Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB387748CC1211EFA1461447762E951A.roa
File: FB387748CC1211EFA1461447762E951A.roa (raw, json)
Hash identifier: xvYh1ghLfyAdOSCXoghGQJ7Vj34IK56ojD0db63MRGg=
Subject key identifier: F1:D7:A5:41:73:2D:63:8E:85:40:93:8C:10:9E:04:0D:67:FC:0A:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F875
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB387748CC1211EFA1461447762E951A.roa
Signing time: Mon 06 Jan 2025 09:45:37 +0000
ROA not before: Mon 06 Jan 2025 09:45:33 +0000
ROA not after: Thu 06 Feb 2025 09:45:33 +0000
asID: 200373
IP address blocks: 156.228.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 09:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63605 (0xf875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 09:45:33 2025 GMT
Not After : Feb 6 09:45:33 2025 GMT
Subject: CN=677ba641-a541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:69:89:b5:68:47:7f:32:76:39:b5:46:be:
cc:7e:e7:bb:d7:e5:61:89:12:bb:8f:66:cd:c8:d3:
45:4f:f3:4f:f1:9c:b3:23:7b:1e:41:cd:50:ca:93:
81:af:b2:67:28:2e:ef:65:7e:5d:96:eb:4d:ec:56:
87:7a:29:77:77:a0:24:cf:f9:8f:1b:d4:25:e3:59:
9e:e9:98:d2:59:80:29:b4:1a:ef:14:9a:a7:0d:4d:
ba:a4:d6:ba:99:2a:5d:85:a4:72:17:c4:63:a1:88:
5e:cb:ba:16:69:77:24:0d:4a:e5:89:5f:6f:8e:72:
6b:d4:e8:92:0d:66:bb:0b:53:46:09:eb:e6:c7:2d:
8b:95:9d:81:de:1e:9b:aa:8a:18:44:e3:bb:e1:3b:
ce:b4:66:ef:d6:a1:58:ce:d2:6a:d7:5b:d1:d2:5a:
2b:e6:ac:b7:f9:4d:83:2b:3a:b9:75:5d:2e:1c:89:
bc:ab:aa:bd:af:3c:a4:7d:39:5e:68:ee:3f:e6:28:
9c:dc:e7:73:7f:1c:8a:e6:05:6e:2d:c6:ba:4f:97:
b0:8a:3e:82:4b:85:8d:51:58:9c:4e:6f:72:45:a9:
b4:fa:c1:61:e6:0d:61:bc:48:ce:0f:a5:c9:62:37:
bd:d5:a2:e1:41:31:04:30:2f:d0:20:ee:f6:55:cf:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D7:A5:41:73:2D:63:8E:85:40:93:8C:10:9E:04:0D:67:FC:0A:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB387748CC1211EFA1461447762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.184.0/23
Signature Algorithm: sha256WithRSAEncryption
65:fe:b8:b8:27:aa:87:96:4d:c0:72:b1:a0:4b:17:9e:ee:30:
15:60:94:d5:4c:b2:69:03:cf:40:c0:2f:d7:27:2f:25:1c:4f:
b4:d1:f7:63:fd:3e:f4:1f:99:ac:89:c8:2f:0e:08:32:2d:be:
aa:a6:47:c5:0b:ad:cc:52:c8:76:0f:c3:f7:4d:41:c6:28:3c:
f5:63:1f:d0:ce:57:71:ec:31:11:47:db:f3:47:b2:1e:57:03:
41:08:12:ab:97:96:0e:eb:01:86:7c:64:43:c8:4c:7a:32:6a:
8d:96:55:dc:7f:4c:01:3e:23:58:c5:96:39:97:9c:5d:94:ee:
d7:0b:0c:7c:71:8f:d0:d8:d8:9d:62:8c:17:90:01:16:90:5a:
66:6e:a3:f4:62:6b:e3:3d:95:f9:fa:7e:a0:6c:a5:01:ad:96:
85:db:1f:75:6c:cb:e7:7d:3e:5c:2e:b8:37:e8:bb:67:6e:ca:
2b:a6:95:39:80:6c:d6:50:f1:8b:5f:34:fe:5d:51:24:bf:92:
8e:50:b9:68:9c:7b:c3:8e:b5:3c:27:d7:86:64:9b:6d:a2:92:
87:4b:7e:38:38:b2:42:ce:b7:08:85:c8:2b:1f:f1:46:0e:f5:
1b:85:e1:11:45:61:d0:55:46:61:9d:c4:ff:cf:0e:f0:0a:2b:
63:1e:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:21 2025 by rpki-client