Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E89A07E8CD5011EF98069DA5762E951A.roa
File: E89A07E8CD5011EF98069DA5762E951A.roa (raw, json)
Hash identifier: 5UjHFRrEI1Or+63QZ3EyZmyyTHBK+ocf5UYUGff4muY=
Subject key identifier: 1D:A4:D8:09:39:C8:6E:AC:66:6B:FE:47:F3:F3:85:6D:B7:72:04:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E89A07E8CD5011EF98069DA5762E951A.roa
Signing time: Tue 07 Jan 2025 23:41:26 +0000
ROA not before: Tue 07 Jan 2025 23:41:22 +0000
ROA not after: Sat 13 Dec 2025 23:41:22 +0000
asID: 984
IP address blocks: 156.247.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65259 (0xfeeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 23:41:22 2025 GMT
Not After : Dec 13 23:41:22 2025 GMT
Subject: CN=677dbba5-72b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:e3:b6:d9:a5:5b:97:88:24:3d:42:8c:9d:
05:ce:e3:bc:f6:11:04:78:cc:1c:6f:f1:d5:27:d5:
33:33:eb:f2:39:8f:82:95:9f:98:da:6c:89:e7:a8:
d1:d4:4c:d9:d6:54:6f:ad:5d:3b:17:6d:d1:0d:19:
6e:b9:d0:20:2b:d6:b1:be:5e:76:f1:8e:ea:40:f7:
82:65:f8:2c:3e:fe:03:fb:f9:d2:65:c6:6b:10:86:
b1:25:f9:a0:1a:54:5f:5b:2f:8a:82:28:1d:f4:57:
ff:e9:4c:70:ea:b1:1d:ee:f3:72:0b:e9:08:c2:ec:
b0:99:09:d5:db:e3:56:a7:76:c0:c8:30:ff:a2:82:
f4:f8:07:c2:be:50:39:d9:4e:ab:2d:e2:49:88:96:
27:32:35:64:5f:66:76:45:ff:e7:a3:7a:5e:93:e9:
11:c2:9e:5a:95:6c:8b:08:08:52:64:93:5a:d6:2a:
af:3e:2a:e5:69:03:a1:fc:d0:0a:6b:c4:14:78:87:
20:e8:b1:4b:3c:da:16:52:fd:be:4c:d4:ac:d4:4d:
89:8b:8f:19:5e:ad:21:15:06:00:2f:fb:d1:a1:8c:
f8:dd:99:0a:4b:78:71:13:6d:da:63:d2:5c:ea:bc:
df:84:9e:54:65:4b:c3:e8:41:67:f3:4e:49:ff:23:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A4:D8:09:39:C8:6E:AC:66:6B:FE:47:F3:F3:85:6D:B7:72:04:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E89A07E8CD5011EF98069DA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.30.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e6:b4:b4:4f:41:f8:cc:22:ff:3f:cd:07:80:cd:30:d2:e6:
06:0b:0b:74:8e:29:68:ae:e2:b7:0c:ac:6d:ec:06:64:79:60:
6c:14:32:de:eb:cf:5c:70:75:26:cf:25:7e:44:64:49:ee:4d:
cf:56:42:e5:2e:85:b6:76:19:89:d4:7d:af:12:2a:33:d5:ce:
63:4d:d0:74:ab:85:3b:61:1b:00:dc:3b:24:d7:c1:2e:60:d8:
27:3d:82:1d:ec:66:b5:1c:39:bf:82:40:61:3a:9e:bb:cb:ef:
b6:24:11:bf:09:80:ca:e1:25:01:d8:7f:8e:e8:d1:75:5e:09:
a6:41:11:07:34:b2:d1:a4:c7:fd:8b:23:1e:18:91:0f:4d:b9:
d6:45:d5:f9:d8:d8:2b:56:80:5a:1e:c0:29:03:12:bb:ca:a9:
f6:32:68:19:83:02:e3:3b:64:bd:2e:e2:71:17:6f:28:d4:5e:
e4:78:89:5b:09:fa:51:03:2e:04:44:2c:01:ae:ca:f6:67:6e:
96:e9:d6:80:d6:ee:3e:ef:33:00:a3:09:bc:e3:31:d2:b8:92:
04:d0:16:58:ff:52:26:6d:9c:31:73:93:51:36:b5:d0:17:1c:
67:db:f9:59:29:29:1d:a3:ad:6c:ee:93:bf:f8:38:52:c0:f2:
52:3d:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:30 2025 by rpki-client