Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01B42A69D1311EFA5D1FB94762E951A.roa
File: F01B42A69D1311EFA5D1FB94762E951A.roa (raw, json)
Hash identifier: Uhz1co/8zl3EvREytMmOdPCh1FrnkJKyAmEP0gdqQbY=
Subject key identifier: 84:2D:87:44:DC:BF:5C:AD:76:A6:5A:65:B8:BC:88:95:96:E6:0E:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CFE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01B42A69D1311EFA5D1FB94762E951A.roa
Signing time: Thu 07 Nov 2024 14:24:03 +0000
ROA not before: Thu 07 Nov 2024 14:23:59 +0000
ROA not after: Mon 02 Jun 2025 14:23:59 +0000
asID: 137263
IP address blocks: 156.253.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53218 (0xcfe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 7 14:23:59 2024 GMT
Not After : Jun 2 14:23:59 2025 GMT
Subject: CN=672ccd83-33e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:67:3d:81:6c:8a:17:3b:3d:71:10:88:d3:
89:02:68:c5:02:75:a1:42:3c:1e:b7:db:a7:01:25:
b7:5a:d8:02:7b:ee:e9:5c:35:b0:a6:4f:0c:1d:a2:
66:3c:84:af:7b:ab:1b:49:c0:dc:4f:1b:54:45:92:
61:6d:18:ea:00:15:bf:4b:43:fa:74:81:26:4e:9d:
76:b5:7f:00:53:c7:fb:0f:21:a8:f7:0d:77:0f:e5:
e4:7d:92:b6:37:ff:31:e2:e9:76:4a:2d:93:a9:43:
01:5a:5f:f1:9e:97:56:76:b0:65:7f:72:fc:ff:fd:
c5:e7:30:06:30:88:d2:27:4e:70:72:bd:f2:b4:35:
a2:11:88:c1:5f:9f:95:22:87:bb:d1:bf:58:41:e2:
07:1b:1e:5a:21:4e:ae:f4:51:64:4d:27:dd:50:31:
ec:3e:4c:30:96:0a:9f:47:e3:9d:67:c5:5f:3a:63:
98:c1:5e:ed:7f:79:32:31:03:07:90:16:48:67:11:
92:f0:02:dd:bd:cc:41:02:91:88:29:78:7a:4a:78:
2d:17:d2:9c:25:b3:af:62:ae:8d:3b:91:cf:9f:18:
f6:5f:85:39:29:e6:18:a1:13:2a:21:d5:b6:89:75:
a7:ee:22:56:02:fb:87:8f:03:e3:f3:c3:ba:73:c7:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2D:87:44:DC:BF:5C:AD:76:A6:5A:65:B8:BC:88:95:96:E6:0E:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01B42A69D1311EFA5D1FB94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.4.0/24
Signature Algorithm: sha256WithRSAEncryption
26:5c:32:e2:6a:d6:96:cf:08:c5:e9:3f:d4:7a:cb:c7:83:72:
1a:85:a8:fd:2f:1b:56:c8:d9:c8:77:d4:fe:45:96:be:8e:48:
b7:71:7e:f6:5a:c2:39:e9:86:35:7a:08:24:8f:da:d6:0f:93:
55:87:71:0d:4b:20:c1:bd:04:fd:06:d0:68:aa:60:74:02:38:
2e:a6:5b:8d:bd:c0:fb:19:5c:5e:d8:7b:c6:e3:0f:20:66:85:
61:07:38:29:8b:14:38:9c:53:71:e7:86:5d:54:26:1e:bb:fd:
a0:cb:fb:31:fc:94:18:7f:54:ac:3e:27:dc:97:58:a6:47:6c:
29:f4:5c:15:14:9c:f4:8a:bb:96:57:4a:48:d0:8f:8f:1d:9e:
a5:39:62:a1:67:2a:cd:01:08:76:5e:e5:80:6e:0c:11:a4:1a:
59:24:66:9e:66:da:e5:18:8e:23:14:0e:27:67:92:fe:41:84:
0c:19:12:29:83:06:0a:34:11:91:33:7b:9b:6d:23:8f:70:b9:
dc:b0:16:0f:9b:e5:d8:49:45:b8:13:c9:19:d1:8f:ef:f4:a7:
03:69:8a:43:57:64:15:2e:15:f6:cf:9f:ae:e6:cd:77:2b:02:
39:73:b3:e0:39:ea:cf:99:b9:f7:60:1e:4b:e5:9e:e7:86:07:
df:d6:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:53 2024 by rpki-client on console-fra.rpki-client.org