Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A99A2016CCE511EF96954783762E951A.roa
File: A99A2016CCE511EF96954783762E951A.roa (raw, json)
Hash identifier: lgAyu0/IzT+0qpaplP/MgdXSE+zOjSfDhAs5n6u7T/k=
Subject key identifier: 06:D9:8E:1E:C1:69:EA:77:E5:81:D5:A1:FC:9E:CA:84:12:D7:39:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A99A2016CCE511EF96954783762E951A.roa
Signing time: Tue 07 Jan 2025 10:53:44 +0000
ROA not before: Tue 07 Jan 2025 10:53:40 +0000
ROA not after: Mon 13 Dec 2027 10:53:40 +0000
asID: 17561
IP address blocks: 156.233.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64459 (0xfbcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 10:53:40 2025 GMT
Not After : Dec 13 10:53:40 2027 GMT
Subject: CN=677d07b8-ae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:68:38:02:f1:48:9f:8f:b7:e5:da:74:01:
37:5c:9f:53:cb:47:14:41:4e:8a:48:e8:a7:41:b1:
da:1b:63:1d:6e:ef:31:04:c9:2c:c7:cc:ff:f6:63:
8a:e4:d8:53:36:b6:10:ad:db:a3:ec:92:69:29:4a:
e9:99:7c:b9:dc:7a:05:71:d2:a4:75:ac:bf:db:58:
7e:f8:1d:6d:23:d5:b6:5b:e3:b7:96:6c:87:ed:d8:
d4:df:52:56:d3:db:8a:19:0e:d8:85:4a:31:5d:e1:
f7:ff:08:3f:12:27:94:8d:12:8e:ec:64:e2:8d:34:
13:c6:3a:88:e5:fc:8e:7a:6e:dd:76:fb:f8:58:c2:
99:1e:f1:a2:d4:47:1a:ba:54:76:a6:a3:5c:e7:c7:
26:db:e3:35:33:fe:e2:48:e7:50:80:98:ef:50:6e:
9a:85:76:4c:93:84:99:21:e4:c3:62:38:5b:a8:ad:
68:1b:77:e9:64:33:4e:40:a4:ba:24:92:4c:98:54:
6f:a6:b0:55:e6:5c:7d:f5:0b:6f:fe:a9:70:36:aa:
70:90:a4:dd:b7:ff:eb:05:4d:2e:35:85:59:4e:00:
97:9a:1d:93:1f:40:35:30:0d:41:b7:6b:ce:a2:5c:
66:57:89:38:7d:94:51:74:15:4f:23:b6:de:43:92:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D9:8E:1E:C1:69:EA:77:E5:81:D5:A1:FC:9E:CA:84:12:D7:39:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A99A2016CCE511EF96954783762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.250.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7b:e3:9b:5e:8c:b9:52:1a:8f:17:e8:e8:53:63:45:6f:ab:
4a:f0:68:aa:74:ab:67:e7:54:18:82:3d:50:c2:91:2c:6d:02:
c5:24:3a:97:ca:e8:83:f7:cf:d2:94:2f:fd:a1:e9:62:1d:ce:
6c:37:0f:1f:7a:aa:e5:b1:f1:8c:16:04:ee:ad:00:1a:9d:01:
47:b6:42:4f:7c:b5:4f:d7:88:92:c2:b4:fd:16:e5:dd:a1:d1:
78:ae:3b:b4:c8:2d:50:8a:32:64:60:af:3a:28:6d:07:e2:4e:
6f:4f:2b:33:79:3c:bb:b9:da:c5:ff:2c:50:73:a0:5b:41:db:
4b:38:2c:61:52:18:6b:b4:75:76:0e:ff:fa:12:02:1e:78:ec:
83:41:f9:7c:46:6c:ae:07:e6:33:b7:f1:ec:d2:9a:ac:14:1c:
fe:df:13:45:9c:21:47:13:f1:52:70:0d:40:7b:99:12:ef:46:
95:54:00:00:bb:7b:db:1e:14:c2:0f:95:44:ca:a4:7d:44:a8:
36:6f:c0:f3:04:b7:f5:fb:25:ce:37:a8:1e:ec:5e:6c:be:d9:
91:ae:bf:23:b3:47:b0:1b:6e:5c:48:6d:37:08:cc:4c:03:ab:
55:d9:b6:c9:32:c0:6b:23:13:cf:c3:23:1b:88:63:b5:dd:bb:
c0:ae:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:14 2025 by rpki-client