Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB8E7ED0CD0811EFA4C99561762E951A.roa
File: FB8E7ED0CD0811EFA4C99561762E951A.roa (raw, json)
Hash identifier: Hyg5fKnHsvpnnOPgDKzm7ze0VrDkyAjhsHLAGzDVJu8=
Subject key identifier: C5:72:5F:CA:58:36:18:F7:14:30:C5:2D:58:D4:FE:2D:40:AC:0B:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB8E7ED0CD0811EFA4C99561762E951A.roa
Signing time: Tue 07 Jan 2025 15:06:34 +0000
ROA not before: Tue 07 Jan 2025 15:06:30 +0000
ROA not after: Mon 13 Dec 2027 15:06:30 +0000
asID: 17561
IP address blocks: 156.239.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64689 (0xfcb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 15:06:30 2025 GMT
Not After : Dec 13 15:06:30 2027 GMT
Subject: CN=677d42f9-b40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:25:a2:73:f0:c5:30:1e:92:bf:ad:c5:e5:
80:3c:d5:ba:43:a4:ad:70:e1:95:33:83:4b:bd:35:
f6:e3:0d:c8:20:34:75:3b:24:64:55:3b:ea:c1:18:
92:87:fb:31:38:47:ce:fe:38:0d:de:d9:e8:29:66:
66:93:4b:78:24:fe:54:e4:21:6e:6b:a8:02:a8:03:
3e:f8:0d:fd:6a:f1:a1:5c:65:23:89:66:5b:19:34:
d8:75:ae:8d:6a:09:01:fa:cb:dd:49:cb:bf:63:94:
d6:81:14:1a:c7:72:15:1d:c1:2f:f9:d4:ba:5c:6d:
87:32:3f:26:ee:3d:9f:70:a3:e4:a2:49:f2:6f:0c:
b6:e4:05:72:10:fc:fd:23:2a:b0:d8:52:a4:6e:50:
42:3c:24:55:2c:2b:26:f7:e0:60:64:56:60:e8:6e:
b4:ec:9b:2b:b9:3e:57:e9:5f:d8:38:5b:ad:0d:14:
6e:ce:c1:2f:35:9f:7d:10:aa:27:c3:91:91:15:7b:
50:64:fc:07:52:32:d6:57:46:6a:0e:3e:db:80:56:
e2:bb:3d:fc:ea:6e:32:30:48:98:d1:91:9c:83:50:
b0:e1:b4:ed:7c:1a:f2:23:d0:81:ec:42:b7:b3:3a:
80:f7:24:ee:03:a2:46:5a:f2:77:87:01:3b:81:06:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:72:5F:CA:58:36:18:F7:14:30:C5:2D:58:D4:FE:2D:40:AC:0B:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB8E7ED0CD0811EFA4C99561762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:dc:06:f3:0a:91:27:42:a5:42:a9:0e:70:a8:0a:41:3f:60:
73:a0:d0:a9:b9:94:95:0a:67:6d:9b:91:36:ee:22:c2:34:99:
fd:7c:55:e9:24:b8:3a:6c:75:cc:6a:64:d3:73:d5:01:0c:8d:
a5:00:9e:fd:8b:2d:82:b2:f2:7b:71:f6:0b:a8:0f:aa:d8:83:
29:f4:91:e4:97:41:cd:7e:63:34:41:fc:ef:79:33:83:ea:9d:
d3:4b:17:05:05:0b:52:42:43:69:6d:c0:a5:45:6f:45:7f:5c:
80:89:85:4b:d9:69:0d:fe:3f:51:78:51:64:f7:c0:8f:20:fe:
e4:34:6b:50:8e:5d:6b:85:4b:bf:4d:23:c4:d3:02:2b:81:7a:
41:1c:27:4a:7b:b4:28:7f:55:4b:5b:5f:31:4d:b5:80:fc:a6:
52:c3:9a:94:b6:53:de:77:0b:b5:cf:5e:8a:08:92:47:d2:1b:
c5:b3:ce:cf:21:b3:70:85:35:49:69:f8:5e:2c:78:a5:59:58:
ce:ee:4f:bd:79:65:95:53:4d:68:7d:5f:13:d1:59:3e:eb:af:
1d:13:11:7d:82:12:08:18:f9:0e:83:5f:1d:e1:22:f2:9a:6d:
45:a0:65:04:92:c3:e1:77:d6:ce:a5:03:c5:ac:30:5d:2d:39:
2d:c5:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:58 2025 by rpki-client