Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4567E9ACDA511EFAA5A3956762E951A.roa
File: F4567E9ACDA511EFAA5A3956762E951A.roa (raw, json)
Hash identifier: LxXfggPLZCPXJD7VD0dqFm0aTaIpQKdcArmJ4lCObXs=
Subject key identifier: 4F:09:5B:F2:F2:07:68:3B:55:F9:CD:55:FF:DB:1D:C9:0A:28:A3:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010127
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4567E9ACDA511EFAA5A3956762E951A.roa
Signing time: Wed 08 Jan 2025 09:50:12 +0000
ROA not before: Wed 08 Jan 2025 09:50:09 +0000
ROA not after: Mon 13 Dec 2027 09:50:09 +0000
asID: 17561
IP address blocks: 156.253.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65831 (0x10127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:50:09 2025 GMT
Not After : Dec 13 09:50:09 2027 GMT
Subject: CN=677e4a54-dfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:6e:13:67:49:2a:1f:6c:ad:9b:ee:f9:43:
42:f9:1d:b0:51:ec:ee:4b:9b:8e:f0:69:f5:1d:6e:
38:bd:70:a8:3c:34:69:fd:21:c1:bf:cd:4b:e3:7f:
fc:6b:0e:01:59:f0:7b:2a:5f:c8:18:28:e8:03:cb:
69:e9:82:36:eb:6b:65:04:ae:85:46:ca:05:16:6b:
21:c7:8e:4a:f9:70:22:b3:53:91:cd:2a:44:f8:aa:
a1:4d:47:40:71:0c:d9:9b:cc:71:39:74:ab:b1:7e:
96:8c:eb:51:7d:ca:69:2a:7a:6d:1e:c0:3e:4c:8a:
48:d2:46:f5:43:a9:60:5a:52:6c:6a:04:97:32:03:
70:6d:1f:65:b3:7d:04:f8:39:38:e7:c7:45:aa:be:
47:36:9f:76:0f:31:1d:2d:70:fd:be:df:3c:fa:6d:
18:a4:82:74:5b:f1:5c:e7:1b:25:b4:07:ec:13:57:
3f:80:70:7a:2d:df:95:d2:39:0f:ae:83:c4:23:77:
9b:1e:13:3b:65:15:7d:40:07:e4:92:1b:73:2a:2c:
bf:7d:98:ce:69:c0:6e:33:cf:71:1f:94:3e:e1:d0:
98:5e:8f:0e:f8:59:53:73:a7:bc:4c:85:6a:7c:2f:
2c:20:42:47:db:da:9f:4c:e6:95:fd:53:a0:59:ad:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:09:5B:F2:F2:07:68:3B:55:F9:CD:55:FF:DB:1D:C9:0A:28:A3:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4567E9ACDA511EFAA5A3956762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.60.0/24
Signature Algorithm: sha256WithRSAEncryption
59:19:08:0b:f6:00:73:ca:65:95:a9:c3:24:58:ad:1a:2a:0d:
6c:9c:87:33:75:63:42:e8:47:72:2f:f8:a1:a4:0e:77:80:37:
67:41:06:83:be:ea:65:84:88:ff:7b:4c:4a:d7:77:d3:12:7e:
c8:0a:b3:fe:b7:69:92:db:82:45:ba:12:6e:cc:e2:27:a1:d4:
22:ee:65:6f:01:e3:20:da:01:15:7f:94:c2:0c:34:97:ca:f8:
36:79:08:68:d0:9a:77:4c:3e:c9:7c:5d:a1:30:fe:32:b7:31:
ea:a8:ce:c9:38:e4:5c:30:06:67:a6:dd:c4:0c:48:54:a7:73:
0a:d4:d6:1f:7a:e3:4c:83:76:6a:c6:ab:b4:83:a8:91:c6:4d:
55:5b:e5:61:19:de:8b:81:94:5e:2b:d7:86:eb:81:f1:75:c7:
bf:7c:16:2e:31:5d:66:dd:90:72:9b:10:65:9a:66:3a:1a:ed:
87:ea:7f:8b:17:64:44:0f:f1:7e:54:d5:c2:86:7f:7d:23:f2:
51:3f:c6:0e:e5:28:9a:fa:02:5b:4a:dd:b0:68:4b:c3:30:5f:
81:2f:4a:38:34:f9:64:33:60:02:57:17:a2:01:95:2a:7f:cc:
ad:9a:b2:a3:41:fe:3d:f7:89:c2:81:78:24:70:58:c6:ab:66:
8f:10:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:05 2025 by rpki-client