Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E63B221CD2E011EFBD4E3474762E951A.roa
File: E63B221CD2E011EFBD4E3474762E951A.roa (raw, json)
Hash identifier: Tea6ZSy6FV2+WI/VPMEV8TcMlZ0sqJLsepu9UOYx6rk=
Subject key identifier: C3:49:3F:33:C7:D4:6D:BD:E6:06:6B:1A:74:07:8A:98:31:00:1A:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010735
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E63B221CD2E011EFBD4E3474762E951A.roa
Signing time: Wed 15 Jan 2025 01:34:45 +0000
ROA not before: Wed 15 Jan 2025 01:34:41 +0000
ROA not after: Sat 13 Dec 2025 01:34:41 +0000
asID: 984
IP address blocks: 156.253.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67381 (0x10735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 01:34:41 2025 GMT
Not After : Dec 13 01:34:41 2025 GMT
Subject: CN=678710b5-1b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:a1:f8:db:f0:fc:f8:83:4a:90:25:5b:2f:
9e:4b:81:d0:4d:77:c5:e9:8a:95:28:f3:b2:d5:7c:
ad:3c:8d:0e:4f:0c:26:6e:57:71:52:e3:15:ea:b9:
fb:ad:19:dd:94:1e:09:c3:92:7a:59:64:9b:5e:5d:
fb:f7:b2:52:65:44:49:28:c6:e1:42:5a:e3:f2:1b:
ec:c2:bf:0c:9d:56:a4:50:8f:0b:47:a9:c0:08:2c:
ee:b2:4b:6b:40:17:5b:bf:d0:b6:4e:d7:6c:0b:e2:
e4:19:35:b9:b4:aa:da:9f:20:a0:82:29:c3:1a:43:
1c:e6:97:83:c6:b4:41:62:ce:00:b8:bc:3e:06:ba:
be:3b:f9:e2:0b:c7:99:24:07:d2:f7:3d:f8:82:4d:
e3:cf:81:64:df:4c:2b:8d:33:71:e9:ea:2c:09:40:
02:98:13:c1:ca:53:f8:94:1b:3e:14:f2:c8:c4:7b:
4b:4b:ef:30:74:9a:a4:37:b0:83:35:6d:f7:19:1f:
fd:c8:e3:2f:93:b0:c8:fe:f6:35:d5:e3:fb:94:2a:
d3:79:0a:6c:8c:f5:dd:20:74:a2:f9:b8:be:52:cf:
1f:8a:75:05:46:80:46:3f:2a:89:6a:05:55:5a:b3:
5a:b8:3f:ff:f8:f3:dc:32:1d:0b:e8:39:02:a3:7c:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:49:3F:33:C7:D4:6D:BD:E6:06:6B:1A:74:07:8A:98:31:00:1A:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E63B221CD2E011EFBD4E3474762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.7.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a4:57:a8:ae:dd:32:97:b6:7f:b5:28:e3:bd:79:a4:3b:a3:
91:c8:37:2a:86:47:90:3b:b7:0d:8b:75:04:e0:4b:19:5a:3f:
d9:5a:6f:f5:ea:68:9d:1d:59:2e:86:d0:0c:9c:7d:c5:30:8b:
d8:fd:9c:58:cf:09:ed:a4:2f:e2:d3:f7:55:40:9c:ef:72:ed:
86:b3:52:51:10:b5:30:75:4e:95:b8:04:af:22:f9:93:ae:c1:
5d:38:9c:25:ed:9e:37:00:04:9b:e5:8b:84:fc:50:cb:db:bd:
dc:f0:1a:92:03:05:23:76:45:45:1f:86:43:ea:dc:9e:2a:01:
5d:6b:89:fa:f5:64:7d:6a:ae:37:bd:6f:8f:43:1f:76:60:12:
7f:97:3d:38:52:03:bb:48:78:80:76:eb:50:53:0d:ca:e2:01:
65:d6:78:e5:83:24:de:ad:1c:e5:55:55:8d:38:8a:67:da:bd:
d1:a3:a1:55:2f:64:7c:03:ef:0c:a5:5d:5b:9b:83:f5:33:6a:
0b:40:1f:fd:0d:97:d5:8d:32:75:36:92:af:88:e6:ad:f0:fd:
04:d1:48:92:ef:f5:9d:20:7c:a9:df:23:59:dd:d2:b3:83:82:
2c:73:40:a2:ae:fd:4e:f9:b7:9e:08:07:ef:f1:ce:4b:4b:50:
26:9c:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:37 2025 by rpki-client