Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB0FB592CCD311EFB29C2193762E951A.roa
File: CB0FB592CCD311EFB29C2193762E951A.roa (raw, json)
Hash identifier: yZ7KvnfhaMQDRKzn3fkqiJW76F5yK77aJqzO2GZLLcs=
Subject key identifier: AD:2C:BF:E2:F4:EE:8C:75:EB:78:B3:E5:70:09:40:C5:E3:0E:AD:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FAEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB0FB592CCD311EFB29C2193762E951A.roa
Signing time: Tue 07 Jan 2025 08:45:49 +0000
ROA not before: Tue 07 Jan 2025 08:45:45 +0000
ROA not after: Mon 13 Dec 2027 08:45:45 +0000
asID: 17561
IP address blocks: 156.233.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64236 (0xfaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 08:45:45 2025 GMT
Not After : Dec 13 08:45:45 2027 GMT
Subject: CN=677ce9bd-33b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:8c:ae:22:0c:2c:ff:b4:d1:d2:4e:65:03:
ff:58:8d:af:e2:a2:57:f6:fe:83:1b:d2:fa:3d:28:
29:75:21:e8:e7:30:56:4a:8c:25:6d:1b:b7:d0:de:
69:63:b9:0c:0a:b4:44:36:c4:e9:46:a3:0b:34:95:
c2:e7:23:ef:07:f6:36:38:ad:e1:b1:32:51:5a:26:
84:c9:67:79:8c:a0:9c:d6:1d:7e:9c:e8:49:04:05:
e6:68:4d:ff:00:d3:ab:8c:e7:f4:61:6f:ba:20:71:
14:fa:95:39:f0:aa:02:45:2b:1e:8f:48:08:96:5d:
9e:0e:aa:ca:4f:78:81:78:bf:08:30:87:42:d1:f5:
da:50:d1:f4:2c:c1:de:38:d8:80:6b:bf:4b:d1:2c:
08:6f:11:2f:6e:96:57:7e:5b:d2:57:d7:83:ce:e7:
a1:09:af:10:b2:72:60:9a:4f:3a:a9:64:e1:77:89:
f6:62:ed:ee:3b:1b:22:7a:e4:6e:3a:58:ce:76:d9:
dd:9f:53:53:21:a7:a8:a3:08:02:b9:f8:ac:c7:4a:
cb:91:65:48:db:03:a1:91:9d:d9:87:ef:27:d3:39:
17:36:e6:f6:d2:b7:92:b7:a0:5c:71:7a:1d:5b:2c:
bd:f2:be:f6:8e:cc:cb:ad:1e:56:14:24:b7:00:03:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:BF:E2:F4:EE:8C:75:EB:78:B3:E5:70:09:40:C5:E3:0E:AD:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB0FB592CCD311EFB29C2193762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.165.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:54:16:2e:79:9f:a1:6a:a9:7d:26:90:3a:31:75:fb:6a:d3:
26:cc:e3:0c:12:52:fa:ec:e2:7d:41:f8:fb:53:69:a5:21:e6:
0f:5e:ea:da:0e:9a:e9:cd:fb:b5:ba:e9:ef:b3:61:e1:3f:11:
72:e9:f1:42:65:b5:c6:cf:96:15:96:9f:68:07:1d:ba:e3:e8:
9b:f0:a8:b2:f1:99:66:02:65:3e:aa:cf:51:c1:e0:a6:85:21:
f4:81:5b:a6:cc:e3:fc:77:60:a4:bc:53:11:cd:43:d6:cc:6d:
c7:8b:b5:b2:dd:77:6a:51:71:ca:fc:a4:a4:bc:a4:80:fc:d3:
d8:81:08:0e:77:3d:74:3e:29:25:17:fe:50:de:f3:db:b1:1a:
fa:a3:50:50:74:13:9c:71:70:ed:90:48:c6:94:c8:3a:0d:45:
77:ac:6a:0a:e2:a3:30:e5:49:fa:c6:39:f5:0c:b2:bc:25:61:
9b:d2:f6:09:26:07:f3:f4:2e:8b:7d:59:70:33:6d:3b:e3:0a:
a9:d3:f1:09:40:0b:4f:fb:e7:6e:f5:df:d6:34:a9:08:86:06:
f2:02:fa:ba:14:78:f1:dc:a1:ea:cb:99:5f:61:39:f9:96:75:
a6:67:5f:85:10:2b:a6:d8:39:7f:37:11:89:5e:04:bc:f3:be:
b7:e7:a1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:44 2025 by rpki-client