Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADC74534D31F11EF9291E490762E951A.roa
File: ADC74534D31F11EF9291E490762E951A.roa (raw, json)
Hash identifier: Dbf8PcJBqvjVzYQckfE3SYj8I/ICHESU08TnF1uTTw4=
Subject key identifier: E3:A5:A9:E8:50:FB:FF:CD:98:3A:36:91:99:82:C9:47:8E:DB:D6:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010887
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADC74534D31F11EF9291E490762E951A.roa
Signing time: Wed 15 Jan 2025 09:04:09 +0000
ROA not before: Wed 15 Jan 2025 09:04:05 +0000
ROA not after: Mon 03 Jan 2028 09:04:05 +0000
asID: 17561
IP address blocks: 156.254.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67719 (0x10887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 09:04:05 2025 GMT
Not After : Jan 3 09:04:05 2028 GMT
Subject: CN=67877a08-d432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:36:90:72:6f:62:0c:5c:f2:c2:fe:71:aa:
8a:2a:dd:be:52:b8:12:b0:d0:96:89:69:59:75:0b:
ab:a7:85:52:38:a6:af:15:c7:b8:57:85:5e:4f:d0:
2f:e8:f9:4b:a1:f8:8b:b9:e9:9a:68:b8:5f:bd:03:
2b:54:4b:b6:b1:dd:a7:5c:04:d2:7b:8d:33:43:04:
4a:58:37:e6:5a:a4:a6:20:fa:b6:66:fb:50:44:f8:
14:5c:09:ba:a3:00:61:cc:8f:ea:8c:51:55:3e:32:
8f:8d:92:e2:cc:9c:ef:88:2e:54:d3:ec:a4:d2:9a:
e9:28:05:c6:e2:2d:e4:1f:cb:ff:3d:7e:61:91:ee:
c6:93:2d:48:85:4c:2b:f1:82:03:68:c3:56:23:ad:
18:9b:d7:28:d3:88:0d:d7:ae:27:99:f2:43:c9:0d:
91:1b:fd:c1:2f:6e:0c:ff:7e:29:03:bb:b0:06:98:
89:53:9c:65:b3:f3:31:9d:01:d1:0b:5a:80:2c:12:
33:df:c2:49:b9:60:2d:fc:a0:2a:23:4e:73:a6:79:
83:33:37:1e:cd:a6:1c:cd:35:7c:00:bc:5d:56:cc:
a7:bb:cf:73:a7:62:b4:66:f7:fd:01:86:a3:75:d8:
3b:4c:c3:84:7f:a7:d8:ba:65:e4:bb:cf:28:15:6f:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:A9:E8:50:FB:FF:CD:98:3A:36:91:99:82:C9:47:8E:DB:D6:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADC74534D31F11EF9291E490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:99:2c:99:58:e3:03:32:89:d6:a6:a9:8e:0a:33:ce:80:66:
89:fc:04:d5:58:32:56:0d:18:82:55:cc:86:c8:e8:08:52:b9:
ed:c0:1f:de:3d:7d:3a:c0:e6:ec:03:e4:54:fc:41:62:e9:20:
67:2a:28:14:8f:8e:98:0b:49:f2:d1:92:41:b0:da:f2:a0:db:
ea:48:e3:1d:71:16:e3:14:91:22:5f:bb:9c:5d:4d:42:be:43:
f6:0e:4c:cc:ca:96:47:2d:a2:d1:24:d6:9c:4e:df:cd:29:fc:
eb:9f:dd:d0:98:25:0b:94:ed:58:01:95:71:c8:ec:9c:1e:11:
ef:0d:5b:48:ea:ce:6e:6b:9a:1d:e0:38:17:d0:19:62:ae:1f:
45:b2:c0:8e:9f:83:2d:b8:91:94:1d:79:09:52:69:05:b6:00:
7d:de:0e:8b:a7:66:f1:96:4e:33:c7:f0:11:e5:73:9c:f0:f8:
11:44:b0:36:9f:0a:06:9c:f9:16:c1:6c:ae:ea:74:b7:cf:58:
67:3e:5c:6d:3f:d1:35:67:37:ab:59:43:74:56:02:45:f8:14:
1f:c6:ce:6d:a1:26:4e:c0:9d:db:50:b9:dc:78:5e:f1:14:8b:
fa:99:b4:18:3a:d9:98:00:d6:06:d2:38:8c:b1:d9:66:54:ed:
17:1c:59:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:56 2025 by rpki-client