Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4A9B5A8CDA011EFACE3B9B3762E951A.roa
File: D4A9B5A8CDA011EFACE3B9B3762E951A.roa (raw, json)
Hash identifier: YKe8APqw3WnsIPfIWAgCsck6zKPmG8u1ps6tE8zzezA=
Subject key identifier: 56:04:68:D7:C1:68:E8:EE:3F:2D:B8:48:E3:36:F0:77:E9:E2:78:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4A9B5A8CDA011EFACE3B9B3762E951A.roa
Signing time: Wed 08 Jan 2025 09:13:32 +0000
ROA not before: Wed 08 Jan 2025 09:13:28 +0000
ROA not after: Mon 13 Dec 2027 09:13:28 +0000
asID: 17561
IP address blocks: 156.253.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65752 (0x100d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:13:28 2025 GMT
Not After : Dec 13 09:13:28 2027 GMT
Subject: CN=677e41bc-8498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:75:0e:b0:ae:91:39:d9:86:c8:23:55:63:
4f:26:b1:ba:83:d7:b5:1d:55:32:2a:f4:86:37:8e:
e2:72:87:0f:35:37:ba:cc:47:bf:fc:67:7d:48:76:
4e:65:24:b6:1c:06:09:4d:be:bc:93:71:44:2d:ca:
f5:dc:4b:63:1e:aa:29:f7:96:2c:4e:a4:b2:56:e6:
34:91:ed:cf:2b:c8:03:03:68:29:78:58:27:7a:1f:
fa:17:ac:9a:2e:34:64:be:f8:55:94:cf:1a:43:10:
19:f8:ea:cd:4e:1f:08:6c:d5:d7:e9:4d:33:e4:bb:
d3:43:b0:b7:ad:5e:31:d4:b1:ee:bf:ef:f7:2d:f4:
3b:1f:a9:24:39:09:ac:01:56:28:5a:ca:f1:24:c1:
1a:e8:d4:bf:c7:7a:45:f9:64:ca:4b:89:53:39:0f:
71:17:54:93:e5:0d:84:20:40:a2:1f:c5:42:1b:1d:
14:ca:2e:7f:16:90:17:05:24:4f:5b:c3:3c:02:de:
15:d5:27:b6:f8:f7:a7:63:aa:f6:53:40:31:18:ea:
5f:f3:c4:70:85:9c:f9:4a:c8:2b:e9:c6:44:1d:fc:
92:b3:4e:0a:75:a9:65:c4:b9:5e:87:03:21:74:c1:
dd:d7:df:1f:1a:a4:c3:09:a7:af:e4:23:95:57:27:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:04:68:D7:C1:68:E8:EE:3F:2D:B8:48:E3:36:F0:77:E9:E2:78:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4A9B5A8CDA011EFACE3B9B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.39.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3d:6c:c8:98:4e:c8:ed:05:13:75:0d:e1:b9:63:9c:9c:93:
3a:79:09:9f:86:a5:ab:66:bd:05:d0:8c:94:ef:af:f2:bf:7b:
aa:69:e9:ae:6a:4b:b0:9e:3f:2f:17:7e:eb:25:6b:05:be:6d:
bd:35:c5:46:46:e6:a0:86:09:b3:20:62:82:4e:72:2f:1e:48:
a0:57:4f:4b:8e:1e:55:7c:cf:fc:1b:60:98:6a:66:fb:07:80:
af:e4:e1:9c:e5:ea:59:08:9d:ec:73:26:ae:70:f1:c8:6c:59:
b2:4c:de:68:cb:56:b2:83:9f:7a:22:91:5e:5b:6f:57:32:65:
c6:67:bc:c0:1c:e5:3c:71:a3:ab:1f:db:31:57:d0:c2:32:f6:
dc:0a:29:5c:9d:94:7b:35:c2:09:b8:0f:e0:67:4a:a7:64:d0:
0a:4e:70:4e:cc:95:f0:f6:4a:21:01:c9:34:4b:62:e2:2d:8b:
13:4d:8c:4c:35:aa:04:2d:5e:ba:03:55:aa:05:ed:0b:fd:76:
fd:d5:e9:f8:07:ab:c4:3d:c5:bf:61:a1:fa:82:5e:bd:f3:cd:
82:01:62:37:7a:5f:6e:81:02:ea:f3:29:d9:b3:22:a8:ae:13:
57:37:06:e1:33:0e:32:52:2a:f2:7d:e0:d6:ab:c1:61:58:5b:
a1:b8:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:32 2025 by rpki-client