Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5CFBF4CCD0411EFAD7F9E47762E951A.roa
File: C5CFBF4CCD0411EFAD7F9E47762E951A.roa (raw, json)
Hash identifier: X8WV6Gr0zdg9cOy193P27sUQvNL0Ikv+TueUPMO650g=
Subject key identifier: ED:97:E1:B9:8C:B1:8B:64:40:DA:54:8D:E2:A0:74:07:6C:F2:5D:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5CFBF4CCD0411EFAD7F9E47762E951A.roa
Signing time: Tue 07 Jan 2025 14:36:26 +0000
ROA not before: Tue 07 Jan 2025 14:36:22 +0000
ROA not after: Mon 13 Dec 2027 14:36:22 +0000
asID: 17561
IP address blocks: 156.239.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64655 (0xfc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:36:22 2025 GMT
Not After : Dec 13 14:36:22 2027 GMT
Subject: CN=677d3be9-5cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:21:ac:d6:c2:68:ae:63:fe:7c:d5:95:bc:
55:fa:03:96:30:7d:7f:a0:22:35:09:84:aa:4d:a4:
25:ef:7d:d7:d1:73:15:e4:e4:b7:73:ac:f4:e1:ee:
a6:0a:0d:dc:ad:23:cc:02:8a:88:19:8b:9c:ac:78:
be:54:33:a9:15:d3:81:a2:a9:74:50:df:c0:fd:2f:
9f:5c:c7:78:1b:d1:ab:68:96:d2:14:ba:53:87:0c:
c3:63:9f:e1:c5:70:64:6d:d9:f1:64:bb:a5:8a:66:
65:13:f5:48:9d:35:de:27:44:24:f2:36:9c:7f:97:
51:60:4d:cb:55:2d:ee:66:90:b9:a8:d0:81:61:8a:
70:b8:22:51:f9:76:d1:90:05:8c:ce:45:2b:91:12:
46:72:f9:f5:d1:4a:84:9b:95:a0:9d:5f:d4:ab:3e:
24:c4:ee:27:82:b9:f8:f1:31:7c:bb:59:71:26:e6:
74:cd:d0:7a:28:95:8d:b1:bc:b7:7d:2b:08:4d:8a:
bb:96:a6:8d:6a:f9:d7:01:84:1b:0d:da:57:d6:51:
a0:d9:69:36:03:60:e6:e9:a5:05:bf:31:14:af:ce:
85:60:27:6f:ae:80:5f:42:8e:29:93:32:94:22:86:
ef:37:7e:2a:b0:33:ff:ae:8c:7c:db:52:78:17:d9:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:97:E1:B9:8C:B1:8B:64:40:DA:54:8D:E2:A0:74:07:6C:F2:5D:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5CFBF4CCD0411EFAD7F9E47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d9:df:f1:9e:5a:10:e1:f4:2f:bc:b4:17:8c:e2:b8:53:71:
6e:84:b5:17:65:e1:c2:ea:4d:72:f5:a7:75:bd:b2:0e:c2:1a:
b0:f1:3d:67:52:40:cc:49:9a:9e:70:5b:c8:1d:96:08:03:c0:
5c:78:00:31:92:30:15:e7:09:a4:a1:5d:9b:00:c0:f7:7b:66:
55:55:5d:9e:ee:72:40:ef:a3:cf:ae:b1:bd:31:8b:75:10:6f:
63:90:dd:79:67:72:99:70:b8:35:b1:e1:a2:9a:ab:1b:ca:b8:
77:c2:7a:88:56:82:00:53:01:da:7c:5d:ea:bd:00:e2:8e:64:
43:74:e2:7c:e8:d5:ba:7e:89:54:f7:70:77:79:fa:2b:39:b2:
55:08:73:7b:16:ce:f7:8f:d9:0b:93:4e:c5:14:70:7e:ac:d7:
f9:86:53:78:19:0e:36:11:0b:a9:6a:45:d2:c0:5c:83:0e:1f:
22:de:95:52:f1:f0:2b:bd:fb:c7:a2:da:6b:00:b8:64:87:d5:
29:ad:02:ec:67:47:70:c3:c3:a8:66:68:f0:2f:81:28:a1:31:
cf:de:f8:bc:3c:c4:99:2d:b4:ee:4b:81:b1:16:58:a9:41:d6:
e8:80:df:93:5c:a0:ed:20:76:22:95:88:ec:fa:ed:e5:4d:7a:
ec:a1:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:51 2025 by rpki-client