Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B73FAC42CC9811EFB54AF88E762E951A.roa
File: B73FAC42CC9811EFB54AF88E762E951A.roa (raw, json)
Hash identifier: H9dBD0vjDr5HVRlcIj/YvumjB3/h7iJ2t4bKgWimnIw=
Subject key identifier: CD:43:40:24:57:2E:61:77:7F:AB:9B:33:6E:18:B4:C5:36:2F:B4:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F94E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B73FAC42CC9811EFB54AF88E762E951A.roa
Signing time: Tue 07 Jan 2025 01:42:55 +0000
ROA not before: Tue 07 Jan 2025 01:42:52 +0000
ROA not after: Mon 13 Dec 2027 01:42:52 +0000
asID: 17561
IP address blocks: 156.227.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63822 (0xf94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 01:42:52 2025 GMT
Not After : Dec 13 01:42:52 2027 GMT
Subject: CN=677c869f-a152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:2f:5c:19:84:64:5d:4e:32:4b:fd:96:62:
b0:5f:d0:83:77:71:91:2c:1a:71:66:4a:a6:6e:15:
9f:53:50:9c:96:7e:5f:eb:a7:35:72:f5:83:76:22:
d7:ba:c1:1c:9a:e2:46:fb:45:d2:5a:6e:83:98:63:
fb:4a:19:2d:5c:4a:2e:69:1a:c6:d9:f0:23:c3:f5:
b1:58:6b:13:c4:d1:81:24:a6:f3:c1:9d:5c:fd:fd:
7f:d1:ed:85:d7:42:39:97:24:a3:6e:1d:aa:0c:0f:
d5:26:ab:c8:49:31:39:c0:24:3b:ed:7b:b6:87:07:
7f:b7:16:a9:0a:73:f8:ca:73:2e:39:da:da:f8:c3:
06:d9:4b:a0:00:f9:bd:6f:4a:da:6e:29:24:c4:c2:
18:1d:a4:5e:e9:b0:01:3d:3e:c6:84:26:c0:b5:2e:
e8:4b:22:c6:99:36:28:69:bf:42:6c:dc:52:b7:26:
d4:f0:c9:bf:54:98:64:58:63:14:dd:2d:90:d3:ba:
43:9a:31:1f:1b:e2:62:c3:0b:96:3e:bb:d0:f7:9d:
a9:cf:9a:95:b4:46:68:14:a8:36:a1:f8:00:92:86:
e9:a5:59:df:c5:ae:58:ec:35:6c:64:08:4f:7a:1d:
8c:2c:2b:06:af:04:ea:2d:20:0c:00:06:c9:5e:1a:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:43:40:24:57:2E:61:77:7F:AB:9B:33:6E:18:B4:C5:36:2F:B4:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B73FAC42CC9811EFB54AF88E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.93.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a3:58:3b:59:08:d7:b7:ab:63:25:5d:7f:0f:de:28:01:28:
0f:4d:be:29:97:6c:cc:1e:e9:1c:34:97:b2:c2:68:bb:63:c6:
b7:76:1b:4f:d8:e4:50:9d:d7:e0:69:1d:8b:08:43:18:1c:e2:
9c:3f:d9:0e:1a:2b:a6:64:c0:af:9f:de:ed:b6:93:c4:51:4d:
f3:25:72:df:30:ec:7d:56:c7:25:a6:c4:ac:e7:33:03:66:e0:
ac:9d:5a:81:e6:ea:f1:e6:a9:bb:d4:72:4c:14:4b:fe:9c:6d:
02:3b:bb:60:72:01:13:c0:04:99:a0:0a:af:eb:10:78:56:53:
4e:23:b0:66:c0:95:d2:14:ae:12:5a:4a:7c:39:61:29:a9:00:
80:da:f6:97:8e:c5:f5:6d:15:8f:5e:07:58:cd:44:77:9f:0b:
89:b1:20:b8:2f:96:d4:0a:e2:64:9e:7a:f8:a8:f0:d8:07:ae:
e3:7b:f4:f4:a4:4a:a1:ea:d7:99:a4:c3:45:9e:ad:33:9b:21:
45:d2:be:60:fc:4c:4f:f2:bc:72:ca:e2:a2:22:cd:3e:9b:84:
87:76:9f:76:40:ff:1f:e3:97:cc:eb:a1:96:73:91:73:6f:a6:
8e:35:d2:ba:0c:78:65:2d:a5:20:7b:e3:9e:9f:cf:a0:7c:d9:
fc:0b:ca:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:05 2025 by rpki-client