Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A728945EC33D11EF8DF10FA6762E951A.roa
File: A728945EC33D11EF8DF10FA6762E951A.roa (raw, json)
Hash identifier: N0rZL1K3MC6LNtSa7NCiv/El6Fg4MhElWR/owOqO968=
Subject key identifier: 47:1B:76:F5:9F:B9:73:5F:86:13:86:A9:11:6B:76:22:97:17:49:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EBA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A728945EC33D11EF8DF10FA6762E951A.roa
Signing time: Thu 26 Dec 2024 03:58:24 +0000
ROA not before: Thu 26 Dec 2024 03:58:20 +0000
ROA not after: Fri 10 Dec 2027 03:58:20 +0000
asID: 17561
IP address blocks: 156.244.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60323 (0xeba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:58:20 2024 GMT
Not After : Dec 10 03:58:20 2027 GMT
Subject: CN=676cd460-4ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:0f:95:83:c1:23:20:60:fc:14:e4:d6:6a:
5f:d7:fb:2e:7f:dc:d2:0d:d2:fa:a0:29:96:cf:93:
91:c5:72:88:21:16:22:22:24:8f:5b:e4:ec:c5:69:
79:43:55:5e:d7:a9:87:5c:b1:26:fa:0d:b5:54:d6:
ab:4b:4c:33:f7:2c:e1:17:a1:bf:1c:7d:51:0d:ba:
1e:84:01:87:4a:5a:cc:9e:d8:21:a2:af:fe:02:62:
d7:b1:16:f5:4a:5e:c1:a9:b9:27:99:fc:77:29:50:
6f:b5:30:2b:96:a3:0a:31:70:2c:9c:d5:8d:b0:85:
25:76:11:df:bd:f1:99:7b:ec:98:5f:35:cc:be:06:
11:a5:7e:d4:23:02:52:12:72:92:56:e9:e3:0a:76:
ae:cb:f1:d2:72:88:b1:38:be:9c:b6:72:3e:7d:6a:
93:4d:9a:c4:4a:9c:a3:72:9e:37:57:13:8a:86:c7:
ba:ed:bc:ec:d3:6d:d7:d4:ba:50:ae:c5:f0:d7:0a:
36:d6:32:8b:3b:ff:0d:65:ca:e4:07:a9:74:c4:ed:
15:99:96:65:98:c3:5c:ce:53:64:38:70:7d:93:af:
d9:37:f8:d1:67:09:00:9d:61:2c:5f:b9:0e:20:17:
ad:09:a0:bf:10:69:10:c8:f1:ee:92:96:7d:16:2a:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1B:76:F5:9F:B9:73:5F:86:13:86:A9:11:6B:76:22:97:17:49:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A728945EC33D11EF8DF10FA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.205.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e3:ad:aa:57:d8:4b:15:67:e6:77:b1:e4:40:34:fa:59:1a:
02:1e:45:e3:84:b1:9f:f8:a6:fa:06:50:c9:7b:cd:1c:10:aa:
ff:8d:c0:97:19:69:37:55:6c:a2:10:fb:e6:4e:cf:ce:38:53:
64:99:93:83:b5:2d:db:83:3e:49:a9:62:1e:48:57:c5:56:98:
c4:50:34:8b:f8:44:08:08:8b:dd:00:bd:b9:f7:67:a0:dd:2c:
c5:fd:89:87:c3:b6:b6:7a:29:20:66:df:c7:bd:ce:d3:a0:51:
6b:ae:4f:b0:31:89:b3:18:35:0b:ac:ca:55:4b:e0:b1:5a:90:
2f:13:27:df:b0:a6:62:7f:40:8d:ec:57:3f:86:18:9b:2d:e5:
ad:0c:c9:c2:60:66:f4:a3:44:a2:78:b4:80:b5:19:21:bb:a4:
71:eb:92:1e:0f:81:55:78:5b:98:44:62:ce:ec:41:ea:b0:2f:
f9:46:f0:a2:57:77:75:b1:45:f4:36:01:2c:00:55:6f:b8:3d:
df:f2:b7:d5:01:b8:a2:c9:97:47:c2:64:13:05:e1:e7:3c:6e:
90:7d:cb:68:ca:53:ab:c9:09:89:f8:d8:e4:91:48:16:21:51:
05:eb:eb:b9:63:74:87:58:ce:4e:a3:af:6d:3b:a1:5c:b3:cf:
f7:4c:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:54 2025 by rpki-client