Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD1BB46ECD5E11EFBC1DD480762E951A.roa
File: BD1BB46ECD5E11EFBC1DD480762E951A.roa (raw, json)
Hash identifier: 95jf0o3WDegFlxvu3R4HfcQXkdQj6w6xgD5W758HKsA=
Subject key identifier: EF:5C:31:FE:AE:05:5D:92:67:52:CD:FB:8A:D2:1B:CE:12:F4:DC:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD1BB46ECD5E11EFBC1DD480762E951A.roa
Signing time: Wed 08 Jan 2025 01:20:26 +0000
ROA not before: Wed 08 Jan 2025 01:20:22 +0000
ROA not after: Sat 13 Dec 2025 01:20:22 +0000
asID: 984
IP address blocks: 156.247.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65313 (0xff21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 01:20:22 2025 GMT
Not After : Dec 13 01:20:22 2025 GMT
Subject: CN=677dd2d9-aec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:d2:72:ee:42:77:ba:f2:47:2d:70:e7:f7:
7a:ec:66:d3:15:47:73:9a:a4:33:21:f6:42:f4:97:
c0:a7:c9:e3:cd:b3:68:84:e9:76:73:a6:73:c9:d2:
57:17:e0:6b:62:24:71:90:ea:c4:6e:c3:00:7e:b6:
46:8c:b1:8b:1e:c4:ea:d2:c6:6d:0c:83:1e:69:34:
b1:8f:c0:f1:90:78:2b:36:25:e3:e9:32:75:c6:82:
83:7c:c9:d6:51:88:cc:5b:8b:71:19:55:ed:0a:f9:
90:a5:9b:55:97:c5:81:ec:f1:ab:c8:7e:48:2f:6c:
d3:85:30:60:6d:6c:e4:43:f7:b5:14:8a:e9:22:de:
8d:0f:b5:4a:cc:8b:5c:f7:8e:c7:79:f7:c9:d4:5a:
62:69:cd:c7:d9:67:a9:26:3d:17:cf:e8:af:08:91:
e0:64:b8:8f:ff:bf:39:04:fc:f3:d9:6d:45:9e:91:
60:3a:66:4a:c3:68:06:41:cc:aa:43:71:a9:4b:d1:
dc:0a:bf:9c:53:da:67:9e:f4:a6:30:08:8a:a9:01:
87:62:28:8f:8c:59:25:15:c7:9f:3b:13:47:18:3a:
ff:67:f7:53:e4:bd:e4:ca:57:9a:94:1e:54:d9:96:
aa:d5:0a:cf:5a:9a:f3:86:a0:d2:23:db:ed:dc:96:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5C:31:FE:AE:05:5D:92:67:52:CD:FB:8A:D2:1B:CE:12:F4:DC:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD1BB46ECD5E11EFBC1DD480762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.88.0/24
Signature Algorithm: sha256WithRSAEncryption
38:69:ae:a9:aa:f7:54:e8:bc:e6:6b:2b:ba:65:29:4b:60:0b:
3d:2a:6d:16:3e:0d:70:1c:61:a2:f9:4e:ef:28:4a:eb:be:3e:
02:4b:63:3d:cc:96:2a:7a:d2:af:20:eb:c4:37:fd:06:97:71:
4b:b8:ef:d5:9b:e7:32:3a:32:a7:71:fa:d9:d8:f0:b8:84:a1:
ba:85:f5:93:18:a6:9d:d5:30:3e:5d:21:4e:f2:68:78:d6:48:
87:42:91:32:bd:1b:c3:92:5e:6e:62:1b:5c:ed:b6:c0:02:c2:
88:14:74:c3:95:da:55:56:a6:94:d2:ea:62:52:fd:74:fa:e9:
40:8f:ed:7c:e5:fa:93:36:43:2e:02:da:51:d5:14:3c:60:e7:
d3:e8:d1:37:06:b8:e4:3f:c1:0e:01:d2:e5:e9:2e:82:94:1b:
3e:d8:2f:3a:fd:a4:15:06:08:18:52:7d:15:7e:8b:f9:e5:e1:
7b:a1:34:51:d3:0a:ab:3e:99:58:72:c7:41:f2:e8:77:e0:2b:
cb:50:de:73:71:86:b1:96:9e:12:94:c4:ac:80:4a:ae:7d:13:
cc:d2:b7:0d:28:78:aa:79:3e:9e:94:c9:bf:c0:1b:71:8a:c4:
6a:f3:04:87:c9:d3:07:16:be:ad:45:e3:fa:5b:e0:04:64:b7:
da:d0:33:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:49 2025 by rpki-client