Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7E9E596C98211EF8A87278C762E951A.roa
File: F7E9E596C98211EF8A87278C762E951A.roa (raw, json)
Hash identifier: nLJeS62RhpIIDovDJ2SLl5SkXHobcOH56iIuZxaxf1I=
Subject key identifier: 5D:0F:B0:34:6C:9E:1D:FE:C2:8D:9F:0E:F6:FE:81:B3:1E:3F:89:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F561
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7E9E596C98211EF8A87278C762E951A.roa
Signing time: Fri 03 Jan 2025 03:29:41 +0000
ROA not before: Fri 03 Jan 2025 03:29:37 +0000
ROA not after: Sat 13 Dec 2025 03:29:37 +0000
asID: 984
IP address blocks: 156.230.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62817 (0xf561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 03:29:37 2025 GMT
Not After : Dec 13 03:29:37 2025 GMT
Subject: CN=677759a5-35a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:76:64:75:a8:66:d8:0e:32:0a:16:85:c1:
5d:41:05:b6:79:3d:3c:85:81:fd:04:18:46:0a:b9:
7c:f7:b0:b0:73:51:3d:51:31:89:ce:85:9c:03:66:
23:c1:10:55:e6:89:c6:fc:48:0e:be:ca:e5:28:23:
b2:b3:59:c8:ef:bf:36:75:16:a1:87:09:15:48:68:
1b:8e:54:73:7c:16:48:1c:81:f9:ed:d9:3f:9a:e5:
60:2d:89:6d:a7:e6:a2:24:1a:fa:70:cd:4b:ab:49:
71:da:7b:43:f4:d9:ad:20:a1:36:d7:02:9b:c3:6d:
08:7b:e5:3b:98:67:69:d6:75:52:cb:34:30:fc:32:
ef:eb:87:81:98:a7:7f:82:04:b8:b5:6b:c6:3f:0b:
19:54:a0:14:8b:bf:1a:47:68:c5:da:6a:99:7f:09:
25:a4:db:0d:47:2f:e6:1c:4f:94:06:09:3b:1d:df:
8e:a9:3b:15:89:57:5a:43:f1:d9:13:be:64:e8:8d:
f6:b0:aa:47:40:37:4d:fe:ed:a8:2f:a6:4e:4e:36:
21:ba:74:34:72:fc:af:74:6a:d1:ee:1c:4b:84:47:
79:61:f1:03:93:fa:ad:66:33:47:b0:b8:76:43:ce:
db:6b:1a:94:81:f2:a1:a2:ab:0d:07:4a:b9:5d:cd:
35:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0F:B0:34:6C:9E:1D:FE:C2:8D:9F:0E:F6:FE:81:B3:1E:3F:89:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7E9E596C98211EF8A87278C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.22.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b0:ed:c2:f2:ac:ce:c7:0e:9e:65:a7:ad:77:5c:2d:b9:23:
2b:4c:d1:cf:09:dc:e0:1f:fc:fc:c7:96:19:57:11:b4:8c:a2:
3e:61:a6:31:90:72:48:50:f5:86:7d:8e:09:36:7a:5e:a1:36:
ad:19:b1:d9:7d:a2:26:aa:35:2f:95:1c:4c:94:57:70:de:d7:
38:c3:f8:85:9f:90:dc:42:f7:19:c4:8c:6b:e1:42:24:81:a0:
26:cd:52:d6:c3:1c:ea:64:2f:5f:92:52:1c:12:ae:83:6d:db:
10:88:a2:f8:a6:3b:93:1f:84:e2:27:4e:fc:76:67:70:39:28:
d2:19:59:f0:8b:ab:c5:4e:89:2c:30:91:dd:4f:b0:77:bd:72:
95:2c:c5:d3:8b:2d:41:f2:84:bf:78:8c:af:67:a2:ff:aa:3f:
81:13:83:74:06:f6:fa:f0:07:ce:7f:4f:01:41:0e:49:69:0b:
84:31:ba:08:51:b0:73:d3:1f:3b:e1:46:b9:4c:3e:2d:2e:e1:
d9:d3:28:5e:11:97:1d:c2:03:9d:ba:85:e9:8e:37:a1:8c:da:
c1:b5:81:b5:be:96:fe:88:3e:9b:e0:72:23:ce:64:8a:76:95:
eb:a6:91:93:aa:0d:67:a3:c2:4d:ae:34:07:f2:8c:d0:d8:d0:
1e:7d:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:04 2025 by rpki-client