Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99736022CD7F11EF87D32864762E951A.roa
File: 99736022CD7F11EF87D32864762E951A.roa (raw, json)
Hash identifier: 3PEkN2Ii7FwD6l8J0lGGiDzm2HXQqI2VpJzUvyERhiY=
Subject key identifier: B4:6B:62:02:06:36:50:6E:48:1A:39:72:5C:02:70:D1:A8:D1:42:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99736022CD7F11EF87D32864762E951A.roa
Signing time: Wed 08 Jan 2025 05:15:39 +0000
ROA not before: Wed 08 Jan 2025 05:15:35 +0000
ROA not after: Mon 13 Dec 2027 05:15:35 +0000
asID: 17561
IP address blocks: 156.251.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65529 (0xfff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 05:15:35 2025 GMT
Not After : Dec 13 05:15:35 2027 GMT
Subject: CN=677e09fb-2cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:6d:8e:40:8b:b5:6d:2e:3f:e9:9c:9a:ea:
95:13:42:bf:67:7a:2e:61:ff:7b:4d:a2:e6:3f:fb:
bf:e9:85:f0:bf:48:ec:fa:ab:51:cc:db:40:e5:f9:
88:25:1d:a2:c2:36:68:98:3b:81:ce:95:0f:bc:cc:
7a:bb:62:77:e8:5b:a4:ef:8b:8b:1b:3c:7f:49:d4:
e7:7f:fd:4a:63:6a:0f:f6:ab:72:f3:09:6c:6b:1e:
a9:2f:0d:3b:9c:d7:a3:d8:d1:c7:d1:d5:68:70:b6:
fe:e5:c7:24:d4:5e:9e:37:68:ae:62:39:72:25:e3:
a9:22:3c:e3:0e:66:f7:48:a7:c9:8a:aa:07:4e:8f:
40:f2:95:c7:15:9e:5f:42:8d:75:cf:09:79:ee:20:
f6:19:3b:30:1d:5d:7f:ee:06:46:07:c0:e4:e6:16:
8a:31:da:bb:db:bf:c9:48:bc:b9:d1:3f:88:73:d5:
4a:53:5c:d7:ba:f8:c8:2d:46:03:53:25:f8:cf:e6:
71:fb:8d:ca:e2:f5:c0:51:97:8d:d5:16:8d:a2:02:
41:82:70:47:d5:26:fa:7d:03:06:36:59:86:62:f4:
6d:7f:89:32:29:ce:db:b2:9b:bc:74:49:5c:95:f5:
3a:6a:9a:36:d8:18:71:cb:ca:9c:ff:eb:3e:aa:c9:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6B:62:02:06:36:50:6E:48:1A:39:72:5C:02:70:D1:A8:D1:42:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99736022CD7F11EF87D32864762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.122.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3b:d5:97:ab:df:d0:7b:0f:60:ca:e3:4e:da:23:80:7a:18:
f0:73:d2:6c:ba:5b:34:43:3b:c8:1c:70:2b:80:b2:60:ad:60:
cc:13:75:20:4e:44:d1:89:b3:e3:b4:56:ac:e6:4d:fa:d0:04:
67:4c:58:df:02:14:a7:ea:2d:ca:5e:6e:ed:c9:0c:5b:09:fe:
6e:2c:e9:85:3c:87:ce:d4:14:a9:c7:20:98:17:a6:af:17:e6:
a7:02:57:1e:f3:f8:e9:b7:ad:03:0b:22:7b:dc:49:40:35:14:
8c:47:1e:02:06:5a:aa:4e:df:a6:8b:9b:92:c5:4f:12:a4:ad:
1c:b2:11:9c:b7:eb:71:a3:0a:17:9d:de:13:55:cb:9f:6c:6f:
7c:24:a8:d6:72:f8:2b:ab:5d:9d:db:e5:51:30:8c:6a:73:9a:
82:f7:d5:5d:1e:e9:04:b7:74:e7:ba:7b:e3:ac:ac:fa:dc:f4:
5a:43:d3:c6:d5:a2:c8:3e:e5:bd:13:de:16:93:79:92:98:19:
15:ff:9a:be:23:2a:56:cc:22:39:16:de:4c:19:4b:e3:27:19:
06:9d:c7:8f:4c:26:6e:a9:d9:0e:bf:a1:d9:88:43:76:0d:06:
51:72:60:b6:79:c3:07:7a:63:73:c1:d8:ba:1d:18:58:27:04:
96:66:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:09 2025 by rpki-client