Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6E3CD74CD7611EF8E8BA0AC762E951A.roa
File: D6E3CD74CD7611EF8E8BA0AC762E951A.roa (raw, json)
Hash identifier: DWy7B6yg3ssPVr9/F6twTPHkoKndrzk6kWEkNFYl6Tw=
Subject key identifier: EA:E4:B3:CB:76:43:35:BF:BF:87:76:0B:17:7D:72:98:A8:08:DA:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6E3CD74CD7611EF8E8BA0AC762E951A.roa
Signing time: Wed 08 Jan 2025 04:12:57 +0000
ROA not before: Wed 08 Jan 2025 04:12:53 +0000
ROA not after: Mon 13 Dec 2027 04:12:53 +0000
asID: 17561
IP address blocks: 156.250.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65463 (0xffb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 04:12:53 2025 GMT
Not After : Dec 13 04:12:53 2027 GMT
Subject: CN=677dfb49-1e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:cc:12:b2:df:c9:c5:cd:15:2c:e4:ab:d3:
9f:d5:4b:7b:6e:c5:ec:e6:cc:ee:4f:6c:2b:f6:4b:
48:f0:12:58:db:fa:f6:bf:26:04:1d:b1:06:cd:8f:
3c:ee:54:49:e5:f3:d9:dc:4d:35:a9:4d:a7:59:a2:
d0:4c:36:1b:32:31:c2:cb:03:5a:2e:3e:f0:e9:34:
71:68:3c:b4:8b:f5:c5:e7:32:67:dc:88:21:df:2d:
2b:e6:1a:e0:35:77:57:83:97:a7:42:c7:16:5c:78:
cb:52:47:1a:d2:2a:aa:be:a7:5b:eb:29:d5:34:b9:
f4:a6:5d:ed:cc:5f:a8:1c:65:0a:93:dd:c9:68:cf:
32:02:b4:60:db:a6:7d:71:7d:40:f5:d1:73:39:5c:
5d:ba:43:41:7b:2d:5e:7e:f3:4d:70:41:72:12:69:
23:9f:8b:03:b1:22:c5:97:bb:a3:5e:fd:93:74:56:
7a:05:c9:11:12:cd:23:19:ad:ad:5b:1d:40:56:a4:
68:1c:6b:ad:91:18:69:ea:d3:2a:60:27:63:28:b9:
82:66:94:a1:a5:d9:3a:7c:7d:14:cb:7c:fb:77:8d:
61:9b:1f:b7:53:de:f7:8c:6d:0b:d6:6b:6d:70:f8:
5c:0d:43:02:f9:cf:48:23:a8:ad:29:71:f9:65:e8:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E4:B3:CB:76:43:35:BF:BF:87:76:0B:17:7D:72:98:A8:08:DA:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6E3CD74CD7611EF8E8BA0AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:90:dd:db:a7:52:b0:f8:e6:d5:61:81:f7:15:e8:6d:46:e3:
a5:15:1f:cf:f6:f9:9b:f0:9d:a4:6c:e8:95:03:89:26:c6:07:
22:5f:b0:98:b9:a0:d0:28:26:66:0f:57:30:88:a3:ac:42:65:
a5:46:83:9a:18:3e:0c:fd:54:3e:62:18:c3:c8:ea:1d:b3:93:
04:61:ce:64:33:5e:33:d7:a1:b8:8d:2f:ce:23:5c:39:b3:1c:
9c:8a:8a:85:2f:8a:24:48:de:32:6b:59:8b:5b:48:a6:c4:4a:
18:c8:5b:26:f5:27:06:a5:9f:85:7b:ce:b2:53:01:fb:d3:f5:
93:f9:e9:6c:71:cc:0b:e1:10:31:ea:2d:7d:e9:bc:38:92:b7:
8e:e1:75:f7:8f:c7:76:db:4f:a6:ba:08:4c:29:fb:5e:4a:b3:
76:76:e6:94:a2:73:52:84:67:cd:8b:5b:70:01:7f:0f:22:af:
71:f7:93:9d:3a:9d:d3:d7:97:57:9b:ca:9d:a3:79:a3:7e:5f:
12:46:fc:e1:02:85:4d:b0:a9:d6:1b:b0:87:a4:8a:0c:3f:82:
36:92:96:90:7c:9d:53:da:37:a6:05:9f:fa:75:85:50:46:44:
6e:8a:05:19:36:4e:b0:60:dc:91:c7:26:d3:52:17:80:50:a7:
5a:38:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:37 2025 by rpki-client