Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1A0DE3CC99711EFA58DE88F762E951A.roa
File: A1A0DE3CC99711EFA58DE88F762E951A.roa (raw, json)
Hash identifier: zvepiqZ7im7mAOm9IuQUdbSBIjHhJ9/e3CAlO1pzPwI=
Subject key identifier: 29:4D:D7:95:07:05:19:27:2D:AB:F5:85:D0:BE:50:DE:61:0F:27:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F621
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1A0DE3CC99711EFA58DE88F762E951A.roa
Signing time: Fri 03 Jan 2025 05:57:36 +0000
ROA not before: Fri 03 Jan 2025 05:57:32 +0000
ROA not after: Sat 13 Dec 2025 05:57:32 +0000
asID: 984
IP address blocks: 156.233.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63009 (0xf621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 05:57:32 2025 GMT
Not After : Dec 13 05:57:32 2025 GMT
Subject: CN=67777c50-e6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:60:20:67:c8:27:64:cd:94:29:42:0c:f3:
27:65:16:24:ea:d6:af:54:df:bb:fe:47:b3:35:eb:
8f:5b:30:dd:05:77:14:43:b9:91:72:15:cb:13:83:
d4:f9:7d:b5:11:c8:44:19:64:87:7b:d7:4e:1d:bf:
4a:0c:e8:bb:4d:28:7f:96:99:77:c1:de:60:cb:0d:
f4:92:47:94:ef:a5:fd:4b:b8:7c:e4:50:d2:6f:41:
a2:15:01:34:03:4d:ce:8d:cf:ea:e6:a3:7a:62:45:
ac:89:62:69:5d:bc:2b:28:c0:87:96:01:b9:9f:e4:
2c:2a:5d:d4:7e:5b:a8:30:66:d9:7c:10:a6:2e:28:
ad:00:75:b7:73:54:de:10:9c:ba:7e:fa:90:5a:d4:
24:54:fd:d2:83:85:3c:51:f2:6c:46:b7:f5:92:64:
fe:b7:9d:c1:7f:1d:8c:87:af:12:1a:a9:95:6b:ab:
f1:3a:8e:cb:e1:99:40:e8:e3:f8:9d:1b:46:49:da:
ca:c9:1a:a5:fb:bc:b5:22:16:d2:67:fd:7a:32:aa:
51:ce:5f:d9:ba:93:b1:97:d9:a2:84:3e:b6:5c:30:
d3:6a:87:e5:60:8d:cd:ca:71:5b:37:a6:66:fe:13:
1f:14:76:fb:99:08:dc:ff:77:2e:a5:33:2e:54:73:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4D:D7:95:07:05:19:27:2D:AB:F5:85:D0:BE:50:DE:61:0F:27:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1A0DE3CC99711EFA58DE88F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.149.0/24
Signature Algorithm: sha256WithRSAEncryption
77:73:c4:3a:e3:fd:fb:e6:1a:19:73:f6:08:a9:86:96:0d:25:
f7:50:a3:73:ca:97:f8:bc:c8:45:cf:af:28:e3:0a:52:ba:86:
ed:e3:aa:88:cd:a1:38:fc:19:03:fe:ca:07:2e:cf:e7:b4:45:
84:6d:e3:39:1a:d1:b2:78:8e:16:18:c9:c3:6a:f5:fd:81:81:
14:5f:59:5e:e8:35:d9:11:f6:65:c1:eb:a2:58:8d:a8:6e:0d:
94:1b:a9:f0:55:c1:4f:6f:03:27:7a:a4:1c:77:2a:fe:2b:5a:
f9:6d:95:7a:f3:2e:a4:c5:ff:be:69:00:39:69:2a:df:d0:6c:
b0:e2:c6:49:11:c8:85:bd:fa:2e:4e:4a:c3:dd:25:16:94:d1:
01:0d:a0:d1:36:c4:fa:53:5e:0f:a4:4f:37:61:95:0d:a5:81:
5a:4c:5d:b7:f7:26:b9:bb:71:1c:7c:79:98:65:42:0d:3e:1e:
46:67:35:8b:38:b5:0e:cb:31:6e:56:3b:4e:14:80:20:21:83:
76:1a:9c:fe:48:0b:81:01:4b:2b:da:52:af:80:c9:31:0a:72:
3a:fe:a4:78:b1:e6:c7:4e:27:50:34:f6:b9:7f:93:1c:fc:08:
0b:1f:56:d5:0a:45:ce:63:94:4a:87:6c:e2:e5:6d:f3:d8:c5:
fe:48:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:57 2025 by rpki-client