Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2FEFDD0CF5F11EFAE542B50762E951A.roa
File: B2FEFDD0CF5F11EFAE542B50762E951A.roa (raw, json)
Hash identifier: x56tVmy1NPkxn8DfgV+Rcl+lwRFelv2CVCR0J1RwVlc=
Subject key identifier: 06:27:C9:56:50:8B:31:9E:6E:32:DA:0E:D1:F0:3B:CA:91:3F:77:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01055B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2FEFDD0CF5F11EFAE542B50762E951A.roa
Signing time: Fri 10 Jan 2025 14:32:21 +0000
ROA not before: Fri 10 Jan 2025 14:32:17 +0000
ROA not after: Wed 05 Feb 2025 14:32:17 +0000
asID: 4809
IP address blocks: 156.242.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 05 Feb 2025 14:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66907 (0x1055b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 14:32:17 2025 GMT
Not After : Feb 5 14:32:17 2025 GMT
Subject: CN=67812f74-3a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:87:f2:e4:03:8f:86:94:2b:2b:0e:80:05:
de:f5:8b:c9:d8:46:37:08:53:a5:e4:41:14:35:f0:
c1:19:bc:c4:dd:da:61:05:29:28:8c:f5:0d:1d:d4:
32:06:19:f9:ed:70:56:9b:8a:33:9d:2f:a5:75:a5:
2d:ae:49:40:46:39:83:3c:6b:82:a2:89:09:53:c5:
c4:2d:e7:5f:35:eb:45:2f:6a:90:11:8d:47:94:d1:
8e:ae:de:6a:d6:26:c9:87:47:5f:70:fe:08:dc:32:
dd:67:81:b3:74:59:13:5c:60:c9:64:39:bb:3f:01:
31:b7:f7:ad:76:cd:d2:85:a1:b9:a2:28:4e:9a:89:
61:18:f8:68:60:1a:b1:61:8c:f7:95:20:17:81:57:
14:35:44:a6:c5:84:12:32:54:22:ea:01:71:48:68:
46:c3:19:77:4d:33:7c:a1:d8:c7:c7:8e:69:2f:e4:
58:93:4d:8d:48:20:9e:35:fa:4b:76:ee:d5:b7:80:
d7:b4:4f:eb:10:df:e7:44:eb:e9:bb:4a:dc:c3:b5:
8b:0d:b9:b7:da:79:49:45:cc:93:e8:be:49:fd:bf:
8b:d1:ee:bc:26:97:27:39:7c:7f:36:fb:85:45:08:
ec:eb:74:89:2c:e0:6a:5f:36:f3:08:2e:0a:b0:86:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:27:C9:56:50:8B:31:9E:6E:32:DA:0E:D1:F0:3B:CA:91:3F:77:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2FEFDD0CF5F11EFAE542B50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.4.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f7:3c:b1:f1:3a:3b:6f:34:1e:7d:8a:5d:09:0f:62:77:bd:
d0:5a:32:1b:0f:a9:87:e1:bf:b5:97:90:79:8d:12:ac:dd:e1:
fe:f1:dc:e3:40:6d:3b:ee:25:bd:f2:ef:68:99:c9:74:8c:36:
5d:52:94:59:8f:15:8f:3d:41:34:7b:d8:ae:7a:fd:74:2f:d5:
d6:fe:68:d0:85:49:83:a4:cc:56:36:19:d6:cb:66:a3:f3:7b:
75:2f:12:94:ac:c6:5e:bb:87:6f:c1:c2:a1:1f:aa:e5:18:3b:
bd:8a:47:55:70:9b:71:95:6c:a8:14:73:96:3f:ac:5a:57:61:
d5:78:13:09:55:cc:2e:06:31:92:69:21:04:e2:1d:4d:fb:26:
9b:da:f7:fa:86:39:37:6b:a1:29:92:60:e1:d6:17:df:bb:fc:
64:90:1e:fa:e2:d8:80:70:22:1c:94:61:a3:66:b5:02:78:74:
a7:87:18:ed:74:dc:fb:6b:2e:0e:6c:d3:b4:18:3f:18:13:0a:
d4:43:0d:e3:6e:7d:21:9b:d4:54:74:24:0d:f2:2b:04:d4:7e:
d1:22:5c:41:30:1f:f3:c5:b5:bb:bc:61:75:37:89:d4:02:cf:
84:dc:b0:d6:19:99:79:3d:18:0b:23:48:93:16:e4:93:fc:43:
4d:2c:68:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:47 2025 by rpki-client