Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963927B2D24211EFBD5E3292762E951A.roa
File: 963927B2D24211EFBD5E3292762E951A.roa (raw, json)
Hash identifier: z1Vwn461kxoL3flmn5hzF5oxZEhFPtVuNmAF9+7kX4A=
Subject key identifier: F7:63:CB:69:99:74:B4:1A:22:F9:28:38:C8:9C:BD:95:4C:BE:DE:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963927B2D24211EFBD5E3292762E951A.roa
Signing time: Tue 14 Jan 2025 06:41:30 +0000
ROA not before: Tue 14 Jan 2025 06:41:26 +0000
ROA not after: Thu 15 May 2025 06:41:26 +0000
asID: 400619
IP address blocks: 156.224.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67256 (0x106b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 06:41:26 2025 GMT
Not After : May 15 06:41:26 2025 GMT
Subject: CN=6786071a-ae6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:4d:5d:2e:bc:1d:db:f3:9f:11:73:32:3f:
7f:c1:79:b1:e8:e2:69:e6:c6:c0:67:09:ca:47:5d:
09:19:dc:91:73:19:b1:de:39:37:be:4f:79:5c:83:
c1:8c:96:2f:de:0c:63:e7:ea:f1:2e:f7:41:7c:c2:
2d:9d:ce:7d:9b:48:47:a5:f6:c3:c7:2c:64:f2:b6:
be:6f:54:02:79:48:95:30:d4:52:be:d5:2b:fd:06:
6a:c9:77:c2:f8:d6:15:62:0b:aa:a0:4e:b2:59:d8:
28:61:39:3b:86:86:a8:10:b3:ae:f5:6f:f5:24:b1:
63:08:57:41:0d:15:69:99:87:8b:11:56:fe:18:aa:
bc:f2:07:88:87:3e:33:6a:10:f5:51:2a:a1:b4:91:
9f:36:7f:55:9a:d2:0d:c4:7c:95:4b:0e:6d:e1:78:
c9:be:7e:d8:23:d5:1b:17:3b:8b:54:58:2f:d3:88:
1a:70:a1:e4:ad:1b:84:fa:3d:a7:d8:5a:fe:ac:bc:
c5:a6:7d:82:8c:7f:fd:36:98:1d:47:fa:57:ff:c6:
e4:b6:1b:9c:21:7b:44:0d:3d:34:90:0a:cc:80:ff:
59:12:89:93:f7:4e:9c:66:38:1c:d3:4a:d6:03:c3:
2d:d6:71:af:81:73:6f:2e:4a:98:8e:ab:1f:38:a2:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:CB:69:99:74:B4:1A:22:F9:28:38:C8:9C:BD:95:4C:BE:DE:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963927B2D24211EFBD5E3292762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:57:69:65:ff:97:c6:89:6c:f2:1e:de:78:85:8f:ed:b4:40:
9d:f0:8d:c9:31:02:53:96:c7:ff:62:e5:b1:e2:c4:21:70:18:
af:ba:4c:4e:2d:32:90:1d:3c:ec:dd:6e:98:cf:fd:2c:7e:f6:
db:4f:89:ad:f3:2b:10:1b:84:0a:0e:7e:19:cc:15:34:42:a1:
70:a4:ec:45:96:7f:ad:3c:3f:01:bb:53:68:19:06:05:f9:bf:
d7:73:d6:b1:61:61:52:a9:e4:7a:cf:a7:33:8a:c5:c1:e1:32:
da:09:2a:23:e8:bf:00:fa:84:ad:23:6e:39:bd:78:fe:87:b7:
6d:51:b9:5e:0d:c6:e5:32:db:28:6d:45:21:1d:cc:db:7b:58:
ed:15:81:da:c1:c2:5c:15:bb:d7:17:21:6f:32:87:9d:88:f8:
c3:a7:06:c8:cf:fa:95:d1:1b:ff:9c:64:32:df:04:33:5e:b1:
ae:d6:b1:45:1a:60:d9:ae:5c:cf:ff:1c:b3:2b:cc:1b:a4:e3:
26:de:29:6a:87:d0:0f:56:10:02:40:e2:63:75:a5:8e:af:59:
9e:3a:ea:7e:bc:bf:8e:8c:7b:1f:42:1b:8e:d6:07:dc:1d:80:
70:d2:07:82:35:e4:58:f9:c4:30:9e:07:67:9d:70:53:68:40:
8e:0c:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:07 2025 by rpki-client