Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE07F6B4CD1C11EF869AA960762E951A.roa
File: FE07F6B4CD1C11EF869AA960762E951A.roa (raw, json)
Hash identifier: 4H7VFSaj5DcTXW9ognBvFF3mcoQREf0oAAGp1WXoL2I=
Subject key identifier: 31:F0:65:8A:7B:CE:1B:D9:C8:3A:39:11:6F:DF:6B:95:A1:BE:6E:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE07F6B4CD1C11EF869AA960762E951A.roa
Signing time: Tue 07 Jan 2025 17:29:48 +0000
ROA not before: Tue 07 Jan 2025 17:29:44 +0000
ROA not after: Mon 13 Dec 2027 17:29:44 +0000
asID: 17561
IP address blocks: 156.241.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64851 (0xfd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 17:29:44 2025 GMT
Not After : Dec 13 17:29:44 2027 GMT
Subject: CN=677d648c-0615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:51:fd:ad:e1:68:74:c7:99:a0:31:e9:42:
f6:54:37:c4:41:54:4c:96:c0:a2:20:56:92:65:78:
4e:57:49:30:a7:44:db:57:6d:f2:13:37:97:b6:35:
61:b3:d7:0f:3d:e4:57:1d:a1:3d:ff:c3:bd:3a:a0:
4b:72:78:a9:c3:af:37:b6:c6:41:5c:62:c8:08:5f:
47:04:04:d4:2a:23:62:27:69:75:e8:c7:b6:8c:6d:
1c:c5:ac:7f:7f:80:c5:d9:70:ce:e0:ef:6b:8c:7d:
62:c5:86:68:ae:86:e2:ea:95:1c:e2:e3:29:bf:21:
57:8d:73:f1:6e:4e:bc:87:0a:c1:e3:5b:5e:9b:9f:
7c:30:e5:81:4f:95:66:46:35:81:03:bd:7a:04:31:
48:b9:4d:2c:ce:e4:17:0e:f6:db:7a:1a:99:eb:23:
69:63:a5:76:4c:79:36:85:66:ed:f2:01:ea:16:28:
5e:88:02:09:03:04:3a:42:c0:33:68:ea:d3:1d:5b:
db:9f:fc:42:51:b6:e3:b1:c8:95:86:9b:e1:20:a6:
4c:ee:32:c0:b7:eb:6f:73:21:30:04:48:7e:b2:7a:
81:60:d6:c4:03:99:bd:45:2d:2e:4d:55:9a:d2:bd:
fc:bd:60:e6:9d:21:71:39:2f:ce:a9:98:9e:33:a2:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F0:65:8A:7B:CE:1B:D9:C8:3A:39:11:6F:DF:6B:95:A1:BE:6E:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE07F6B4CD1C11EF869AA960762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:9d:6a:98:67:7c:22:ec:66:4c:08:e4:ee:d7:8d:ba:e5:08:
8c:fd:f7:a0:d1:25:7a:01:ed:8d:f0:e3:93:13:a2:1c:00:8e:
35:15:0f:01:8d:bb:24:f3:54:95:37:4f:2f:59:81:ee:cf:f8:
d1:d1:1d:9f:af:e1:a0:44:e5:88:12:0e:1e:a1:f9:93:12:78:
32:ff:93:84:67:ba:3d:93:4d:ba:18:3f:bb:6f:40:d6:65:a9:
98:4c:6f:16:ad:6a:35:97:a7:65:49:3a:c2:8f:8a:61:f4:1a:
05:30:c0:e2:03:4f:03:19:03:b9:9a:06:34:74:06:f8:15:78:
93:10:d8:3b:11:c1:a4:51:21:9a:6a:9d:33:ee:a7:eb:bd:35:
f5:2e:af:6d:5d:da:53:e1:12:5e:b9:4d:17:b9:a4:97:b3:be:
39:ac:57:e7:71:f4:ff:6c:a5:a1:71:03:7e:29:a5:20:24:69:
2b:5a:5d:6a:45:b7:d3:b3:4d:82:25:71:6c:0b:b9:58:80:e9:
8d:6a:10:ff:66:e9:e1:27:a5:cc:e1:29:82:e9:91:a5:00:ce:
b6:64:bb:8e:21:57:5b:6d:96:9b:8f:48:16:eb:7c:d6:50:07:
a0:d3:4a:45:96:2a:f8:96:bd:37:d8:6c:02:c7:3b:09:bf:33:
7f:64:4f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:35:49 2025 by rpki-client