Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D274B6FEC32B11EF83767CA7762E951A.roa
File: D274B6FEC32B11EF83767CA7762E951A.roa (raw, json)
Hash identifier: NSGJW5YkhfC9UbnEnSyAhE8C+HtUXfZQLHXHPOWZWlE=
Subject key identifier: AB:4C:23:95:43:8E:10:BB:1D:9C:80:15:6E:6B:CB:B1:FA:AA:2D:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EACF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D274B6FEC32B11EF83767CA7762E951A.roa
Signing time: Thu 26 Dec 2024 01:50:45 +0000
ROA not before: Thu 26 Dec 2024 01:50:42 +0000
ROA not after: Wed 10 Dec 2025 01:50:42 +0000
asID: 984
IP address blocks: 156.243.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60111 (0xeacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:50:42 2024 GMT
Not After : Dec 10 01:50:42 2025 GMT
Subject: CN=676cb675-2adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:5d:4a:6a:6e:90:f1:a7:e8:da:ca:a2:e5:
4b:91:ce:ef:4e:46:f1:55:66:8a:ba:a0:c7:91:7f:
0c:32:36:c8:02:91:ea:57:38:d9:a8:fd:3f:1b:54:
1c:83:a5:d5:cd:ce:0e:3c:7c:91:9e:4c:75:b2:8c:
e4:13:a0:2c:7c:23:85:51:de:3d:bb:4a:10:39:a7:
32:2a:6e:78:10:d9:e8:32:b7:aa:62:eb:d4:39:e7:
ca:33:33:ba:f3:46:cc:5b:ed:50:64:fe:ae:e6:ac:
43:3c:72:e8:9d:4d:1f:5c:68:2a:bc:95:c1:d5:47:
83:eb:60:65:9f:f9:75:73:51:b7:07:ca:1c:4a:d9:
16:fd:71:88:e5:99:50:67:e8:6c:b8:6d:bf:89:b2:
c2:5f:8d:f2:9e:40:ac:89:e3:3c:d4:89:09:31:81:
56:33:8f:94:8c:ed:aa:7e:bd:56:d0:04:b1:c6:dc:
b1:71:c4:75:2c:60:c7:2a:d8:df:6e:c3:b6:b1:6c:
87:96:a2:50:93:a3:1d:16:34:fe:55:25:a4:e9:83:
d9:5e:24:1e:28:1b:6a:01:ef:d0:e7:47:08:79:0e:
6c:4d:03:2f:fe:0c:1a:72:ee:26:7f:62:e5:af:0d:
c0:4e:c1:a3:ad:af:f4:cd:02:89:a6:54:5a:eb:d3:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4C:23:95:43:8E:10:BB:1D:9C:80:15:6E:6B:CB:B1:FA:AA:2D:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D274B6FEC32B11EF83767CA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ff:1e:6c:21:4b:ea:8b:d1:f5:75:08:c7:53:d8:cd:99:59:
87:6d:45:c2:0e:2e:b8:7d:a8:d8:0b:1e:d5:81:a9:ab:6b:55:
ff:f2:c9:48:55:0e:b3:d8:d6:cd:2c:0d:37:c7:bd:a5:ad:ad:
7e:ca:97:0b:6f:cf:ae:ae:44:52:7b:31:32:fa:c6:7c:40:81:
1b:08:51:0f:a4:69:e2:39:54:e8:e8:9c:c8:a0:8a:6d:f2:4d:
08:93:b7:e1:76:24:22:d3:36:06:eb:9c:3e:e7:81:5e:d5:58:
f6:97:b6:d3:1e:3f:89:35:94:10:72:b3:e4:ac:97:8d:ca:5e:
77:9d:be:e8:e9:e0:90:1e:a1:33:ca:8c:b6:e6:e1:10:f2:ec:
d5:00:b5:04:96:bf:6d:89:12:24:21:1c:fe:93:7d:ab:cc:97:
73:42:47:41:e8:6d:26:c2:fa:dd:d6:82:8d:21:5f:7d:d2:ba:
9a:67:e5:98:e5:97:56:92:89:9b:ff:64:c9:24:e5:59:a8:77:
0f:bd:84:ee:73:90:9e:60:65:90:08:44:b7:3f:24:c2:c4:7e:
29:70:69:98:12:73:da:e5:b6:b3:12:38:32:71:50:d3:84:0a:
3f:e3:a3:0c:33:30:a7:24:0a:5b:e7:84:75:9b:15:9d:f5:a3:
12:20:d6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:01 2025 by rpki-client