Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C0DC58C94511EF9B5C1A73762E951A.roa
File: A0C0DC58C94511EF9B5C1A73762E951A.roa (raw, json)
Hash identifier: tv1NORYzQgStSKwvPsxO9fL7XyMnuktSEKhVs6slyXg=
Subject key identifier: D4:AD:CB:64:8F:45:F7:AF:38:76:3E:80:2D:2A:11:69:F1:84:5A:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F35A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C0DC58C94511EF9B5C1A73762E951A.roa
Signing time: Thu 02 Jan 2025 20:10:36 +0000
ROA not before: Thu 02 Jan 2025 20:10:32 +0000
ROA not after: Mon 13 Dec 2027 20:10:32 +0000
asID: 17561
IP address blocks: 156.225.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62298 (0xf35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 20:10:32 2025 GMT
Not After : Dec 13 20:10:32 2027 GMT
Subject: CN=6776f2bc-df2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2e:21:1f:0f:83:28:8d:38:9d:d1:bd:c6:d5:
aa:eb:67:79:da:e4:a6:f0:de:c4:86:6e:81:7a:77:
e9:76:67:2d:8d:cd:1d:38:a3:8a:21:98:9d:ac:1e:
f2:0a:02:67:03:09:24:ee:71:4a:e9:e1:4c:70:f5:
bf:2f:23:b0:bb:08:5a:85:07:84:41:a9:67:f7:56:
a0:fb:7b:84:56:1a:6c:b7:76:68:62:99:4c:47:e7:
65:44:12:cd:37:fe:bf:78:5e:a8:96:13:ac:fa:f9:
75:47:10:98:ef:6d:85:a1:69:a3:22:09:15:95:67:
5e:44:11:65:17:57:1b:2f:84:3b:50:e8:b8:f6:00:
a4:63:6c:43:c2:cb:30:73:85:99:8a:0a:e7:16:56:
3a:5f:e9:c0:45:7f:7d:80:2b:f4:b4:5a:0c:25:8f:
37:5f:e8:dd:94:5a:89:78:7e:11:6c:6b:79:74:4e:
12:49:ec:eb:d9:87:e8:1b:4a:85:4d:05:ed:7e:c4:
95:f8:7c:16:bf:5c:92:08:3c:35:c7:49:14:42:e2:
56:fb:d2:2c:40:6f:9b:49:01:c4:e4:00:09:b1:7c:
c9:57:60:90:a8:5f:c6:a4:d4:4b:c3:0b:c9:02:0e:
42:bb:de:62:c6:5b:ad:27:9d:24:16:10:77:51:29:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AD:CB:64:8F:45:F7:AF:38:76:3E:80:2D:2A:11:69:F1:84:5A:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C0DC58C94511EF9B5C1A73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.40.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:79:8d:af:73:94:bd:31:21:85:be:0d:91:70:a9:f1:c5:fb:
25:14:98:b1:37:4e:03:75:04:fa:18:b0:10:4c:fc:25:b8:28:
75:24:1e:6f:2e:05:47:89:d3:3e:2d:b7:64:1b:cd:e8:1b:cb:
81:79:f2:bd:65:97:e4:88:3f:e5:f7:ac:df:a3:b8:ca:ba:2d:
f4:3f:9f:77:2a:70:89:bf:35:80:01:a5:d4:f4:d8:8d:75:3b:
77:c2:68:ba:40:34:57:02:3c:d0:63:23:72:bd:9e:80:02:5b:
b9:e7:ca:0e:10:b7:5f:58:2b:e0:4e:7c:f7:72:01:ae:0e:1d:
eb:81:be:cc:05:28:bf:22:e3:a3:9a:56:27:9d:18:20:8d:61:
03:17:88:4b:eb:4e:ae:93:e1:25:0c:ff:98:10:9a:b7:a1:63:
2e:52:6e:de:66:2a:ab:33:70:a2:48:4d:e4:99:61:4d:ec:a4:
ae:0a:bd:3f:fb:4d:37:39:fe:fa:b3:2f:63:15:bb:48:b3:c5:
a6:df:88:dd:db:3c:30:ac:da:b6:e2:35:45:b8:e5:8f:45:3a:
ba:dc:fc:26:f2:73:f7:d3:c1:45:e6:55:b0:b3:06:12:4b:cf:
a6:09:24:18:58:fa:36:5d:01:4f:f5:bd:19:3b:9f:f3:6b:51:
f3:f4:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:16 2025 by rpki-client