Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4C55410C95C11EF89730E84762E951A.roa
File: B4C55410C95C11EF89730E84762E951A.roa (raw, json)
Hash identifier: pXntPdMnK+l4kM4L/c8DqgPSJnbJAQ7wJfGSVx02csM=
Subject key identifier: 08:FC:19:39:B4:45:82:C1:40:EA:59:A3:84:A3:C1:75:F6:DF:39:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F436
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4C55410C95C11EF89730E84762E951A.roa
Signing time: Thu 02 Jan 2025 22:55:48 +0000
ROA not before: Thu 02 Jan 2025 22:55:44 +0000
ROA not after: Mon 13 Dec 2027 22:55:44 +0000
asID: 17561
IP address blocks: 156.226.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62518 (0xf436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 22:55:44 2025 GMT
Not After : Dec 13 22:55:44 2027 GMT
Subject: CN=67771974-964d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:09:1b:54:af:8f:ed:36:a1:da:bf:ae:4c:
88:4e:91:28:88:97:79:4e:13:89:d6:65:b3:e6:85:
b9:b4:73:a4:62:a8:45:a3:43:cd:fc:d6:bd:a3:e9:
6b:37:30:74:e4:43:9f:f5:b1:3c:56:b7:4c:b1:5f:
93:0a:ee:6e:7f:cf:8d:d0:bb:6a:c5:f7:24:17:1c:
50:a9:de:13:53:84:34:a4:73:79:5d:84:5d:f6:78:
03:dd:8d:d8:e5:a2:67:82:bf:6b:a8:3c:5e:09:a0:
5e:98:c2:f2:7a:6c:be:f0:6a:f3:39:f5:95:98:65:
e7:01:89:42:34:f5:5e:30:a8:0e:27:27:e2:46:e8:
c9:18:73:d4:22:49:82:57:ec:50:49:62:68:c3:8c:
73:28:35:cb:9a:1c:ed:0f:39:e4:48:8a:c8:92:f2:
6c:33:f2:db:10:b3:25:59:e0:09:10:23:02:28:25:
15:e7:de:f2:01:67:fb:ef:db:eb:43:ab:2e:6a:59:
4d:5d:6b:6c:52:1b:8f:c2:a2:b9:42:c9:42:66:96:
38:f7:83:15:53:ed:fa:40:e7:09:bd:ee:1a:76:5e:
b4:16:4c:a5:52:62:61:db:24:cc:dc:17:8c:4a:45:
57:07:db:42:93:f7:51:8a:b6:e5:b8:53:46:05:d2:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FC:19:39:B4:45:82:C1:40:EA:59:A3:84:A3:C1:75:F6:DF:39:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4C55410C95C11EF89730E84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:eb:24:7f:bf:99:34:bc:09:2a:f2:a0:b5:12:a7:2c:93:3b:
ac:9a:22:7d:f1:4a:7b:57:37:69:cc:f3:61:16:af:09:05:a9:
9b:a0:89:b9:85:94:d6:43:0c:85:b7:cc:29:0e:9e:87:90:06:
dd:84:b7:df:bf:c5:92:bb:53:59:58:ae:3e:f6:59:c0:74:37:
93:37:a0:e0:ca:ad:e1:f9:34:86:a2:1c:be:37:28:5a:98:e2:
65:5e:a0:1d:4b:fd:46:44:dc:ae:35:65:28:61:f4:3f:6e:b9:
a5:d2:16:51:84:21:28:31:ba:25:13:2e:d2:5d:1a:44:43:3c:
88:9c:a4:21:84:2b:e9:ff:2c:9d:e2:50:01:3b:c4:c7:dc:d4:
97:df:d5:bb:47:56:cc:93:55:3a:b9:9f:63:cf:a2:56:a7:05:
3b:f6:81:f8:ba:92:db:f2:78:ea:45:91:04:c5:0c:c5:4a:24:
8f:ed:23:de:9f:3b:cf:7e:80:b6:ed:f0:94:7b:74:5e:b5:b5:
91:96:8c:cb:ce:33:18:29:05:1d:3b:d4:75:b9:87:81:f9:6b:
9d:85:21:4a:97:ba:9b:b1:35:a6:67:bf:40:2b:d7:7f:ba:dd:
78:ec:a6:58:fa:90:b6:a2:1a:b3:a5:bd:7e:c4:b6:ed:19:a0:
fa:4f:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:26 2025 by rpki-client