Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C8C24ACDC811EF847C64AF762E951A.roa
File: C5C8C24ACDC811EF847C64AF762E951A.roa (raw, json)
Hash identifier: Yuru8CkaAiwXEJz0RJ12k9Q3KLm2qAjHvSciV/6FpgM=
Subject key identifier: 8A:82:06:FA:1C:94:9C:7C:DF:67:BD:27:FD:CE:9A:81:27:D8:55:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C8C24ACDC811EF847C64AF762E951A.roa
Signing time: Wed 08 Jan 2025 13:59:27 +0000
ROA not before: Wed 08 Jan 2025 13:59:23 +0000
ROA not after: Tue 23 Dec 2025 13:59:23 +0000
asID: 984
IP address blocks: 156.243.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65972 (0x101b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 13:59:23 2025 GMT
Not After : Dec 23 13:59:23 2025 GMT
Subject: CN=677e84bf-b67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:bb:ed:a6:03:45:72:95:63:97:36:26:ff:
63:8d:1f:ba:71:86:ef:ec:72:7b:4f:3f:cb:f0:56:
05:e6:84:6b:d0:28:96:00:ee:9a:4e:7e:e9:65:1c:
12:b5:c9:0b:f8:90:98:e3:f5:1d:c2:bf:a6:1d:c4:
96:25:35:21:69:95:4c:e9:3c:53:6b:29:bb:f8:ad:
82:9e:c5:ef:08:28:ea:ea:06:39:5d:dc:8e:86:f0:
ef:aa:e8:1c:d7:ee:af:5c:f8:83:e7:d3:39:30:20:
e6:0a:ab:7e:57:5f:82:b8:b3:ff:08:e1:01:21:99:
60:cc:d2:cd:12:af:56:a3:76:93:d3:f4:db:a5:1c:
1e:7f:9f:0d:3f:21:f5:b2:04:a3:88:38:f8:23:03:
55:3f:c5:5e:da:0a:a2:77:fc:92:60:38:0e:eb:65:
d7:1a:e1:7a:9d:18:1e:c9:fb:8f:36:c4:82:d2:ff:
f3:01:21:61:13:54:7a:b0:26:53:f7:9a:5c:16:d8:
41:86:29:7b:f3:1a:85:e4:31:3d:f8:1f:67:f5:60:
00:0c:34:b2:48:60:33:5c:dd:be:72:29:4a:dc:99:
75:41:56:0e:37:84:02:38:8a:c9:2f:c5:b7:4b:43:
17:ef:70:bd:91:f3:50:9f:db:cc:b0:c0:d7:6d:aa:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:82:06:FA:1C:94:9C:7C:DF:67:BD:27:FD:CE:9A:81:27:D8:55:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C8C24ACDC811EF847C64AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:99:5f:85:08:45:00:f7:43:83:6a:be:5c:6b:12:38:f5:d8:
17:34:cd:58:0e:30:5e:11:ec:21:49:61:23:f4:04:c4:0f:ef:
69:c7:61:dc:5f:04:c4:62:4b:1f:9f:c6:af:8f:76:4e:60:37:
06:d0:60:05:df:7e:1c:00:0f:9d:39:4b:cd:60:1d:8c:35:4a:
fb:fa:a2:47:f7:10:fb:1f:8a:a6:30:e6:1d:04:ef:72:7c:3e:
1f:f9:55:35:6b:5d:61:9e:56:f9:7f:60:08:3e:11:79:ea:74:
da:6f:21:f8:3a:e3:1c:aa:8c:1a:56:ea:5f:50:3d:82:89:ea:
5c:f4:61:ea:61:14:d3:40:17:41:fa:be:7b:de:fe:78:a7:4f:
c1:1c:f8:f3:3f:f8:15:10:65:1b:bf:85:65:77:c2:9f:18:e5:
fe:04:a0:a4:c0:12:93:af:ff:85:c7:6f:4f:86:0c:9e:2f:e7:
fc:5e:c6:5b:a5:4c:b1:65:60:78:e0:fb:5f:37:58:56:72:e7:
db:a4:4b:96:53:07:bc:ce:53:37:66:4f:ac:3a:d0:40:c9:a3:
bd:29:a5:4f:c0:6d:3b:1b:75:d3:76:fb:98:f6:e0:32:73:7b:
81:55:7a:aa:48:bd:73:32:22:e9:4f:4a:34:33:55:4c:0a:27:
12:ed:91:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:48 2025 by rpki-client