Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E641278CCDAB11EF9800D37A762E951A.roa
File: E641278CCDAB11EF9800D37A762E951A.roa (raw, json)
Hash identifier: Wkm6Bzm4T3lz5L3moj59jISlVaeasFt90y6nVTI4bpA=
Subject key identifier: 89:62:7D:C9:4A:6D:8B:22:AC:00:A6:22:7B:E1:68:18:12:57:08:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010157
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E641278CCDAB11EF9800D37A762E951A.roa
Signing time: Wed 08 Jan 2025 10:32:46 +0000
ROA not before: Wed 08 Jan 2025 10:32:42 +0000
ROA not after: Mon 13 Dec 2027 10:32:42 +0000
asID: 17561
IP address blocks: 156.255.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65879 (0x10157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:32:42 2025 GMT
Not After : Dec 13 10:32:42 2027 GMT
Subject: CN=677e544e-f807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:1d:64:d6:38:c5:15:20:ee:78:49:76:08:
f0:bb:21:85:30:81:3d:87:80:88:6f:5a:48:66:3f:
05:04:91:46:21:81:5d:13:a9:d7:c2:d2:f5:15:ef:
52:cf:33:a6:4e:3d:f2:fc:ec:b2:08:cc:ca:08:a2:
66:da:0d:06:d9:15:c4:c8:b7:f5:a4:47:50:ef:66:
4f:56:4a:34:fe:22:55:77:cb:6b:e3:85:a7:f2:3c:
51:97:c1:40:7d:ed:f4:5a:2d:16:bc:2b:a7:02:ea:
8d:fa:1e:53:3c:8f:29:84:94:4e:df:02:21:d8:86:
67:18:ff:ab:49:ab:82:33:00:de:6b:78:0b:b2:ac:
ab:0d:96:c0:28:92:6a:e0:1a:12:ed:d4:db:46:f6:
35:f4:d9:1d:e2:38:9e:f7:a8:ed:46:5f:af:6b:3b:
21:ea:f2:d0:e5:b1:60:7a:60:43:c6:2f:4e:fc:6f:
9e:c6:b3:60:29:37:75:6d:64:3f:b3:43:88:6f:49:
e6:ce:92:4a:36:e6:b7:db:91:a4:34:7c:c8:c6:e6:
0a:a7:18:26:64:ca:e1:36:4f:03:31:ff:0e:73:0c:
5f:48:4e:d0:94:79:b8:f0:8b:fe:ee:e7:76:6f:d7:
e6:4a:37:cc:09:97:e9:83:c3:92:8d:28:3d:70:6e:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:62:7D:C9:4A:6D:8B:22:AC:00:A6:22:7B:E1:68:18:12:57:08:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E641278CCDAB11EF9800D37A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.46.0/24
Signature Algorithm: sha256WithRSAEncryption
27:61:03:e4:91:3a:8d:26:67:5f:e5:6a:93:45:28:0c:8a:b5:
83:d3:63:8a:21:28:d7:fb:bc:8b:3d:07:16:5f:bc:a6:f7:bc:
8f:39:0c:bf:20:70:c0:e7:b7:a1:cd:b2:a7:b7:a7:1b:59:0a:
72:fe:ed:5b:0f:da:5f:d9:43:dc:0d:5d:26:e1:56:5c:7a:ef:
0a:4f:72:57:a2:09:fa:4c:6d:19:f6:76:b6:67:70:db:f9:05:
0d:28:59:a1:d5:23:5b:b8:03:dc:23:aa:cb:27:f6:b3:9e:c2:
62:cc:5e:bd:3b:f0:26:b2:d3:55:c4:68:b1:93:be:23:7b:58:
11:71:dc:0f:95:21:46:6c:3d:bc:2c:b9:92:e2:28:fb:fe:13:
6a:69:1f:d5:c9:0f:b3:17:a3:5a:56:1f:cd:a5:0b:d0:ff:24:
18:55:b4:63:ba:63:4f:b1:c7:21:05:1f:3a:22:e5:53:83:fa:
24:d6:56:dd:73:1e:71:8e:d5:d9:1d:dc:46:2d:b1:6d:94:9f:
b8:d5:72:87:d2:88:b2:1c:67:e8:ae:4c:85:67:92:ba:4c:d9:
2a:f8:de:31:00:98:06:4a:c2:aa:01:35:c6:69:92:5d:c3:fa:
90:31:3e:2c:d1:aa:12:82:59:9c:4d:2c:b1:a0:09:c8:a4:88:
1c:05:42:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:54 2025 by rpki-client