Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECE62B3CCDA111EF9D4849BA762E951A.roa
File: ECE62B3CCDA111EF9D4849BA762E951A.roa (raw, json)
Hash identifier: 5CSz2NBeir2UwBK+5FsEjL3L/vM9l2cNGRUT248QA4Q=
Subject key identifier: 46:77:34:B5:D5:2B:79:71:05:3F:EE:B0:BF:AE:C2:29:EC:C6:58:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECE62B3CCDA111EF9D4849BA762E951A.roa
Signing time: Wed 08 Jan 2025 09:21:22 +0000
ROA not before: Wed 08 Jan 2025 09:21:18 +0000
ROA not after: Sat 13 Dec 2025 09:21:18 +0000
asID: 984
IP address blocks: 156.253.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65769 (0x100e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:21:18 2025 GMT
Not After : Dec 13 09:21:18 2025 GMT
Subject: CN=677e4392-0047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:40:b6:bf:a6:8c:f2:65:07:3c:d5:ef:74:
4a:64:43:85:21:a5:f7:c9:09:5e:bc:ed:e4:8f:64:
84:fd:83:02:6d:69:41:c1:e3:04:1b:a4:24:33:5c:
c1:c8:e7:30:ef:c8:8f:6a:2b:58:57:5f:0a:63:c5:
be:0b:b3:bc:e9:86:f7:1e:d9:bc:03:20:0b:2b:92:
a7:a9:03:42:8e:dc:bb:ec:20:aa:18:8b:8d:a6:1b:
7c:9a:9e:d0:ce:f3:c9:a5:87:65:e8:12:9a:2c:94:
60:86:da:62:88:50:b2:00:e3:27:00:db:01:24:a2:
a4:6a:27:6c:d1:14:92:c3:0c:ea:a8:a2:e5:98:f1:
62:b7:3d:09:31:ad:70:a7:a2:7a:39:53:84:71:08:
5f:51:e9:c5:6e:4f:c1:0f:8c:31:ee:32:10:af:44:
91:85:1a:b8:1a:bd:27:2b:7f:a2:47:a1:c9:e4:07:
17:6c:8e:1f:f1:a2:03:3a:cb:0c:6e:91:9b:5e:8c:
4e:b9:71:a8:ec:18:0d:18:ed:d7:15:46:5b:c2:86:
f3:99:14:46:62:c8:35:c4:41:2d:32:4a:52:b9:b9:
0c:94:2e:fb:5b:0a:77:e9:3b:c4:42:14:5a:db:e4:
be:36:71:2a:5a:e1:87:68:cb:45:fa:5d:65:cc:42:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:77:34:B5:D5:2B:79:71:05:3F:EE:B0:BF:AE:C2:29:EC:C6:58:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECE62B3CCDA111EF9D4849BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.44.0/24
Signature Algorithm: sha256WithRSAEncryption
47:43:2c:2e:be:33:f4:f9:dd:84:ab:6c:9f:98:c1:5a:28:de:
9d:aa:8a:47:47:93:91:6d:24:fb:cb:23:d9:0a:4d:97:93:59:
90:85:da:b3:98:e1:46:35:79:3c:c9:09:0d:16:a1:5d:c2:fb:
21:33:d2:a9:82:80:26:b7:84:cd:2f:88:6b:c2:24:4f:22:03:
ec:78:8b:4c:7d:db:ac:b1:2d:3e:d9:e1:79:9b:91:8a:ff:fc:
bc:ac:22:48:1a:83:ff:47:13:20:12:a8:0b:a9:ed:d3:4f:7b:
8c:5c:8c:b0:df:78:99:a6:83:fd:45:be:b3:40:6f:91:c7:40:
ad:d4:a5:90:52:99:f4:04:d9:f7:8a:28:a9:5d:08:62:9d:23:
55:9a:e6:8f:83:67:7c:d8:46:2a:88:9e:cd:21:ee:e9:4c:4c:
1f:55:ba:eb:c6:0e:4a:2a:1c:a9:94:42:dd:a9:32:21:9e:85:
99:dc:d7:b2:a4:a3:30:35:5f:d9:4d:fa:8d:c0:13:50:88:2d:
a1:8c:5e:f0:c1:55:00:ba:2b:66:c6:c8:cb:33:6c:01:42:fe:
5c:1f:fd:5d:08:ad:0c:e5:52:7a:56:f8:1c:98:e0:18:eb:5f:
32:02:cb:66:61:5d:e7:9d:85:dd:db:b6:5d:db:4a:1b:07:50:
57:ae:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:58 2025 by rpki-client