Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9913F72EB3E211EFA120F25A762E951A.roa
File: 9913F72EB3E211EFA120F25A762E951A.roa (raw, json)
Hash identifier: pBYShTcjbIIhaGXjLI9OfDrcW/x45ZQhLJ3waaW2ytc=
Subject key identifier: DF:C7:22:38:CF:0B:85:44:C8:5E:B9:A9:31:38:48:5F:9C:10:13:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E083
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9913F72EB3E211EFA120F25A762E951A.roa
Signing time: Fri 06 Dec 2024 14:58:49 +0000
ROA not before: Fri 06 Dec 2024 14:58:45 +0000
ROA not after: Tue 20 Oct 2026 14:58:45 +0000
asID: 137263
IP address blocks: 156.224.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57475 (0xe083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 6 14:58:45 2024 GMT
Not After : Oct 20 14:58:45 2026 GMT
Subject: CN=67531128-97a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:b2:db:7a:1c:48:4a:50:47:2e:f9:c1:f8:
4d:f8:9a:82:42:79:a3:9c:19:3e:8b:bd:4f:d0:16:
6e:ac:9e:9e:33:96:ed:17:37:f8:1e:a3:15:cb:49:
3c:56:7a:fc:08:c2:a7:bb:01:96:47:e8:b4:03:fd:
e6:9e:11:29:79:6f:9d:84:4d:00:58:0e:19:e7:df:
f8:bc:32:1d:14:64:d7:fc:af:3c:4f:21:55:9f:a9:
3c:de:37:f1:1f:e5:c2:95:ff:f2:78:b8:c5:96:42:
d7:84:e3:28:f6:63:e1:77:89:4e:1d:d0:1a:78:24:
98:08:f8:06:89:4f:dd:7e:08:06:d5:1e:2f:1c:55:
7b:71:69:84:68:a0:22:1b:89:01:d3:b4:45:d5:b7:
1d:ed:23:57:ac:62:4b:17:d5:8d:d8:b0:d8:d2:01:
0a:bb:73:d2:dd:d8:17:cd:b7:f4:45:6d:3a:1a:90:
74:63:10:8c:78:b0:e5:12:5c:72:7f:46:f2:6a:71:
6a:b1:b2:30:ef:7d:c9:f0:43:d7:94:c9:17:89:62:
12:d8:06:4f:30:3d:73:b8:e0:41:77:6d:7b:54:06:
fb:39:a4:6a:a6:26:3e:5b:b4:98:7c:33:aa:15:16:
d8:f9:95:95:a4:b1:c4:a8:20:9f:5c:78:df:4c:88:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:22:38:CF:0B:85:44:C8:5E:B9:A9:31:38:48:5F:9C:10:13:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9913F72EB3E211EFA120F25A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.82.0/23
Signature Algorithm: sha256WithRSAEncryption
63:e3:76:ba:54:7e:42:2d:ca:80:ee:48:41:b9:42:17:00:aa:
5b:66:e9:d0:dc:aa:47:4a:26:3e:40:d7:c1:b6:23:e9:98:78:
a7:1e:dd:80:d9:f2:39:1d:09:ae:8c:85:68:46:a1:a4:f9:eb:
12:c7:1a:52:37:b3:e1:17:91:97:48:3e:12:e0:97:52:5c:09:
17:78:ff:6f:84:58:70:47:d8:73:f5:fd:75:1e:ea:ac:0a:26:
0c:3f:c1:e5:b4:b4:eb:cc:00:e2:37:dd:b8:44:ce:2d:d6:03:
5d:5f:81:72:b7:58:81:cf:4d:f9:ca:20:c0:3b:58:46:70:d8:
97:49:df:30:fc:4d:bc:7e:b6:da:0c:36:37:99:f4:c4:39:14:
24:12:8c:20:5b:14:1c:80:fb:0c:1a:95:a2:71:71:b9:42:7a:
99:d8:9d:19:08:b2:14:55:40:fc:9f:4d:d9:fc:d9:b4:b4:8a:
c3:20:c3:f7:e3:9f:bf:97:46:4b:92:d2:8f:82:b8:4b:06:fd:
f3:14:b2:cf:af:c8:80:67:0e:13:3f:8e:39:88:01:48:0d:d4:
d1:68:e1:3d:85:08:dd:8b:84:30:ca:54:0a:2e:1d:a5:48:11:
f8:cb:c1:42:71:da:b5:01:e4:47:22:51:3e:a5:6b:a2:55:ab:
58:03:d4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:56 2025 by rpki-client