Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7BD71AEC97D11EF85373666762E951A.roa
File: B7BD71AEC97D11EF85373666762E951A.roa (raw, json)
Hash identifier: jV0BoqCuM/cYWACPd3Y6uI78SQOrFSFytn6/ziBwAoc=
Subject key identifier: 54:90:C1:11:7B:B3:A2:5F:DA:E3:CA:47:5C:33:48:36:19:C2:79:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F52F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7BD71AEC97D11EF85373666762E951A.roa
Signing time: Fri 03 Jan 2025 02:52:06 +0000
ROA not before: Fri 03 Jan 2025 02:52:03 +0000
ROA not after: Sat 13 Dec 2025 02:52:03 +0000
asID: 984
IP address blocks: 156.229.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62767 (0xf52f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:52:03 2025 GMT
Not After : Dec 13 02:52:03 2025 GMT
Subject: CN=677750d6-7f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:85:b0:c3:62:5e:c7:4d:a0:d1:4f:55:47:
3d:30:3f:e2:f7:7d:be:6d:47:a8:7e:7f:2e:77:20:
39:0e:94:73:2a:4a:49:29:7f:e1:73:79:54:c9:10:
25:d3:5c:ac:c5:fa:f8:d9:1b:04:6c:83:7b:fe:24:
cb:b9:55:46:2a:02:78:17:83:1b:66:4a:c9:26:17:
8a:9a:ab:95:b9:37:ef:d0:a7:a1:36:bc:68:8a:12:
54:c8:2e:5b:69:b3:80:cf:53:3a:51:35:a3:b9:5e:
7b:d9:dd:43:3a:f9:eb:56:08:57:d7:db:79:57:15:
6c:69:d4:22:de:eb:68:6b:bf:a9:f2:5b:af:41:8e:
24:d8:50:40:c5:13:ee:7c:5a:4b:18:61:23:c9:ee:
6a:2a:92:a4:e6:80:e1:97:13:43:e1:de:98:6e:90:
68:00:10:41:bc:2d:66:88:4c:33:93:7c:5d:3c:d5:
7c:98:15:57:fd:8e:1e:c3:f5:0a:2f:5e:bd:64:1d:
d0:91:35:cb:8d:5b:2b:29:00:54:26:c1:e1:1f:32:
85:f8:9a:2d:05:25:7c:5a:92:51:4e:28:70:d4:4e:
9c:30:07:91:b5:44:69:df:5a:68:04:5b:bd:f2:8a:
46:94:0a:73:50:77:ca:4f:50:87:d2:6e:2f:8f:35:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:90:C1:11:7B:B3:A2:5F:DA:E3:CA:47:5C:33:48:36:19:C2:79:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7BD71AEC97D11EF85373666762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.173.0/24
Signature Algorithm: sha256WithRSAEncryption
01:34:5b:e4:a2:18:88:65:67:cb:47:5c:20:06:dc:6c:9d:43:
98:87:ff:90:d6:1e:c4:3f:38:6c:9b:bc:8c:1e:35:ff:c3:36:
ac:55:01:40:d4:5a:c5:4a:3f:7e:7c:c7:35:64:a4:9b:b4:98:
c5:e7:f9:81:67:31:4b:b3:f8:ae:c9:4c:3d:7d:1d:7a:9e:25:
54:7b:c2:53:8e:36:36:3c:99:6c:c4:f0:9b:a8:a6:8a:2e:cb:
1b:07:ac:57:c3:0d:24:1e:42:4b:e8:0a:55:27:ea:21:d4:70:
df:25:4b:ba:c2:c4:f5:28:90:c5:cb:ea:51:f6:4c:f4:ab:93:
81:11:4a:9d:e3:26:bc:4c:9a:d6:ec:ce:83:99:c8:25:b5:3f:
7c:50:21:99:12:ce:a7:50:75:b1:70:3e:fb:80:fb:b1:46:35:
6f:90:d7:3d:54:84:67:92:47:cc:ca:35:1c:21:05:4e:29:6a:
42:b2:cf:cc:63:3d:1e:9e:2b:74:07:e1:04:a5:60:c8:5c:54:
bc:72:54:5b:51:69:aa:5a:6c:b7:b5:e8:b3:79:24:86:cf:08:
cd:ee:33:03:e9:be:08:9e:e3:ca:79:19:23:6c:d9:d8:19:00:
0d:0c:33:78:3d:a8:13:40:f6:58:4b:4f:ef:c3:65:20:bb:5a:
21:2d:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:50 2025 by rpki-client