Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7AFB1C0CDC911EF9ED223B6762E951A.roa
File: D7AFB1C0CDC911EF9ED223B6762E951A.roa (raw, json)
Hash identifier: wYLwW/VrpO9Q8isQEIGy6F3itDHYqSQTD05Tn6v3w30=
Subject key identifier: 14:29:B6:8E:57:81:D1:33:1F:69:CE:49:75:62:EB:8B:25:E1:6A:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7AFB1C0CDC911EF9ED223B6762E951A.roa
Signing time: Wed 08 Jan 2025 14:07:06 +0000
ROA not before: Wed 08 Jan 2025 14:07:02 +0000
ROA not after: Thu 16 Dec 2027 14:07:02 +0000
asID: 17561
IP address blocks: 156.249.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65988 (0x101c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:07:02 2025 GMT
Not After : Dec 16 14:07:02 2027 GMT
Subject: CN=677e868a-6692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:18:a5:34:c4:6d:eb:c0:65:3e:5a:4b:a6:
6c:aa:b4:88:b0:1a:4f:67:f4:47:2e:61:ab:de:81:
67:7b:47:4b:f0:4e:8e:3b:62:53:fc:4e:a0:33:8f:
d6:f7:85:8a:0a:13:66:6b:67:6c:13:d0:7d:d4:28:
f7:84:f9:34:ec:89:ab:76:17:93:95:89:d7:ff:a4:
06:b3:73:75:33:a0:f1:1b:6e:1d:d8:ff:3a:17:14:
a4:21:07:3d:16:72:2f:72:ca:83:54:48:d4:6b:ab:
3c:a5:ed:6c:af:1e:c2:70:8a:d5:35:01:48:7c:f8:
0d:4c:4b:79:cd:7b:29:db:8e:cd:87:b5:de:40:14:
e7:3b:c8:50:d5:db:48:35:66:18:bb:cc:a0:2d:90:
b2:28:61:6e:5d:4f:d9:cb:e7:90:d1:fe:ca:2e:b7:
92:ef:12:af:23:0c:0c:a1:d5:77:56:fd:d4:1c:cb:
c6:2c:50:aa:bb:87:28:59:29:c6:6f:f1:69:b1:1f:
22:2a:b9:40:c3:80:9e:e8:28:d0:7b:c1:1c:1e:f0:
56:49:88:f0:d8:b3:46:a2:bc:5d:ad:50:e4:35:e5:
4f:ca:43:fc:6b:a3:1a:75:78:e2:62:d2:76:60:09:
22:5c:38:95:f8:0b:15:19:90:29:06:93:44:4a:5c:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:29:B6:8E:57:81:D1:33:1F:69:CE:49:75:62:EB:8B:25:E1:6A:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7AFB1C0CDC911EF9ED223B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.61.0/24
Signature Algorithm: sha256WithRSAEncryption
76:59:c4:ab:3a:f4:49:d5:61:10:3c:d4:7d:47:6e:66:ac:54:
62:e4:66:39:ae:bd:d3:3d:74:57:5a:58:59:fe:65:29:81:76:
ec:1f:81:45:b5:da:b6:8b:5d:e1:2d:b3:0a:a5:f8:f3:2f:87:
c3:2c:18:d5:4e:31:18:2f:d5:a1:54:5a:b4:a5:42:97:82:c6:
8d:aa:fe:4d:20:0b:43:82:14:93:bd:9f:26:c7:b1:83:91:76:
09:45:a9:b2:eb:a5:67:99:62:2b:3a:83:f7:76:e3:9b:64:16:
b9:06:53:84:8c:2e:ed:9c:0f:95:ad:d3:f0:01:17:09:74:1b:
ca:b2:53:2f:96:25:5c:f0:19:44:1d:cd:bb:44:52:5a:0e:49:
69:dc:1e:18:31:e3:47:65:b6:4c:43:75:f7:07:51:06:47:81:
f8:20:52:e4:6c:12:22:2e:b4:a5:fe:a2:bd:b8:a3:19:19:20:
06:b3:16:b2:1d:6e:91:6b:96:4e:19:15:d7:db:65:8d:bf:bd:
4f:b8:8f:90:95:76:42:33:86:16:d5:64:50:34:26:86:bd:e6:
72:99:e7:13:49:6e:f2:ea:4d:92:86:c3:d3:2b:ce:eb:86:cd:
d5:45:69:0b:8d:0d:7a:d6:aa:ed:60:c2:62:44:2b:ec:93:81:
ad:88:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:44 2025 by rpki-client