Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3488806C33011EF89FCC14E762E951A.roa
File: F3488806C33011EF89FCC14E762E951A.roa (raw, json)
Hash identifier: Dz2NNf6q6A6d4a1E2S6yvIllnq1CdBIgqK7Dxz377Cs=
Subject key identifier: 07:6F:D9:8B:6D:4E:D0:50:E9:E1:1F:75:ED:7A:F6:B8:B0:B5:86:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3488806C33011EF89FCC14E762E951A.roa
Signing time: Thu 26 Dec 2024 02:27:28 +0000
ROA not before: Thu 26 Dec 2024 02:27:24 +0000
ROA not after: Wed 10 Dec 2025 02:27:24 +0000
asID: 984
IP address blocks: 156.243.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60173 (0xeb0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:27:24 2024 GMT
Not After : Dec 10 02:27:24 2025 GMT
Subject: CN=676cbf10-aed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:c2:1e:5d:00:b4:8c:0b:3e:00:e9:09:b9:
2e:c2:86:89:29:d0:87:46:61:8d:c0:46:c7:5f:02:
51:57:9d:39:75:94:5b:33:67:37:61:34:3b:86:65:
fb:c0:3a:04:f8:04:a7:fa:62:8a:76:83:9b:a1:1f:
47:21:28:ce:c5:b0:0b:bb:98:07:8f:f7:2d:4a:07:
80:0b:f4:e1:83:18:50:19:b0:9f:59:e6:60:65:17:
b3:96:0e:b1:32:73:4f:17:a4:d1:81:93:4e:d6:7f:
57:8e:f2:83:99:c2:3f:86:19:f6:07:6b:21:f2:d5:
ef:89:e2:3c:ce:05:d2:f7:db:93:9e:5b:ea:72:12:
a8:43:a4:a9:30:b8:ba:88:d1:0c:29:00:9f:2f:ce:
a4:01:f4:e3:ca:84:f2:2a:0e:c9:5d:29:59:27:a8:
ad:05:5a:d0:3f:51:e3:91:c7:35:7a:12:88:11:1e:
02:ce:dd:91:60:1e:b2:4b:a5:fe:89:6f:73:ea:87:
7d:f4:11:6a:88:03:ff:91:05:e9:db:1a:47:39:18:
0a:98:65:44:32:2c:33:47:cb:ce:22:dc:34:55:f0:
25:98:fb:85:47:5c:d0:88:1e:43:2d:ea:b0:17:b7:
0f:98:19:11:6b:c0:81:89:3d:67:10:aa:13:f4:83:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6F:D9:8B:6D:4E:D0:50:E9:E1:1F:75:ED:7A:F6:B8:B0:B5:86:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3488806C33011EF89FCC14E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c6:2b:2d:60:33:5e:35:0b:99:b8:4a:19:43:28:22:5d:c3:
1a:35:c0:e9:fe:32:ef:2e:ad:0f:fb:04:8e:fd:05:c4:98:e6:
24:67:48:c9:8b:09:b4:fc:13:01:31:49:15:4b:0b:14:38:bc:
d1:63:e4:eb:38:ce:d9:27:88:d2:3a:f6:87:b2:29:f8:7c:4c:
00:d3:56:b1:66:f7:c3:96:5e:f6:31:8b:fa:6e:17:8a:30:c6:
98:f3:19:8c:36:5c:5a:c4:3f:ef:f1:bb:03:9f:94:f8:1e:4f:
e3:5c:97:09:2f:ac:60:01:fb:e7:ba:1c:a5:9d:85:9b:bd:a1:
2c:57:d9:50:11:d5:22:0f:f6:b5:fa:87:48:2a:b4:25:9f:35:
e5:a5:59:a0:7b:72:72:66:6d:b5:68:b2:33:6f:ee:3a:70:7c:
e5:97:ad:44:6e:92:de:68:08:f6:8d:6e:6a:d4:31:3d:d5:69:
bc:9d:87:eb:19:b1:92:b3:c7:a2:6b:78:17:9e:05:09:6a:39:
a5:a3:76:44:50:ba:f8:3e:0a:33:ed:91:8f:7a:58:f8:9d:e8:
da:f2:66:75:aa:ba:a8:70:74:d3:4f:8d:88:ab:7e:ce:30:b0:
1d:71:d4:4e:9f:7c:3f:e3:f0:4a:66:7d:61:24:16:99:ee:b6:
1e:b9:86:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:17 2025 by rpki-client