Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B55DA228CD4511EFAF92E75F762E951A.roa
File: B55DA228CD4511EFAF92E75F762E951A.roa (raw, json)
Hash identifier: lU8MV1+NWzhFnxtUvRxgIYSokIUkDALcXUUF8+7Temw=
Subject key identifier: BA:57:BA:77:5F:20:69:1D:23:6E:26:75:A6:3B:A9:98:D7:FC:69:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE95
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B55DA228CD4511EFAF92E75F762E951A.roa
Signing time: Tue 07 Jan 2025 22:21:15 +0000
ROA not before: Tue 07 Jan 2025 22:21:11 +0000
ROA not after: Sat 13 Dec 2025 22:21:11 +0000
asID: 984
IP address blocks: 156.243.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65173 (0xfe95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 22:21:11 2025 GMT
Not After : Dec 13 22:21:11 2025 GMT
Subject: CN=677da8db-06a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:0c:3c:a0:38:e5:06:c2:a4:66:73:b1:47:
c0:b1:48:00:e1:cf:4f:14:e7:e1:ac:03:be:ad:f6:
19:b2:4f:49:53:71:dd:e8:59:f6:07:52:e9:89:1a:
7a:56:ff:a8:98:d8:0b:b5:4a:09:4d:5e:d2:43:c4:
b5:a9:ee:35:2f:cc:ea:d6:bb:a7:88:93:ba:f2:68:
69:af:98:bc:1a:95:39:59:21:04:c6:35:75:bb:2d:
87:2b:08:63:9d:08:30:6d:a4:35:b5:bb:a0:70:a4:
6d:0e:cc:f1:73:8e:ff:c2:19:a5:2d:61:cc:ec:ab:
69:95:01:b7:69:61:88:f8:c1:f3:50:b6:a5:09:bc:
26:25:b4:30:5e:82:45:28:b3:cf:df:60:8f:a0:a8:
a5:c4:44:af:bc:34:0d:35:ca:72:ec:7c:01:1a:52:
40:da:9b:5b:e0:fd:91:1f:7a:83:30:6b:fb:e6:12:
15:13:ac:eb:33:e5:24:ee:47:3d:2f:b5:08:f1:5c:
d5:72:2e:df:1f:ce:88:53:99:1d:90:d7:6c:5c:9e:
17:93:2c:d0:7b:65:8c:ae:a6:4c:1e:b6:30:84:0a:
a7:0a:2e:f2:3e:96:b1:cf:1b:7e:e2:7c:78:de:d0:
85:a9:05:96:a6:8d:5e:d7:44:03:62:b5:9e:0e:49:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:57:BA:77:5F:20:69:1D:23:6E:26:75:A6:3B:A9:98:D7:FC:69:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B55DA228CD4511EFAF92E75F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.118.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b2:0f:28:bf:fa:49:4e:f2:8b:9f:92:e9:e3:c5:73:23:e4:
3b:36:49:44:c4:d1:ab:e6:4a:0f:f0:0b:94:ea:af:e8:a9:9e:
92:58:04:fa:2a:f3:80:60:c5:87:12:70:f4:c7:f7:cd:54:87:
aa:54:76:0e:c5:08:82:e3:75:41:cc:81:2f:d3:0d:87:4f:e1:
31:54:ec:7f:d2:30:7e:a4:fe:e0:b3:ff:4c:1d:e9:4c:c5:bc:
38:96:81:6d:08:e3:88:80:a5:95:18:62:a7:69:a2:e3:65:b7:
1c:00:7d:40:b7:a2:1e:4a:02:c7:b3:7e:73:dc:50:c9:e2:07:
ab:2c:d4:b8:84:17:a4:51:ea:2e:8d:82:32:e9:ca:18:af:8f:
a0:40:22:1b:5f:81:9a:de:01:7f:1c:22:4c:09:00:d7:ab:98:
d2:f7:d4:c8:c3:96:1c:03:eb:a2:a9:17:17:6d:5b:6f:65:73:
a1:f0:dc:30:8f:13:3d:47:67:c7:0f:ad:b3:f6:18:76:08:5d:
9a:2b:93:f0:87:28:26:2e:03:65:02:c0:62:8d:98:15:91:06:
f0:a0:c4:ee:d7:21:eb:1b:72:8a:40:c7:c4:4d:40:e5:f8:e2:
ea:96:53:b8:7a:ad:ec:7a:df:bf:9c:95:95:1c:ac:82:3d:1f:
9b:08:d1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:54 2025 by rpki-client