Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CA668B8D17911EFA9D79498762E951A.roa
File: 9CA668B8D17911EFA9D79498762E951A.roa (raw, json)
Hash identifier: J5PkqJEyuYSnnrkukMNENNHBZFYQ7rREmqzcvriDLvk=
Subject key identifier: B8:87:31:0D:61:87:E4:B7:5B:35:8D:90:17:8B:C5:ED:94:23:14:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010668
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CA668B8D17911EFA9D79498762E951A.roa
Signing time: Mon 13 Jan 2025 06:42:52 +0000
ROA not before: Mon 13 Jan 2025 06:42:48 +0000
ROA not after: Tue 18 Feb 2025 06:42:48 +0000
asID: 203020
IP address blocks: 156.251.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67176 (0x10668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 06:42:48 2025 GMT
Not After : Feb 18 06:42:48 2025 GMT
Subject: CN=6784b5ec-b516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:32:6f:8c:87:5b:76:c1:3f:97:26:1e:8e:
b9:fa:e6:00:65:3c:76:ba:ac:c3:85:2f:fc:f4:59:
72:ac:dd:53:9c:6f:7c:84:be:70:5c:04:c2:63:a8:
77:25:7f:b4:fd:41:05:d0:e5:19:8a:81:20:18:4d:
da:aa:25:b8:27:66:91:0c:d5:c7:3b:2e:bc:48:b3:
c9:58:22:6f:87:48:55:94:87:8e:62:95:76:cd:4c:
be:19:a8:77:2b:72:be:a6:4e:36:ef:07:26:64:58:
b8:5f:1d:ef:c0:86:63:6f:25:cf:d3:f6:26:3a:d3:
6c:41:13:42:6e:9e:d3:7f:03:e6:93:7c:40:2f:9f:
3a:74:ae:87:17:9e:6b:c9:ad:d5:77:94:b6:ec:64:
02:62:d8:0c:64:eb:b4:75:a9:67:ac:23:7e:e4:e2:
5e:96:d5:da:73:f2:f9:32:f2:f3:5e:31:8f:4b:ad:
41:70:a5:81:e8:9b:f7:12:bb:32:2e:e2:66:8d:55:
f8:a5:1d:af:45:bc:b9:e2:a9:61:a9:7e:76:a0:c5:
40:45:e7:c7:37:b9:6c:dc:d3:dc:4a:a4:19:d8:8d:
12:ee:aa:41:ee:c0:18:1c:aa:ed:87:57:fc:05:57:
7b:b8:90:84:b1:a2:60:49:ae:44:ce:69:86:36:47:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:87:31:0D:61:87:E4:B7:5B:35:8D:90:17:8B:C5:ED:94:23:14:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CA668B8D17911EFA9D79498762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.112.0/21
Signature Algorithm: sha256WithRSAEncryption
16:6f:27:47:ea:5a:62:cf:6f:c9:15:c0:29:74:0f:4b:83:11:
c2:c0:3f:35:43:52:85:bc:c0:bd:21:38:f4:e1:12:7c:94:bb:
ec:6b:73:eb:dd:b5:79:02:3a:0a:0e:33:51:02:a4:32:d9:20:
00:d0:eb:50:31:90:c9:a2:be:2d:73:8a:7d:1a:3d:ab:0d:4f:
75:c2:6a:6e:62:4c:b7:3e:06:db:94:e7:3a:30:93:73:99:62:
1e:61:be:e7:ea:93:12:fc:19:e9:9d:c7:b2:4b:4f:f1:1d:b5:
39:9e:ca:44:5f:aa:2f:51:1a:66:09:d1:41:4c:7b:be:f3:c2:
ed:af:8e:18:43:81:42:8c:c2:8a:fa:a4:e5:d2:26:31:eb:a0:
b1:5f:7c:2c:09:23:42:1a:6c:34:00:00:7f:71:5c:6e:b4:52:
ec:bc:02:ef:56:35:a5:8c:1f:6f:84:04:20:10:dc:d7:7a:06:
75:a1:48:47:35:8d:24:15:4d:58:0d:4b:dc:38:be:57:52:d7:
4a:a8:ab:5b:fd:bd:5a:2d:77:08:45:1b:a4:0b:a6:9e:77:c6:
19:84:78:1a:c7:79:27:ca:31:c9:23:fe:bd:a7:19:1f:4c:bb:
b6:11:4e:77:5e:a4:e3:67:8b:b6:a1:3d:41:9a:8d:c1:0c:d8:
6d:6a:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:50 2025 by rpki-client