Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96AEED20CD7011EFAB44F284762E951A.roa
File: 96AEED20CD7011EFAB44F284762E951A.roa (raw, json)
Hash identifier: ffzI+UkrKY4E2rc54xBogY8QgV0DrdX4PeYcC+ogE34=
Subject key identifier: 0B:9B:3C:83:91:52:21:08:AF:73:80:58:32:CC:86:B7:C4:24:D3:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96AEED20CD7011EFAB44F284762E951A.roa
Signing time: Wed 08 Jan 2025 03:28:12 +0000
ROA not before: Wed 08 Jan 2025 03:28:08 +0000
ROA not after: Mon 13 Dec 2027 03:28:08 +0000
asID: 17561
IP address blocks: 156.248.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65415 (0xff87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:28:08 2025 GMT
Not After : Dec 13 03:28:08 2027 GMT
Subject: CN=677df0cc-3219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:d1:f7:d5:88:79:01:74:2b:c9:26:0c:99:
31:ff:0e:a0:8c:55:d6:cd:08:03:fa:39:31:c7:71:
fb:6b:d8:85:13:f7:e7:4f:00:da:b8:b7:7d:74:92:
91:af:23:48:6d:74:f2:ef:de:f8:2f:b6:d3:7a:3f:
ba:9f:e1:1d:9a:94:f3:a2:fa:40:ff:70:91:f7:8e:
4c:3c:a7:91:32:9f:a5:53:32:c3:ba:e8:1e:3f:c7:
d6:af:fb:37:91:11:30:45:eb:7e:08:48:ed:ed:db:
b1:94:d8:7a:e0:db:9c:ca:50:63:a9:42:c1:0c:19:
36:2e:d4:6a:3b:1c:aa:6d:50:64:6f:ee:43:c8:bd:
8f:b3:75:df:e4:c7:5b:cf:4b:f9:10:db:9c:84:14:
ba:19:63:91:20:4b:6a:c4:30:df:df:6b:9d:ad:62:
8e:94:f7:8e:96:0f:6c:52:eb:a9:63:75:72:5a:f8:
3c:50:c1:4c:82:8a:30:38:64:6a:11:7c:d0:44:30:
3d:8f:74:5a:c2:ea:04:d8:2d:0b:d1:ac:3c:e2:cc:
02:f1:df:4f:44:3b:41:47:80:f6:25:e1:b3:8e:9d:
ff:a5:9a:46:c1:97:38:0d:a6:9e:c3:09:a3:63:c8:
9b:22:9b:e6:0d:9b:24:80:90:35:4a:66:5d:34:af:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9B:3C:83:91:52:21:08:AF:73:80:58:32:CC:86:B7:C4:24:D3:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96AEED20CD7011EFAB44F284762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.29.0/24
Signature Algorithm: sha256WithRSAEncryption
84:75:e4:37:5c:ab:f2:11:47:1d:88:0b:f4:8f:ea:30:73:a2:
a3:a8:5f:3f:48:45:5d:d0:dd:5b:84:45:11:3b:03:32:8e:5e:
b5:36:27:92:71:e5:ff:35:7b:7b:86:d6:6d:92:fe:4e:a1:f5:
3a:14:62:8c:7e:35:5e:5a:12:29:62:1b:b9:db:c3:df:26:52:
18:a5:eb:e6:a1:e8:1d:10:b8:13:2b:cb:70:a8:41:87:59:c3:
26:b9:62:42:e8:44:66:16:8b:4f:ac:cd:42:84:c1:20:78:e5:
a5:a9:9a:b6:89:61:01:67:4b:88:ba:8a:67:01:3d:9d:3f:de:
3d:8c:2a:86:44:b4:37:b7:f5:e5:b0:30:3c:99:7a:ad:4d:8a:
86:49:dd:ab:0b:b9:38:ee:9e:1c:4c:83:14:b7:bb:fe:20:ce:
2a:26:19:d2:f4:d3:33:a1:bd:2e:7f:7e:69:d4:1c:1e:5e:2c:
41:b7:83:1a:02:b6:2f:8f:88:c4:a6:26:56:65:66:46:d5:78:
7e:a7:18:b6:04:e6:62:ac:55:77:ed:4c:a5:19:38:bc:19:cf:
75:38:d8:7e:b5:b5:e6:e6:8e:45:66:b2:db:0f:04:60:8c:76:
9e:df:8f:8e:3d:39:d3:0b:06:76:8f:0e:e2:b5:04:24:be:98:
6e:27:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:54 2025 by rpki-client