Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B984184AD24611EFA81DE2AB762E951A.roa
File: B984184AD24611EFA81DE2AB762E951A.roa (raw, json)
Hash identifier: yIZyrRCCl3EL6IkIriIoUEM2nTpHfwvB6oFQNGkiPEk=
Subject key identifier: 45:2B:E1:0C:35:21:58:01:10:91:8A:BA:E0:31:36:1F:65:73:EE:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B984184AD24611EFA81DE2AB762E951A.roa
Signing time: Tue 14 Jan 2025 07:11:07 +0000
ROA not before: Tue 14 Jan 2025 07:11:04 +0000
ROA not after: Tue 18 Feb 2025 07:11:04 +0000
asID: 214413
IP address blocks: 156.243.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67286 (0x106d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 07:11:04 2025 GMT
Not After : Feb 18 07:11:04 2025 GMT
Subject: CN=67860e0b-a01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:de:04:7d:c9:db:ed:60:03:12:6c:40:e8:
e5:49:f0:64:61:5f:11:25:71:8e:bf:dd:54:39:de:
bd:b1:c4:a8:a2:bb:06:dc:ba:4e:c5:b1:52:95:06:
f9:95:f4:c1:e0:20:ba:ae:98:87:15:f6:a3:33:35:
fe:4a:42:fa:ba:67:aa:be:ed:5a:96:42:9a:20:e0:
0d:1f:52:0f:7a:8f:21:37:6c:8f:bf:11:2e:3b:fe:
7c:94:65:b4:a1:c3:f4:23:e3:bc:39:72:1d:19:04:
ea:b1:4e:21:2f:81:f0:f4:7e:9e:5b:ad:78:67:4f:
99:92:ed:a8:23:5f:58:32:b3:58:b1:97:48:75:fe:
d4:e2:46:5c:36:e3:55:59:2a:f5:d9:26:66:30:4e:
a6:11:49:07:0a:59:d1:6a:7c:62:10:43:14:0c:8a:
d9:78:5e:41:46:93:dd:21:31:20:92:40:a2:33:72:
99:d5:dc:d6:c0:d9:bf:09:cb:ca:fa:a3:96:21:1f:
76:dd:47:64:44:25:0d:5f:19:c4:df:68:7b:f5:6f:
5f:01:cc:6a:1d:0c:41:8a:25:4f:f7:3e:a7:aa:e9:
5e:35:43:99:db:f4:96:95:77:ce:9a:e2:e6:43:93:
cc:ec:36:cc:42:f4:31:34:88:22:3a:b1:50:d5:76:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2B:E1:0C:35:21:58:01:10:91:8A:BA:E0:31:36:1F:65:73:EE:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B984184AD24611EFA81DE2AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.114.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f2:a4:09:77:7f:47:c8:86:41:f7:01:eb:34:04:37:07:26:
4d:49:2a:70:15:98:ba:e4:a1:77:65:e2:15:18:ff:d1:b8:f2:
a3:cc:7a:38:83:ed:be:9a:14:b9:35:1b:34:ce:d5:e3:2a:20:
13:d9:2f:d4:81:09:17:96:fe:df:32:84:c9:21:e8:3e:b9:af:
6b:8e:0b:94:a4:4d:17:8c:75:37:ce:76:72:98:3a:ac:21:f6:
25:bc:12:0e:6b:16:4a:1f:8e:37:e0:b2:da:5d:b2:de:33:f3:
b7:8f:14:35:98:a6:cd:54:e0:6c:08:02:5f:e6:28:c5:66:7a:
6b:5b:80:4a:b3:5d:30:56:03:46:84:c6:af:70:6d:33:aa:20:
c0:ad:d8:6f:e3:a6:47:36:b0:26:2b:73:03:e9:2c:de:ae:42:
5d:8c:8d:4c:bd:63:f2:c6:9f:3b:c6:7f:09:73:84:e6:c9:7b:
b9:b8:20:02:b1:9e:a4:6b:27:3e:76:f5:43:70:2d:f8:6d:b0:
8d:ca:47:9a:e1:8e:a3:89:9f:08:80:14:2d:cd:75:54:5a:40:
d6:60:b8:63:10:00:e8:00:7a:78:ed:9f:24:f1:71:56:70:66:
11:ed:1d:89:1d:2e:67:10:5e:41:ff:28:96:68:31:d4:1c:f5:
4d:91:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:42 2025 by rpki-client