Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD70D234C27B11EF9703BA5A762E951A.roa
File: BD70D234C27B11EF9703BA5A762E951A.roa (raw, json)
Hash identifier: RtnrZxgY2WZrlIz7GV34HsOBfMx9JQ8Y2/OnAAq+A8o=
Subject key identifier: 70:B5:2E:CE:48:F8:30:8D:7A:19:60:9E:53:F3:60:AE:50:56:CC:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD70D234C27B11EF9703BA5A762E951A.roa
Signing time: Wed 25 Dec 2024 04:50:19 +0000
ROA not before: Wed 25 Dec 2024 04:50:15 +0000
ROA not after: Wed 10 Dec 2025 04:50:15 +0000
asID: 984
IP address blocks: 156.227.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59559 (0xe8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 04:50:15 2024 GMT
Not After : Dec 10 04:50:15 2025 GMT
Subject: CN=676b8f0b-8bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:37:6b:ca:06:c3:90:fa:c3:69:d7:ce:1c:
52:07:b6:30:8d:9f:91:c4:a8:8c:e6:32:04:f6:2f:
e8:14:9d:02:2b:cb:0f:8a:dd:4b:05:f1:78:61:3a:
70:8f:e5:bd:41:60:b7:f9:0a:db:c1:02:b2:7d:3c:
01:98:be:2a:d6:f1:88:ff:97:a0:b5:43:b7:d7:00:
6a:bf:f7:c6:fb:f2:f8:b1:7b:6f:94:f8:75:ba:bc:
9f:c0:ad:af:e6:09:e7:ba:81:f2:8a:2e:f8:2c:ad:
fe:33:dc:da:b2:27:c3:12:93:31:6f:37:43:a8:08:
6d:84:77:c2:a4:cb:b1:b4:57:27:b7:49:0d:01:d7:
4e:a7:84:31:fd:f3:69:e8:1e:15:24:6d:c8:18:16:
7d:d1:9f:d6:55:0c:e7:c7:15:d6:40:a5:e1:3c:29:
ea:df:f7:cf:19:5e:7e:b9:76:c1:8c:e1:48:07:34:
01:72:fe:cc:a6:99:9d:6f:c3:82:1d:cb:3c:a6:a9:
ef:8e:21:d7:5d:fe:62:b5:15:92:3a:eb:04:22:fa:
81:15:c6:b5:6e:da:be:9f:37:a8:44:fc:c2:25:0c:
ca:e1:07:3c:64:fc:35:8b:e3:67:f7:d8:49:1f:2d:
68:6d:f2:bb:3c:c6:25:91:08:23:ef:5e:e6:71:2c:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:2E:CE:48:F8:30:8D:7A:19:60:9E:53:F3:60:AE:50:56:CC:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD70D234C27B11EF9703BA5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:85:58:5f:76:90:93:15:69:ef:76:9c:ba:5f:ca:4e:84:50:
5d:16:df:a9:3e:df:a2:7c:c7:90:7d:31:bb:4a:b5:ae:d6:b4:
b6:e0:42:7c:ff:ff:fc:00:3c:99:ce:4d:f4:d5:9b:a6:11:92:
27:0e:f6:bd:f6:1f:59:09:c8:f5:e4:c0:af:bb:b9:bb:f9:2a:
b1:32:df:d9:7f:1e:15:2b:c0:b3:22:54:4e:4b:e4:43:63:ec:
2d:92:19:45:41:3a:0b:05:79:88:89:16:e2:91:2f:c0:65:df:
c1:cb:da:db:5b:53:2c:40:bd:4e:d0:b7:68:61:34:0f:93:06:
e1:3c:a2:07:56:7c:41:2b:2e:77:c6:c2:f6:84:69:b9:f5:7c:
eb:0c:5e:25:9c:a5:38:3a:d0:ad:0d:f5:25:2a:3b:64:91:f1:
66:cc:5d:5f:58:bd:48:fa:27:42:f6:12:c5:1e:77:48:e9:7f:
f2:f5:76:9b:af:19:5b:0b:10:d0:3f:bb:43:8e:4a:2d:b2:60:
7a:b2:a6:5d:28:7f:54:9c:a0:a5:32:29:a6:b8:14:e7:c8:62:
79:6c:88:53:96:04:54:d4:3d:1b:04:57:36:4e:22:f9:02:94:
8b:38:2d:d5:84:ee:d6:5d:6d:21:44:4e:7f:93:c1:bc:9e:cc:
e0:80:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:55 2025 by rpki-client