Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE080F1ACE4A11EF9F7A3576762E951A.roa
File: CE080F1ACE4A11EF9F7A3576762E951A.roa (raw, json)
Hash identifier: e/G5ZlqP3OD8NsxA8qh1psAejmQy8CoIhYbe+vkyrCs=
Subject key identifier: BF:EC:86:6D:97:69:1A:8A:56:9A:CE:DD:55:FB:E6:96:E3:B5:70:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE080F1ACE4A11EF9F7A3576762E951A.roa
Signing time: Thu 09 Jan 2025 05:30:15 +0000
ROA not before: Thu 09 Jan 2025 05:30:12 +0000
ROA not after: Fri 09 Jan 2026 05:30:12 +0000
asID: 17561
IP address blocks: 156.238.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66233 (0x102b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 05:30:12 2025 GMT
Not After : Jan 9 05:30:12 2026 GMT
Subject: CN=677f5ee7-9c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:67:3d:d1:d1:4a:5c:d5:c6:14:dc:e8:35:
40:d4:69:bd:51:c8:8c:2e:14:c2:ab:65:e7:5e:f9:
2f:c3:14:40:79:c9:62:48:49:c3:2f:e8:c1:79:ce:
ab:41:3d:ed:d5:d8:80:4f:9c:cf:c9:79:a1:4c:f4:
67:d5:0a:44:3c:ad:24:e7:10:fa:f6:c8:95:1d:68:
f9:1a:ce:8d:2a:1d:1b:fe:44:58:77:44:12:60:4c:
ea:92:2c:9f:16:61:b1:0b:43:a7:c2:9d:a9:36:de:
11:32:36:41:76:e9:8c:64:5a:80:ba:12:ca:dd:9c:
27:72:71:b3:d1:89:dc:ed:2c:f8:ed:0b:1a:10:6b:
9d:a5:01:60:bf:24:f3:fc:39:1b:f0:eb:64:69:14:
4f:3a:16:43:58:09:be:36:38:9f:63:d2:9e:35:70:
35:72:71:45:a7:7a:af:6f:50:20:87:56:4d:4c:f6:
cc:b2:8b:f1:fe:e7:da:94:7f:fb:af:4c:2b:60:a8:
8e:7f:17:6a:29:b7:b0:94:8f:23:0a:42:93:ec:5c:
ba:19:b6:27:54:f9:e3:46:72:35:49:bb:34:41:e0:
83:48:a8:f0:72:6b:80:79:b7:fe:8f:42:c7:fb:a0:
7a:f3:4f:85:30:08:4c:70:e8:88:14:a0:b6:a6:78:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EC:86:6D:97:69:1A:8A:56:9A:CE:DD:55:FB:E6:96:E3:B5:70:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE080F1ACE4A11EF9F7A3576762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5e:d3:87:49:1c:67:de:99:a0:53:72:31:8e:c3:5a:4e:38:
76:2f:cc:85:b0:3a:b9:59:c6:c2:43:b5:63:33:8f:a2:c6:f6:
d8:ba:44:ae:62:c8:6c:80:cf:3d:73:85:2e:fc:c5:7a:3f:f1:
cd:e3:f2:f2:bc:c9:bb:93:8f:05:91:6c:08:19:9f:a6:27:20:
9a:42:c8:13:2c:88:06:82:05:82:d0:e0:24:26:54:c0:26:0b:
36:17:e9:fe:52:67:3c:6a:5d:6a:e7:df:5b:66:33:84:cb:6f:
6c:22:8a:44:c5:cd:5f:8e:58:fa:79:fc:9f:9e:40:db:f3:3d:
a0:2b:c5:f8:fc:ba:e6:c2:f2:2a:6d:59:d4:9c:f2:8e:ff:8c:
51:2c:07:cc:2d:46:a7:13:9b:3d:7b:14:f6:de:e3:2a:a9:57:
19:15:7f:0b:62:16:73:9a:27:f9:3d:f6:db:48:8a:b2:d9:e5:
4b:8b:49:e7:5c:fe:fc:2f:c3:d8:12:73:db:16:66:0b:99:21:
15:c0:6b:d7:22:23:05:49:d9:1e:ba:0c:c1:ca:32:07:b4:a7:
d2:86:4a:fc:48:a0:86:76:52:8a:4e:d9:33:88:ad:14:e2:2f:
f6:f0:b9:f7:11:7d:e8:21:6a:39:bc:75:76:07:b5:75:84:31:
7c:d4:d6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:19 2025 by rpki-client