Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D425F600CD6911EF87A44854762E951A.roa
File: D425F600CD6911EF87A44854762E951A.roa (raw, json)
Hash identifier: VNK7Q4EuRimZ15IYmft+F9FK3KZf+zfnqa/wEXFCcKM=
Subject key identifier: 3D:E4:8F:80:17:10:B0:4C:09:BF:90:E8:EA:FE:BC:08:A5:1F:AD:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D425F600CD6911EF87A44854762E951A.roa
Signing time: Wed 08 Jan 2025 02:39:49 +0000
ROA not before: Wed 08 Jan 2025 02:39:45 +0000
ROA not after: Sat 13 Dec 2025 02:39:45 +0000
asID: 984
IP address blocks: 156.247.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65373 (0xff5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 02:39:45 2025 GMT
Not After : Dec 13 02:39:45 2025 GMT
Subject: CN=677de575-61ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:5c:dd:a9:ae:d0:e5:e7:87:52:cf:a6:02:
ca:f7:9f:4e:d0:7e:4c:bf:1c:7f:28:3e:b6:af:8c:
d7:80:e7:02:bf:ae:db:20:5c:30:b6:ff:4f:14:58:
7c:9e:53:a6:38:03:35:6f:89:7c:bd:cd:f3:74:e6:
3b:8c:e8:b2:59:37:c5:86:f8:d6:35:5f:45:e0:f5:
40:2c:f8:5f:a7:5b:69:77:48:a7:57:e3:a5:68:3a:
35:4d:a1:20:f0:c4:16:60:77:e0:60:9b:c0:7c:74:
72:49:b8:ab:dc:9b:21:3c:b3:23:b6:cf:0f:eb:c3:
c4:83:cb:6a:d8:ec:d4:28:7c:b5:52:0a:0e:5f:aa:
53:41:56:33:5f:0c:8f:ff:5f:7f:88:1c:c7:2d:5f:
38:e0:aa:d5:a8:a2:84:33:dd:5d:72:39:9d:ae:15:
db:5d:02:91:5e:6e:25:de:d8:ed:a0:5f:b5:0e:43:
cc:f3:af:f9:d1:0d:e0:0e:00:2f:53:09:1c:55:bd:
6f:eb:c0:a2:f7:0e:7c:4d:b2:9c:dd:36:ab:79:88:
23:da:57:2e:19:95:16:a3:f1:c9:99:6b:2b:b4:76:
53:46:4d:70:fe:35:f9:02:33:6b:83:f8:0d:57:1d:
b2:1a:a2:e6:17:0a:f6:ab:f8:d5:35:46:4a:b1:3f:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E4:8F:80:17:10:B0:4C:09:BF:90:E8:EA:FE:BC:08:A5:1F:AD:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D425F600CD6911EF87A44854762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.122.0/24
Signature Algorithm: sha256WithRSAEncryption
30:04:f4:b5:c5:66:d6:1c:97:a3:a2:d0:63:c9:a6:95:ae:f1:
45:7d:f4:bd:c8:b9:91:5b:60:d5:ee:7a:54:92:92:52:4c:27:
76:96:4a:3b:74:87:44:52:e2:a1:ff:78:61:a3:32:88:8c:f9:
6e:12:9b:dd:66:94:3d:5f:ba:33:b6:23:ba:22:9b:ac:aa:a3:
d2:47:17:cb:61:98:01:60:10:20:28:a3:8c:ed:9f:12:d0:53:
43:17:45:94:06:5c:33:cb:f0:a4:2d:22:a9:be:a7:b5:f9:b7:
f2:e7:22:66:7c:81:eb:a5:c8:9a:83:e2:50:29:f9:8e:92:63:
e3:66:47:1c:45:89:df:02:44:eb:41:48:07:ab:24:96:82:49:
83:ee:47:38:a1:fa:0d:ba:5e:c3:25:f0:8c:fd:30:3e:e3:ec:
3a:b1:cd:a0:9f:df:f9:8b:37:ba:75:bc:70:76:b4:5e:ab:4f:
68:21:d6:a7:75:cd:44:7a:a4:5f:65:57:35:e8:67:a3:48:0f:
0b:e7:9f:17:f4:b2:65:16:59:9c:12:bc:6a:7d:f7:71:f6:84:
82:f6:2d:c4:55:c3:4a:89:9e:51:98:cc:5c:55:3b:05:7d:07:
64:e5:08:33:de:e8:ef:7d:6d:52:22:f7:44:98:6b:9f:d4:3f:
b8:33:ed:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:22 2025 by rpki-client