Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE962734AB3311EFA3A02BA2762E951A.roa
File: DE962734AB3311EFA3A02BA2762E951A.roa (raw, json)
Hash identifier: 9N6ri02fYwH8ewc7d1vgoIVeM8KT6/chZw2R5hxIFvk=
Subject key identifier: 0D:1F:EE:D8:3E:FF:2A:0C:AA:21:3E:ED:71:D5:C3:09:EF:96:0E:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DA80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE962734AB3311EFA3A02BA2762E951A.roa
Signing time: Mon 25 Nov 2024 13:47:54 +0000
ROA not before: Mon 25 Nov 2024 13:47:50 +0000
ROA not after: Sat 03 Jan 2026 13:47:50 +0000
asID: 139057
IP address blocks: 156.246.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55936 (0xda80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 25 13:47:50 2024 GMT
Not After : Jan 3 13:47:50 2026 GMT
Subject: CN=6744800a-a71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:3f:26:ed:b2:4d:ca:a9:7f:32:1e:bf:f4:
1b:15:40:12:4b:25:bd:5a:79:03:c2:0e:c5:58:6b:
83:27:12:fb:31:fa:15:dc:21:44:a8:1a:96:7b:d8:
97:38:dc:db:aa:c5:d6:10:69:36:d6:27:38:7b:99:
f8:88:cb:5e:15:29:81:8a:22:29:52:49:54:97:a7:
8a:8f:29:e3:86:61:2e:4b:79:da:a6:95:dd:a8:97:
34:db:d3:e8:8a:0b:0b:47:c9:56:ac:48:1a:0b:76:
45:27:4c:b8:49:8b:5d:4b:61:80:8a:4e:2c:06:c2:
15:f5:31:d1:c8:a0:0e:48:78:3e:66:9e:f7:62:e4:
be:e8:31:b4:37:65:08:9d:2b:ff:55:85:74:fb:93:
61:fa:c4:48:54:c0:0c:91:9c:7e:0e:d4:b7:64:30:
1e:ce:62:d4:a0:7f:77:4a:81:99:34:5a:1f:da:4f:
82:87:e3:34:e9:e0:83:75:20:f6:63:44:3f:0d:c8:
ac:45:9f:f6:f8:4a:1a:8d:2e:81:13:9c:ed:63:e6:
61:17:94:a0:86:49:62:41:cc:cc:f8:92:c7:6f:c9:
03:df:30:f0:0b:3b:b3:69:a1:03:eb:8c:ee:b4:ca:
de:f0:12:a9:81:43:42:fd:8a:87:5b:85:55:54:b8:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1F:EE:D8:3E:FF:2A:0C:AA:21:3E:ED:71:D5:C3:09:EF:96:0E:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE962734AB3311EFA3A02BA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.18.0/23
Signature Algorithm: sha256WithRSAEncryption
51:1c:53:8a:e1:e2:57:2f:f2:51:ee:77:48:cd:5a:54:a4:63:
07:f0:76:65:54:39:39:c4:5d:3a:97:1f:03:47:37:e4:c8:67:
6f:87:a2:2a:0d:39:26:48:6b:e7:cb:c3:d3:73:41:51:67:7b:
89:c0:d0:50:60:ed:82:99:5b:85:7a:d5:92:08:20:95:3d:af:
09:5c:b6:25:bd:ad:60:12:a6:08:83:95:fd:a6:72:4c:be:4d:
c0:5a:88:8f:25:d6:47:dc:65:4e:c4:15:ac:1a:0a:6c:4b:3c:
bf:ef:0b:2c:03:16:48:7d:7c:06:dc:ac:d7:7a:f4:60:6f:d8:
af:58:2c:a2:b8:5f:ea:75:2e:80:0a:d6:6a:e8:34:55:3a:4d:
7e:c7:02:16:f6:9e:af:85:60:65:66:38:1c:02:59:8f:8d:f1:
2c:f8:ed:dd:14:7c:00:5c:ce:a8:7b:c0:71:d5:8b:49:8f:8d:
a6:00:17:6a:47:fb:e1:4b:15:90:0c:06:c7:4c:2d:19:7a:43:
ab:dd:f1:26:d8:81:5f:d1:76:ce:fa:31:b0:b6:86:0d:db:cd:
87:e5:06:3d:3a:00:2c:28:48:c8:19:42:a6:a0:87:f9:82:29:
3c:a1:e6:54:4b:6c:c6:a4:69:68:c8:1a:05:8d:27:06:1a:82:
8d:21:41:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:55:47 2025 by rpki-client