
Subject: CN=677706cc-38d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:6a:cd:53:86:ef:53:d4:4f:9f:d1:92:cb:
9c:87:2b:ab:f5:55:4e:30:1b:7a:47:fc:62:99:e1:
a7:92:e9:3e:a1:ad:b6:fb:7e:f6:35:e8:65:59:26:
c1:8e:c8:54:cb:a4:19:a5:e2:d2:c7:70:63:81:27:
a3:2b:97:50:ba:0a:f5:2f:fd:03:fc:5a:e1:b0:bb:
9e:eb:8c:40:6d:3f:a8:68:53:3e:59:48:a3:aa:19:
b5:99:2c:db:c1:52:b3:ae:1d:22:2d:6c:c8:f1:50:
a0:ad:75:2e:e5:8f:20:8e:56:47:7c:7b:c8:3e:b4:
d8:2b:b1:ab:42:70:6a:7a:a6:3a:c2:f0:13:af:1e:
2e:5b:52:aa:e5:38:84:10:b6:03:e8:92:93:50:e6:
57:fa:0b:d0:1e:0d:ce:e2:09:7a:ab:61:ef:b3:79:
0a:f5:8f:a0:d9:77:4d:28:94:dd:4a:2e:58:b1:0f:
c3:2e:4c:d2:73:0b:ef:b2:0b:38:87:72:b8:9d:12:
af:15:df:46:0e:74:fb:b3:41:54:8b:04:7c:d5:49:
82:57:95:34:ea:c2:4b:68:dc:f4:fc:ff:de:e3:82:
df:09:fd:6f:6d:3b:e3:21:bf:16:3e:4c:47:2f:05:
bf:7b:e9:7d:ee:b0:3a:8c:5f:8d:62:0f:9c:e4:a7:
96:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:7A:5F:2F:A2:34:6B:B1:28:DA:6D:37:61:DD:10:8A:1B:2A:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F55E1EC95111EFAB1D57BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.189.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a4:1a:26:5a:c6:47:1d:a0:06:95:91:b9:bb:c5:8a:58:24:
79:ee:a7:2f:e7:2d:23:46:cc:11:a5:0a:5d:99:19:6a:dc:57:
e6:bf:f6:80:f7:aa:ee:3b:1f:46:d7:dd:8e:a6:af:2f:39:61:
e7:06:5d:2e:6c:85:81:eb:de:3b:db:b6:19:9b:2a:7a:f1:af:
49:c0:01:39:29:55:d6:34:8d:d0:b9:21:dd:87:e6:a3:8e:06:
04:a5:99:12:e3:88:5e:5d:93:5f:6c:72:ff:f0:ab:10:b9:76:
3d:23:66:5a:47:af:b3:95:09:73:e1:29:c8:a8:f2:b0:77:26:
4e:4b:62:9f:77:38:55:a8:40:cb:7a:64:3f:bf:b5:af:65:24:
90:9d:11:0e:a3:7a:2b:0f:65:db:86:3d:35:e6:39:c5:06:aa:
ba:9f:c9:03:3f:4b:5a:ca:bb:ff:aa:19:29:45:ab:9a:f2:6f:
0f:d5:fc:99:96:b0:d5:36:26:fa:0d:47:8c:55:8d:b9:e3:ae:
18:60:10:65:e1:5e:5d:a5:50:b9:f2:0e:b8:53:dc:4f:78:f7:
b3:68:76:27:bf:48:15:2b:e1:aa:7d:2d:99:31:ed:60:cb:e3:
23:e6:7b:c3:3d:e7:77:90:82:6f:e4:1b:43:9b:cd:e4:a4:02:
fc:43:e2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:40 2025 by rpki-client