Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D23837DCC99911EFB18EDF9C762E951A.roa
File: D23837DCC99911EFB18EDF9C762E951A.roa (raw, json)
Hash identifier: WiDaTX2bFUpE/1zALxN79C6mcBXSsNcfwUJviYAhyqk=
Subject key identifier: C2:50:AD:CD:BD:CD:73:0D:23:85:36:1C:69:9B:A4:D8:DB:C8:01:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F635
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D23837DCC99911EFB18EDF9C762E951A.roa
Signing time: Fri 03 Jan 2025 06:13:17 +0000
ROA not before: Fri 03 Jan 2025 06:13:13 +0000
ROA not after: Mon 13 Dec 2027 06:13:13 +0000
asID: 17561
IP address blocks: 156.233.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63029 (0xf635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 06:13:13 2025 GMT
Not After : Dec 13 06:13:13 2027 GMT
Subject: CN=67777ffc-fbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:bc:7a:c7:b0:52:06:38:cf:13:ef:02:3a:
cb:03:a0:bc:01:08:a8:09:ab:07:b5:f4:55:59:04:
5e:66:0c:2e:e6:ea:00:00:44:60:77:76:a6:18:c5:
82:80:45:9e:35:d2:28:50:d3:6b:95:7a:24:7f:b4:
55:93:62:97:55:77:62:f2:49:59:77:81:68:77:fb:
db:e4:86:b8:24:44:20:cf:e2:48:fa:c6:2d:e3:e2:
1b:61:63:b1:c0:d5:67:1f:b4:c6:fe:e3:ae:91:71:
01:c4:3b:36:d0:13:46:da:3c:d5:db:38:1f:cd:cd:
e6:75:32:ea:cd:e5:51:5a:2a:2b:e9:42:fb:10:cf:
59:a3:29:54:18:aa:66:82:01:af:0a:9a:12:93:9b:
fb:df:db:05:31:ed:d3:0f:4f:62:9d:34:db:a7:89:
88:6c:19:04:aa:a0:e5:e3:c0:42:2b:9f:e6:6b:68:
12:b7:d6:ae:e1:98:b7:87:3e:51:bd:35:bf:64:05:
14:27:ec:33:ae:93:1f:3b:31:2e:34:37:d3:ba:82:
5f:89:d4:46:e6:ae:b0:f1:7f:4c:c5:1e:99:e4:7e:
85:d9:69:58:42:7a:aa:cc:14:05:bd:af:c7:cc:70:
af:d2:63:98:b0:93:90:88:e3:38:3d:85:83:89:2b:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:50:AD:CD:BD:CD:73:0D:23:85:36:1C:69:9B:A4:D8:DB:C8:01:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D23837DCC99911EFB18EDF9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.159.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e1:9e:79:28:d8:ba:4b:eb:98:b2:ce:3a:cf:e2:48:5d:55:
3d:a6:20:53:46:d0:e6:59:8a:48:46:49:b5:a6:4a:74:80:40:
28:64:20:54:39:d7:78:05:40:e6:1d:dd:99:af:d1:db:db:6b:
18:f2:af:9b:9c:22:2a:37:e7:ee:f3:b9:0e:ee:6b:34:bb:0d:
94:a7:f7:ac:a2:17:b5:f9:ee:80:04:ac:5b:9e:c3:c0:f0:6e:
43:c3:66:0f:08:cc:08:ec:54:78:70:88:63:23:87:b7:cb:2d:
ff:cd:f8:ed:ab:2a:2f:a3:a9:ab:df:c0:29:c2:34:7b:52:3c:
14:7c:e9:3a:73:48:73:71:0f:01:84:52:15:f5:30:97:57:33:
c8:bd:27:11:8c:0d:20:5b:2e:09:52:57:64:63:16:be:88:3f:
a5:21:90:2a:4c:17:56:30:1d:50:12:b0:25:7e:0c:ca:18:ff:
e5:42:46:7c:27:83:86:2b:37:e2:24:a5:5f:05:f5:54:96:e7:
94:39:a2:51:e6:05:8e:5c:2e:e7:a2:38:c6:a4:1d:89:ed:c3:
99:23:ec:aa:91:d1:53:96:26:b1:e3:13:3d:d0:a1:e5:77:3f:
3b:e6:32:a3:41:6a:7c:97:b5:1b:a8:af:64:c6:bc:9a:8f:2d:
1f:95:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:20 2025 by rpki-client