Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B328CF66CD8911EF90F367A3762E951A.roa
File: B328CF66CD8911EF90F367A3762E951A.roa (raw, json)
Hash identifier: la+9VV6Tpw06CDOdmrLUtE18ug6VX0UiRBP4Th3N0m4=
Subject key identifier: 86:9B:8F:EF:7B:86:8F:96:EE:22:77:87:87:3C:0C:C6:07:A8:6A:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010047
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B328CF66CD8911EF90F367A3762E951A.roa
Signing time: Wed 08 Jan 2025 06:27:57 +0000
ROA not before: Wed 08 Jan 2025 06:27:53 +0000
ROA not after: Sat 13 Dec 2025 06:27:53 +0000
asID: 984
IP address blocks: 156.252.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65607 (0x10047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 06:27:53 2025 GMT
Not After : Dec 13 06:27:53 2025 GMT
Subject: CN=677e1aed-bd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:21:20:81:d0:af:d0:21:cf:cc:1d:08:38:
da:e6:ab:55:60:dd:c4:73:bb:58:81:dd:5a:95:60:
f4:31:9d:6d:4c:0c:7a:7f:c1:ce:a2:a6:7c:dd:81:
03:ca:89:3a:b3:ef:cb:e3:81:b3:dd:d1:22:82:f4:
7b:19:b2:70:11:98:a7:b7:da:a6:19:69:2a:df:2f:
21:81:07:bc:81:66:38:b4:8b:84:1c:1e:b1:84:b8:
0e:bd:08:24:46:f3:2d:29:ee:82:e4:80:db:c7:21:
86:73:e2:a0:7e:1e:73:bb:90:cb:38:54:5a:29:b3:
8a:69:88:6a:91:33:ae:c0:7a:b7:b0:a0:18:f2:9b:
04:6c:66:35:82:0a:c6:45:fa:37:0a:74:cf:8e:1e:
11:1c:45:73:ee:03:02:c3:41:ca:1a:9f:c9:9b:56:
15:fb:49:c0:41:56:7c:eb:c7:e9:11:c0:a2:ac:5f:
cc:a6:4e:94:e5:de:4a:48:d2:2c:c3:a9:a8:cd:19:
f1:40:8d:d1:ec:72:49:7c:0e:f8:c2:ba:f9:9a:92:
1b:eb:e5:9c:e6:38:1f:5e:3a:a3:0e:bf:20:09:13:
de:b7:1b:30:2c:74:a5:bc:aa:ad:93:33:49:07:6d:
18:56:3e:b6:20:15:9b:00:5d:bd:45:3a:b5:6e:dd:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9B:8F:EF:7B:86:8F:96:EE:22:77:87:87:3C:0C:C6:07:A8:6A:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B328CF66CD8911EF90F367A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.50.0/24
Signature Algorithm: sha256WithRSAEncryption
46:bc:7d:bf:da:f5:6a:03:4b:d7:4d:70:c3:46:f3:b5:de:0a:
f2:81:60:2e:30:a2:63:48:ca:c5:de:6d:4f:6b:01:f8:71:c0:
d7:72:bc:fb:cf:68:24:8f:50:6e:3e:e9:93:3c:16:65:84:0b:
e9:0e:5e:b7:be:34:b2:2d:62:17:63:f1:78:20:eb:53:b0:ff:
89:11:58:2d:26:1a:8c:78:98:a0:80:50:ec:05:5c:71:c2:13:
b5:3e:40:0e:e7:a2:5b:9c:67:5b:ad:c5:b6:ca:ad:d6:cd:7c:
14:96:18:1f:b7:68:0a:ed:f9:c4:e9:91:37:6a:c3:cf:2d:2f:
32:f3:46:57:01:00:e4:7e:41:10:19:22:f0:ae:a5:cd:06:01:
20:6c:a7:d1:71:a6:57:ec:79:72:93:da:d4:20:c6:73:dd:26:
63:ea:b5:91:b9:e3:5b:0f:03:d9:95:58:b0:93:68:e5:1b:8a:
48:48:8f:52:60:c6:54:d5:5c:2a:2d:8f:82:99:86:f2:d4:64:
87:80:cf:51:18:32:e7:f6:c3:c3:a7:1a:6f:ec:dd:3a:ca:4f:
3b:1e:a5:08:63:e2:b4:8c:86:fa:0c:cb:0e:5c:92:80:39:88:
88:83:a6:68:67:c8:de:72:66:9c:3b:39:6c:3d:05:af:59:dc:
e4:21:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:45 2025 by rpki-client