Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C49AF2E54411EF9B360C43762E951A.roa
File: E7C49AF2E54411EF9B360C43762E951A.roa (raw, json)
Hash identifier: 8O8bCOFarIgtwsBVvZAyDjKFR+vZGoFdnb3vPuMFaAI=
Subject key identifier: 79:4F:11:71:E4:F1:4D:16:D4:38:04:5D:0F:29:2D:13:83:7F:4A:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C49AF2E54411EF9B360C43762E951A.roa
Signing time: Fri 07 Feb 2025 11:15:58 +0000
ROA not before: Fri 07 Feb 2025 11:15:54 +0000
ROA not after: Mon 13 Dec 2027 11:15:54 +0000
asID: 17561
IP address blocks: 156.230.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73011 (0x11d33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 11:15:54 2025 GMT
Not After : Dec 13 11:15:54 2027 GMT
Subject: CN=67a5eb6e-2026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:df:94:b5:bb:a2:a9:f8:14:0e:00:ae:59:
6b:95:45:03:2f:dd:88:71:6c:9b:b5:32:a0:3e:3d:
12:17:a1:7f:e9:1a:81:b2:f4:a3:19:28:2e:c6:9d:
39:cf:db:99:4c:fc:b7:21:fc:89:cd:92:59:ce:a0:
c6:92:f6:05:a0:6e:f5:76:89:9a:ca:5d:91:ea:b6:
f2:3c:3a:b6:e5:9f:15:e3:df:45:7e:b8:fb:7b:14:
e8:49:dd:c9:e1:21:a3:4e:13:3a:da:21:af:29:01:
1f:a8:d8:f9:c5:74:2f:ef:ad:8a:8c:13:bf:ed:bc:
28:c3:b1:b0:89:2f:32:75:3d:66:1e:9f:db:9f:81:
d6:c3:42:ac:a2:17:e0:d9:fd:2b:21:00:b0:06:74:
d3:1f:77:9f:cf:92:69:a1:bd:3a:ef:89:b1:44:ee:
6e:2c:81:f3:7f:49:c2:e9:21:a5:e7:8b:bc:54:3d:
50:13:d9:5c:a1:ab:79:5d:13:b2:eb:9c:94:ff:2b:
b3:35:41:a9:1a:c3:01:ae:4a:e7:7c:d2:8b:70:be:
ff:a9:01:66:9c:a7:5c:b2:a8:75:a9:5b:7a:7a:39:
e1:87:29:a7:58:1f:85:03:a5:1b:e9:c0:cc:ab:6f:
e7:88:07:d2:ba:52:55:6e:b7:cf:3b:78:d9:d0:a2:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4F:11:71:E4:F1:4D:16:D4:38:04:5D:0F:29:2D:13:83:7F:4A:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C49AF2E54411EF9B360C43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.177.0/24
Signature Algorithm: sha256WithRSAEncryption
79:79:a6:a8:34:c6:9d:75:f5:e2:81:89:6c:fc:32:f4:26:a6:
3b:ee:fa:73:5b:98:fd:26:3d:57:f3:6e:0a:e3:12:28:97:1e:
6b:6c:80:e7:0c:c7:1c:93:1b:34:42:05:c1:3f:9d:fd:ed:46:
6b:7f:44:e3:3c:b1:24:8f:ea:72:95:a2:5f:bc:59:cd:dc:71:
5b:79:0b:c8:a0:78:4c:b5:32:ec:f7:d9:8a:dd:81:a2:20:6c:
d8:42:a2:32:91:6c:b3:c2:26:40:80:09:21:1f:77:88:09:73:
4b:47:5e:7c:da:09:2c:a9:bf:d0:7d:a8:9f:4c:19:71:4a:7e:
69:52:89:67:29:89:66:63:92:66:a7:13:db:39:48:f9:1d:ad:
1b:c1:6e:86:58:a0:50:a0:ef:e7:43:78:9b:fb:2c:3c:71:ad:
51:df:4f:38:3c:04:45:4a:0a:55:5b:4b:1e:98:ad:e8:a5:00:
05:fc:3c:95:6e:15:b9:9e:83:f2:44:ec:e6:f9:52:fe:1e:e2:
c7:af:55:2c:b3:11:17:b0:58:4d:0b:bc:ae:b1:5f:27:05:11:
ca:87:54:21:00:60:7e:46:1d:9a:23:47:fd:db:bc:0f:4d:c8:
bb:f9:01:a9:60:ef:0a:c1:ee:ce:14:c0:57:e1:7b:8b:4b:b8:
93:34:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:01 2025 by rpki-client