Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA6632A6CD1911EF9CD7AF4B762E951A.roa
File: CA6632A6CD1911EF9CD7AF4B762E951A.roa (raw, json)
Hash identifier: PcagnWTEUvKtxudPHdlZ/mRX5F1+Dj+2OlgZ16EcgO4=
Subject key identifier: EC:DA:16:BA:13:EC:F4:49:4A:95:47:CD:CA:6A:74:E7:37:C5:E3:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA6632A6CD1911EF9CD7AF4B762E951A.roa
Signing time: Tue 07 Jan 2025 17:06:53 +0000
ROA not before: Tue 07 Jan 2025 17:06:49 +0000
ROA not after: Mon 13 Dec 2027 17:06:49 +0000
asID: 17561
IP address blocks: 156.241.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64825 (0xfd39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 17:06:49 2025 GMT
Not After : Dec 13 17:06:49 2027 GMT
Subject: CN=677d5f2c-5d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:1a:f9:29:dd:e2:c8:c0:39:de:b7:85:e9:
03:72:ba:db:9a:90:79:9e:2b:61:6f:d0:c6:9f:93:
f0:2e:b4:6b:d0:31:1e:bc:ed:52:c3:f4:9c:d9:a6:
3b:fb:f3:c0:5f:3b:80:a2:63:fb:0a:51:30:e4:92:
02:5b:e5:90:e1:f0:cf:7a:81:9b:49:14:7f:26:c4:
f0:be:e4:6c:46:ae:63:c9:cb:ce:91:a0:b3:6d:33:
7c:f1:27:07:12:b9:90:9e:ab:f9:92:37:88:92:25:
92:fc:cc:f0:9b:b6:62:01:a5:a6:36:d8:38:0d:5b:
46:83:1c:25:83:af:87:d4:b7:1c:4f:bb:d2:c1:c0:
ae:9f:21:0d:8e:24:39:15:5a:27:42:db:0b:51:8c:
06:46:0c:32:bd:20:1f:f0:2c:77:43:bd:50:44:0b:
99:a5:b7:2c:86:03:5d:c1:45:49:c0:cc:5f:2c:93:
10:1f:cb:d0:be:92:73:86:37:ac:bd:2f:93:96:6e:
65:35:16:23:5c:61:3a:03:8c:b3:2e:c5:44:d6:d2:
a9:69:1f:d9:76:d4:4e:4e:03:3d:d1:3c:ad:2d:f9:
59:8d:fe:5e:4d:91:bc:a5:fa:be:5c:e2:72:b0:f2:
fc:16:27:a9:22:53:84:ab:d0:69:dc:63:6a:ef:0a:
74:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DA:16:BA:13:EC:F4:49:4A:95:47:CD:CA:6A:74:E7:37:C5:E3:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA6632A6CD1911EF9CD7AF4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.32.0/24
Signature Algorithm: sha256WithRSAEncryption
76:36:db:18:91:e3:b0:82:6f:43:14:87:79:5b:14:e7:84:a8:
20:c6:2c:60:6a:78:aa:8b:3b:f7:a3:57:72:44:dc:84:25:d2:
f6:c6:62:a4:3a:93:d1:ef:d2:4a:d6:07:68:5d:49:75:eb:e9:
44:06:33:a4:71:d8:a7:dd:0b:75:b0:ac:e0:30:61:3f:2c:1c:
74:0a:e1:46:7a:36:c5:09:48:24:ec:4e:08:56:74:e0:61:6f:
f4:92:48:84:de:fd:a6:0e:f5:92:82:cd:68:c8:49:9b:25:61:
f6:dc:f8:f0:8e:b9:1c:26:20:80:72:99:8f:e9:27:72:43:11:
53:9a:d0:15:a9:f0:30:42:ec:f3:06:cd:d5:5d:a5:10:f1:25:
30:5b:9f:d9:ef:4e:68:14:d1:46:90:ed:3e:65:45:fe:1a:41:
60:4e:9b:94:e7:d3:5c:d7:52:c0:1f:06:1d:00:e6:3e:9f:83:
08:fe:19:28:38:93:5a:2a:91:c6:2f:2c:22:34:3a:3a:d1:b3:
d6:ab:6f:48:dd:e0:44:fc:a2:9e:ca:8d:0e:fe:94:41:30:7b:
90:da:1b:5f:a1:c3:9a:82:a3:1d:ee:d6:a1:01:e8:59:77:fb:
8b:98:31:0c:b0:f5:88:10:ff:6d:0e:4a:4a:7e:88:e3:5c:10:
98:36:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:05 2025 by rpki-client