Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61B033CCD4011EFA2F9CD40762E951A.roa
File: A61B033CCD4011EFA2F9CD40762E951A.roa (raw, json)
Hash identifier: +jA34jAaMwMXnActXvt881FyArq1ib/8S1sQPbMn1bY=
Subject key identifier: 2C:09:4B:9A:1D:11:6A:1A:29:B8:D7:F1:71:FC:70:D6:F3:A6:55:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61B033CCD4011EFA2F9CD40762E951A.roa
Signing time: Tue 07 Jan 2025 21:45:02 +0000
ROA not before: Tue 07 Jan 2025 21:44:58 +0000
ROA not after: Sat 13 Dec 2025 21:44:58 +0000
asID: 984
IP address blocks: 156.243.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65133 (0xfe6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 21:44:58 2025 GMT
Not After : Dec 13 21:44:58 2025 GMT
Subject: CN=677da05e-5844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:e7:41:37:fa:2b:6e:6b:08:a3:3b:c1:49:
99:64:20:a4:44:60:a7:19:ac:1c:8b:3a:6d:5f:d2:
19:9c:09:38:8e:e7:f3:25:e7:e0:88:0e:1f:39:b0:
af:72:80:1f:bc:fa:a9:ad:8b:54:69:71:e5:cd:97:
f5:17:36:11:17:cd:b9:89:43:bb:45:de:7e:c3:8d:
2c:9e:83:d5:4d:13:7b:93:91:4a:dc:4f:48:a6:6b:
5e:83:c4:a8:1f:04:5e:3a:f8:c6:db:d3:1d:7b:e0:
3d:61:88:f2:8f:11:3f:1d:69:f1:7a:dc:81:85:90:
85:75:92:93:73:d8:f7:fd:cd:87:3c:a2:28:a8:f6:
72:09:59:e8:2a:ff:0c:f6:f2:3e:e2:cd:37:e6:92:
34:6d:07:4b:d0:70:bf:98:53:4f:99:70:3c:69:ac:
f0:a7:67:f9:84:75:f7:97:85:f2:a2:27:24:e3:ec:
b8:67:32:58:fb:e7:65:a3:b4:7e:5e:4c:29:ef:f1:
5b:ad:7d:7c:42:40:89:c5:e2:52:d1:81:79:a8:c8:
7e:aa:0b:8f:a6:60:72:62:a6:1d:59:a5:13:86:13:
9f:cc:c2:15:1d:d1:4b:9b:47:c5:1d:95:5e:7d:e6:
1c:e5:0c:cf:69:b5:4a:53:54:25:f4:f9:99:cc:2b:
f8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:4B:9A:1D:11:6A:1A:29:B8:D7:F1:71:FC:70:D6:F3:A6:55:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61B033CCD4011EFA2F9CD40762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.95.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e5:a2:f7:08:96:6d:d0:b1:32:93:8e:ba:43:94:61:65:8d:
0c:a9:46:08:a3:0d:1a:dc:12:c6:18:f8:83:af:68:8d:a6:ba:
41:9f:83:c1:68:20:c7:d2:03:93:a0:0f:8f:42:61:c8:f0:b0:
cf:09:8b:26:b6:eb:63:9e:8a:84:d7:ab:1c:14:05:d3:e6:55:
cb:3e:29:7e:5a:44:a9:cd:c1:40:97:06:39:04:15:05:51:fe:
f8:dd:9f:cf:16:a7:5c:59:e1:40:7e:c3:94:f0:06:27:ac:c8:
9a:c3:67:65:41:78:83:49:bd:36:bb:47:c7:a5:a5:44:02:d3:
da:fd:4a:86:ad:9a:d5:6b:03:36:77:de:43:dd:77:ea:d3:85:
7f:85:9c:7f:92:0f:2e:d5:ca:3e:ed:f8:2e:1c:ae:d4:f2:93:
d6:1c:c5:a3:eb:43:6c:0d:16:9d:14:bc:77:19:61:72:f6:73:
da:a3:e2:36:cb:80:22:29:8d:09:a7:12:1b:71:dd:13:ee:6d:
40:a0:4d:42:a7:a4:69:80:9e:5c:95:eb:88:8e:e5:ec:c0:4f:
68:ab:c2:27:d3:fd:16:ab:d1:dd:3c:3d:6f:e5:8e:45:3d:f8:
d0:d2:ee:ad:ea:ee:da:0e:91:b0:9f:0a:c4:68:16:bb:d5:5e:
17:88:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:55 2025 by rpki-client