Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C301EBD4C94C11EFBA5E6A9F762E951A.roa
File: C301EBD4C94C11EFBA5E6A9F762E951A.roa (raw, json)
Hash identifier: aC4gkPI11KtjvcvcLjakqBnWsZ/rA8YCVW7UIefqK4Y=
Subject key identifier: 97:01:D3:03:1C:CF:BD:7B:B7:85:7A:58:32:6D:09:6E:C9:12:AD:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F39E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C301EBD4C94C11EFBA5E6A9F762E951A.roa
Signing time: Thu 02 Jan 2025 21:01:40 +0000
ROA not before: Thu 02 Jan 2025 21:01:36 +0000
ROA not after: Mon 13 Dec 2027 21:01:36 +0000
asID: 17561
IP address blocks: 156.225.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62366 (0xf39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 21:01:36 2025 GMT
Not After : Dec 13 21:01:36 2027 GMT
Subject: CN=6776feb4-8644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:ae:6b:3d:96:11:3b:a5:07:af:75:85:34:
d8:6b:ff:ea:fb:4f:6b:dd:60:fa:90:5d:5c:3c:33:
9b:d5:ba:64:96:64:6b:3b:fa:f4:71:cc:8e:83:d7:
cf:68:c5:b2:fb:f9:3f:98:cf:be:09:b0:d0:85:25:
a8:2e:28:6c:37:02:ef:ef:a1:7d:69:11:dd:68:6e:
c3:7b:a2:7e:44:42:1f:61:f2:57:ff:53:c7:79:02:
bd:14:78:ab:67:92:86:40:3a:a6:d4:f5:72:72:89:
90:83:94:a6:06:4a:28:b8:f7:54:50:c2:5f:22:d5:
48:9c:7c:c5:26:49:7a:e8:0a:8a:e8:69:31:53:5e:
08:d2:51:6d:65:ba:83:53:b7:87:63:84:16:fe:7e:
f4:00:50:a3:e7:03:b7:23:a3:84:58:30:50:7e:61:
ac:b4:ae:98:63:7b:21:dd:b8:18:dc:09:62:d2:87:
7f:73:3f:bd:05:f5:3c:a6:5d:b4:1d:6a:7e:42:ec:
00:6e:b3:ad:df:5c:77:3e:80:60:1d:ea:57:86:14:
4f:7d:98:b3:6a:4d:6e:9d:44:33:61:74:ee:a7:ec:
0c:0e:f2:10:9b:3b:49:1e:4a:31:d0:21:df:d3:b9:
7e:bb:72:fc:2e:f7:5e:bc:0b:80:51:d5:3d:38:f5:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:D3:03:1C:CF:BD:7B:B7:85:7A:58:32:6D:09:6E:C9:12:AD:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C301EBD4C94C11EFBA5E6A9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:56:8b:86:40:ba:77:e3:ad:c9:68:54:6c:97:15:f5:d2:a7:
d8:57:51:35:62:71:30:dc:37:80:dd:e5:fc:ce:81:2c:72:23:
0d:a0:06:a7:b2:03:77:b9:5d:e3:c0:e2:b5:ee:6a:c3:be:79:
e6:5a:00:7e:19:0f:1e:cb:f9:12:c5:f9:60:b3:fd:f1:54:63:
48:e3:9d:d9:fa:6b:f1:dc:4e:ab:bf:dd:30:35:0e:03:5c:c0:
98:c9:a5:01:f8:0e:63:a0:77:84:af:12:5a:f6:3b:9a:44:5d:
69:2d:3b:e2:d0:91:c6:a1:92:f1:78:18:b2:05:cd:d1:fe:9d:
a5:89:57:15:71:39:17:21:30:98:6e:30:4c:c2:e1:78:d9:24:
d5:d0:d1:71:78:f8:bf:0b:03:0e:8c:f9:8a:fd:06:5e:97:a8:
2a:63:af:85:b1:b5:16:7d:0b:6a:29:e0:d8:fa:59:f6:84:43:
09:de:58:28:3c:dc:c1:ac:0f:ab:43:26:93:33:22:b5:ff:84:
eb:f0:3a:03:b6:26:2c:c3:9a:a8:7a:98:13:df:d6:27:ee:9e:
9d:99:e0:75:4c:e2:fe:27:7c:cc:25:91:8c:41:6a:3a:4d:36:
a3:8d:91:0c:10:67:bf:d7:a5:82:29:fa:47:28:12:79:6c:e1:
23:57:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:07 2025 by rpki-client