Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4B01048C97411EF8C9C47A4762E951A.roa
File: F4B01048C97411EF8C9C47A4762E951A.roa (raw, json)
Hash identifier: 4P/E/fIzIV3KsMF9b5fyrGMtpTefO56qf7u2bIQEVmE=
Subject key identifier: DC:FF:32:B1:36:EA:3A:8C:07:7A:06:04:23:A4:F6:CA:8F:F8:AB:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4B01048C97411EF8C9C47A4762E951A.roa
Signing time: Fri 03 Jan 2025 01:49:23 +0000
ROA not before: Fri 03 Jan 2025 01:49:19 +0000
ROA not after: Mon 13 Dec 2027 01:49:19 +0000
asID: 17561
IP address blocks: 156.227.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62683 (0xf4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 01:49:19 2025 GMT
Not After : Dec 13 01:49:19 2027 GMT
Subject: CN=67774223-e670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:ad:7e:62:94:d0:9b:87:97:d1:c2:f4:23:
7a:ce:86:f5:4b:c8:f8:76:aa:c1:03:2c:6b:0f:ec:
49:c6:07:12:bd:4e:45:4c:30:98:f2:b0:8e:40:54:
20:2d:67:54:a1:ac:06:8f:b9:e5:19:fa:65:19:74:
6b:f6:26:32:c2:0d:c9:5e:17:53:9c:8f:20:66:0e:
c2:c9:e7:85:f9:fd:a5:d8:e5:69:7b:13:9f:f6:40:
af:1d:69:99:e9:fa:ec:3e:ec:1e:f2:f3:13:1d:f2:
4b:77:95:4b:c7:cc:ab:4b:2e:d7:84:59:e0:85:c4:
5f:26:05:36:05:eb:0d:d9:b2:e6:df:dc:44:1d:9f:
17:33:ba:d3:9e:24:8d:96:f7:8b:1a:86:3b:a2:bc:
2a:4d:74:5e:23:2b:f4:60:de:6e:04:fa:ad:3e:ba:
4b:f0:b8:48:a6:9f:d3:34:2c:65:e7:f5:94:ce:55:
e8:e2:e8:f8:bb:8f:84:39:a0:ab:be:60:ec:c5:1a:
47:63:22:e9:9f:91:0e:e6:02:cc:03:c8:b3:ac:c0:
9a:6f:7e:f5:21:90:3a:66:3d:01:0d:89:05:2d:89:
f1:db:fe:81:0e:71:a4:d6:f3:2d:8e:fe:c1:d5:e2:
54:02:b4:93:f8:9f:be:dc:ec:f0:c8:54:c3:eb:a7:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FF:32:B1:36:EA:3A:8C:07:7A:06:04:23:A4:F6:CA:8F:F8:AB:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4B01048C97411EF8C9C47A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:67:32:62:83:eb:5c:e9:3d:1b:de:2b:c5:90:5a:99:eb:4a:
ae:1f:88:38:71:50:77:f4:ff:f8:eb:74:b7:f0:d9:92:99:7d:
55:df:cf:8b:1d:09:1b:de:b6:b5:b8:48:77:32:c7:5e:cb:51:
63:7c:27:7e:08:1a:8d:ec:54:22:57:00:80:35:23:bf:92:d3:
aa:0f:3b:13:31:f7:1c:cf:13:9d:a7:88:1b:ec:54:d8:d7:8b:
32:5e:f7:eb:07:e3:67:bd:3c:76:cf:d4:87:bf:58:73:22:fb:
4e:5c:02:8d:0f:79:65:5d:83:61:86:1d:bd:7b:b9:50:b8:9b:
b3:56:58:fb:b1:71:9f:56:74:e5:e8:3a:f7:5d:9a:79:3d:d5:
c4:3b:db:f6:42:a4:db:f5:99:61:5f:6b:27:23:39:c4:bb:ce:
d8:b1:5e:89:54:d4:98:5d:f4:c6:54:96:75:15:de:e9:8f:05:
7f:09:17:9b:75:df:da:ab:c9:d2:00:74:91:43:28:61:c4:3b:
26:e9:b6:80:7a:a3:5f:b8:39:5e:7f:d2:76:06:91:f9:21:90:
cd:e8:1f:83:66:a0:6e:61:56:a1:1d:7c:a5:aa:8d:eb:20:a1:
4a:ef:df:15:18:98:7e:08:27:fa:0a:2d:2c:55:82:8e:f1:04:
de:88:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:43 2025 by rpki-client