Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB0A55D6CD7811EF8F335CB7762E951A.roa
File: AB0A55D6CD7811EF8F335CB7762E951A.roa (raw, json)
Hash identifier: fhykFcA0YD3aRjvj13nNkQRUxXlfXavZxrLPThSGlWc=
Subject key identifier: 82:33:04:F3:B3:16:56:32:4D:CB:FF:63:AF:D5:22:19:60:01:46:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB0A55D6CD7811EF8F335CB7762E951A.roa
Signing time: Wed 08 Jan 2025 04:26:02 +0000
ROA not before: Wed 08 Jan 2025 04:25:58 +0000
ROA not after: Mon 13 Dec 2027 04:25:58 +0000
asID: 17561
IP address blocks: 156.250.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65477 (0xffc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 04:25:58 2025 GMT
Not After : Dec 13 04:25:58 2027 GMT
Subject: CN=677dfe5a-87d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:08:66:d8:c0:87:86:07:91:9a:fc:5f:95:67:
8a:97:5e:06:a3:47:c4:4b:a3:bc:92:94:7d:90:a6:
08:05:6a:6f:c5:fd:d5:99:42:be:ce:1c:20:d9:9f:
fb:4b:00:76:58:78:27:8d:64:f8:52:0f:7d:8b:be:
b2:1c:0f:f7:1b:72:2d:ec:0c:29:62:2c:9d:b1:f1:
8f:24:29:03:40:af:21:cd:16:6c:fd:4d:2c:f2:c4:
79:7f:21:ac:1e:c5:44:7b:73:61:c1:5e:4d:29:0e:
96:ad:c0:4d:8d:5c:88:19:1a:fb:44:f4:ef:4e:3a:
ec:b9:53:3a:01:1b:a0:a9:ac:fe:44:a9:9b:ff:bb:
8c:fd:c0:bd:dc:18:46:dc:8b:b4:b5:6f:99:3b:2b:
83:6e:8d:66:44:99:48:52:83:d1:ab:4c:2c:21:74:
df:3a:66:1a:6a:63:39:cd:30:86:f0:ec:71:86:a1:
f6:8e:76:4f:5f:41:ed:1f:03:60:d2:35:42:69:56:
17:d5:3e:f0:66:7a:ef:cd:9b:5f:a6:b1:7a:50:4f:
79:4b:d5:e0:9f:e5:bd:fb:14:cf:fa:67:55:71:71:
eb:b1:92:ac:f1:10:86:7e:66:e8:a8:b9:00:80:a0:
4e:66:f9:ec:80:da:9c:12:23:38:83:1c:21:29:93:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:33:04:F3:B3:16:56:32:4D:CB:FF:63:AF:D5:22:19:60:01:46:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB0A55D6CD7811EF8F335CB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.39.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ae:a9:e9:5b:48:d2:80:83:b1:51:07:fc:bd:8b:31:5e:ef:
95:77:28:a9:4e:cc:71:90:02:7c:ce:97:f0:18:96:ec:ef:ba:
b5:d3:c3:c7:29:ee:6d:dd:7e:76:e0:a1:1c:e6:57:b4:55:f6:
11:c1:e5:56:bd:ec:4c:40:5c:6c:4a:eb:5a:e9:31:8c:80:87:
02:d1:23:58:cb:bc:b7:a1:90:f9:ce:e1:a4:80:78:62:a3:30:
93:b4:b8:3b:e2:65:05:f7:62:76:5e:33:a3:7e:83:74:bf:61:
1f:fa:1e:30:0f:97:d0:68:22:c9:db:f6:0f:27:fd:23:ff:61:
23:75:81:fc:29:db:7b:ac:42:6a:5c:06:da:47:49:a7:a3:f4:
a5:4d:3c:84:ea:96:3c:d5:ea:c7:08:6e:6b:8f:83:06:32:8d:
d5:8f:04:c5:20:4d:98:16:af:91:02:fd:b1:81:6b:cd:86:34:
33:48:5e:6b:72:b8:c4:23:e5:08:ce:91:ff:64:0a:c7:2a:45:
31:37:22:d7:05:bd:79:61:93:13:44:94:87:81:ce:c1:53:42:
c3:05:c5:92:29:d4:f8:3e:ee:93:f6:97:0d:04:9c:7a:26:62:
08:b1:a3:70:b5:c3:73:21:6e:45:20:d7:83:cb:6e:57:6c:d6:
aa:e7:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:37 2025 by rpki-client