Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE27B1E2CD0811EF8F4E2D61762E951A.roa
File: BE27B1E2CD0811EF8F4E2D61762E951A.roa (raw, json)
Hash identifier: GYVgQYTTljXW73feOId3iLY65zctNKy+0KAVgGmNcJs=
Subject key identifier: AB:4C:3B:B4:F8:B0:ED:76:3C:C4:5F:5A:0C:C7:69:E9:46:E3:4B:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE27B1E2CD0811EF8F4E2D61762E951A.roa
Signing time: Tue 07 Jan 2025 15:04:51 +0000
ROA not before: Tue 07 Jan 2025 15:04:47 +0000
ROA not after: Mon 13 Dec 2027 15:04:47 +0000
asID: 17561
IP address blocks: 156.239.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64687 (0xfcaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 15:04:47 2025 GMT
Not After : Dec 13 15:04:47 2027 GMT
Subject: CN=677d4292-0286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:1f:74:3d:87:0e:82:8b:70:98:2a:cf:e5:
05:08:56:69:37:07:6a:26:c9:eb:a1:44:21:07:f4:
38:a1:e2:4e:4e:f8:8f:da:2a:d4:39:d5:57:6e:64:
60:c2:ea:34:05:c8:c2:d5:1f:18:ea:5a:e8:48:07:
6f:6e:14:f7:c4:bb:6b:0d:cd:7a:d9:5d:70:be:f9:
d6:fa:cf:cf:a9:bf:09:20:fc:f3:f1:77:79:6a:8a:
7d:19:36:b6:ff:cc:59:f4:d4:70:8f:87:87:89:cf:
2d:ef:fa:69:9f:71:8b:05:6c:43:06:14:f1:d0:92:
d5:33:59:4b:55:0b:b5:8d:fd:ba:32:3d:a5:e4:1d:
fb:e5:ce:e8:44:85:01:db:ab:2a:97:4a:81:88:e0:
01:11:10:fe:8b:a6:8e:25:2e:66:6c:b2:13:64:84:
42:99:b5:72:83:43:ca:66:7c:8c:5c:c4:26:8a:d6:
8b:67:c9:0a:8a:48:c9:42:0c:1a:16:d1:99:a8:e5:
f3:53:0d:72:a4:cd:6b:5b:5b:15:7e:7a:45:c6:25:
b8:f5:d7:43:bb:05:55:27:7c:a9:94:fd:b5:3a:b0:
6d:ed:93:b3:31:d3:f9:ae:9c:f7:12:10:19:8e:da:
85:c8:7f:49:41:a9:70:2b:03:67:be:b2:31:fe:fa:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4C:3B:B4:F8:B0:ED:76:3C:C4:5F:5A:0C:C7:69:E9:46:E3:4B:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE27B1E2CD0811EF8F4E2D61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:22:2e:4f:88:32:d3:55:88:75:29:72:6a:a8:bc:b3:d7:b5:
8d:be:74:bc:ff:a3:12:2e:c2:a1:03:02:89:ac:b1:f3:f1:b8:
e7:39:fc:58:ff:fc:59:67:ea:eb:00:e2:09:cc:97:7a:3c:bb:
7a:98:d6:26:c9:46:62:54:ce:b8:15:e7:5f:81:90:07:24:18:
62:2b:0f:0d:55:9d:27:2c:8f:58:f6:a3:b5:e5:0e:1f:5c:a6:
09:0e:6d:fb:e7:e1:17:74:21:c8:c2:03:63:43:cf:38:71:0d:
d5:0e:e7:0e:93:db:be:a2:0e:5e:d0:f2:3e:af:90:6d:08:2a:
0f:9c:49:03:c7:b1:ed:29:a1:23:84:9d:de:0f:65:3d:4c:86:
c9:80:ef:7b:69:3a:7b:b3:4e:21:c9:61:cb:ef:ae:46:c2:9e:
91:94:85:cb:80:81:b2:b1:7b:0e:d6:1c:29:ec:38:d8:a7:06:
f4:aa:32:3b:f8:34:16:d3:02:f8:55:6b:2b:ea:bc:96:f4:90:
71:66:a3:af:40:15:16:98:ca:9c:34:de:7d:d6:20:79:d9:66:
a8:d5:cb:05:a6:3c:43:3e:66:f8:5a:60:e9:6b:97:27:80:b2:
ce:89:ed:eb:8f:3a:6c:9c:83:69:23:6f:fc:4f:8b:54:6f:7f:
94:37:ea:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:40 2025 by rpki-client