Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5D1EE1AC98611EF9D75F5A4762E951A.roa
File: C5D1EE1AC98611EF9D75F5A4762E951A.roa (raw, json)
Hash identifier: VK+VSMHc/S0FZBilmKFPjeLlXO5F/xp1MOTX5GUxHrU=
Subject key identifier: E8:C3:FE:8C:0D:91:6E:AA:53:F5:28:76:21:85:2F:95:6D:40:01:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F585
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5D1EE1AC98611EF9D75F5A4762E951A.roa
Signing time: Fri 03 Jan 2025 03:56:55 +0000
ROA not before: Fri 03 Jan 2025 03:56:52 +0000
ROA not after: Sat 13 Dec 2025 03:56:52 +0000
asID: 984
IP address blocks: 156.233.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62853 (0xf585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 03:56:52 2025 GMT
Not After : Dec 13 03:56:52 2025 GMT
Subject: CN=67776007-6b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:8a:19:7f:d9:c3:9e:90:4e:47:b6:17:8a:
7b:ea:5a:8d:0f:18:8a:a0:29:91:57:6d:3c:d6:4d:
a8:62:92:da:0c:2b:7d:30:c6:eb:ed:20:97:12:69:
1e:99:7d:33:cf:d3:19:28:de:2b:96:3a:ed:f1:d1:
cf:42:47:23:be:8f:87:c7:e8:8e:fc:f1:c5:cf:c0:
f6:46:94:f5:8d:13:ff:74:eb:00:b7:10:4e:72:0e:
57:bc:63:59:d1:19:1d:e7:0b:7a:c0:fc:8b:14:5a:
19:57:21:97:b9:4e:30:eb:6f:24:fd:16:db:1d:72:
da:77:00:cb:43:0d:2a:d6:22:ba:90:35:4e:11:df:
9f:9c:ce:d0:3f:af:10:50:40:48:fc:66:f8:ef:77:
9a:c1:f1:7d:6a:3d:7a:b5:f1:ef:b9:bd:7d:c1:a6:
45:25:3e:89:e6:53:16:72:f9:3c:a8:20:9e:7d:96:
65:c7:07:3b:7a:85:d4:2b:03:4d:86:9f:e5:3a:7d:
9f:8a:7a:24:f6:b5:4b:79:dc:3e:75:b5:c7:f6:af:
d1:38:a7:4d:f0:27:ef:07:48:b1:3f:9f:df:f9:5e:
4e:92:60:c4:c2:2d:45:f1:5e:be:02:15:87:3a:07:
ea:d6:e4:20:ad:68:5d:e3:ee:07:46:72:43:ed:f7:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:FE:8C:0D:91:6E:AA:53:F5:28:76:21:85:2F:95:6D:40:01:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5D1EE1AC98611EF9D75F5A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.8.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:95:7c:92:0a:a1:98:6e:ae:bd:ca:8f:38:07:ab:e8:c9:ce:
ad:69:59:56:30:d2:a9:87:31:d2:7a:81:a8:a6:11:64:13:27:
24:76:e6:e3:5f:1b:fa:76:e2:90:08:95:6f:d5:7e:b0:80:3b:
9c:b0:d7:46:8e:a9:01:80:89:d3:86:0d:2b:0d:8d:7f:38:db:
47:e8:d8:74:c8:f3:57:17:58:2f:97:88:8f:a6:00:77:0c:d7:
bb:f2:e0:33:39:91:5a:6d:71:f1:ed:2d:02:5e:42:7e:50:89:
1a:9f:96:9e:9d:0f:59:8d:4e:b0:19:d6:7a:13:64:9e:77:07:
55:5d:e2:bf:cf:67:0a:72:84:97:03:38:39:a1:61:c9:31:83:
0e:17:37:e3:e1:9b:6a:36:13:1c:e5:84:e6:e6:df:c0:8d:43:
23:97:1c:1e:aa:60:5f:0d:88:fa:7a:37:b3:80:70:33:3d:81:
96:21:34:5d:19:5b:dc:51:8d:2c:d2:d5:98:3a:16:25:e4:52:
d1:4e:44:f1:30:09:ee:a6:47:b6:19:48:07:1e:a5:03:05:5a:
56:21:33:00:3f:8c:32:cf:d5:78:4a:3a:67:97:24:97:85:ea:
ee:64:54:c0:86:e8:36:d0:9f:d4:58:93:f3:44:03:77:10:bb:
e1:ab:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:43 2025 by rpki-client