Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE1F8834CE4C11EFAC5C2883762E951A.roa
File: FE1F8834CE4C11EFAC5C2883762E951A.roa (raw, json)
Hash identifier: ok5pVL0B7wvG/cGRlwly4UVlhUAj9PpTtq1qdeTa/QI=
Subject key identifier: 5B:2A:7F:BC:E3:7E:6F:D1:55:50:DE:C5:4B:79:47:F0:53:DB:A6:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE1F8834CE4C11EFAC5C2883762E951A.roa
Signing time: Thu 09 Jan 2025 05:45:55 +0000
ROA not before: Thu 09 Jan 2025 05:45:51 +0000
ROA not after: Fri 09 Jan 2026 05:45:51 +0000
asID: 17561
IP address blocks: 156.238.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66249 (0x102c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 05:45:51 2025 GMT
Not After : Jan 9 05:45:51 2026 GMT
Subject: CN=677f6293-4411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7e:ea:d9:16:52:d2:4f:77:ec:07:15:cb:12:
b1:ba:b6:ff:28:30:39:5f:60:d1:84:ff:d3:27:8a:
6a:dc:45:ac:51:50:ea:e7:15:34:30:9d:34:b8:c9:
ea:cf:8d:a6:ad:0b:12:db:a7:5e:28:78:c7:1f:26:
8c:64:73:69:ed:8b:12:a9:67:e8:0d:5b:7a:e1:60:
dd:41:94:66:cc:16:3d:1f:7e:f5:54:9c:ac:05:00:
5e:d1:74:13:91:66:93:b3:fb:f8:f7:f1:dc:1b:8d:
82:ac:a2:20:ef:c8:0d:9c:2c:f2:f1:9e:be:51:55:
c1:4f:3e:0f:da:1d:5c:f0:2c:5c:fb:79:76:65:45:
76:a9:c1:0f:85:be:f9:07:09:72:9a:25:a6:7c:74:
4d:b3:f2:00:b2:a0:3a:99:6d:59:9a:87:01:ac:4f:
8a:45:70:2a:e3:c4:7a:36:2a:07:6d:2b:0b:20:cd:
e6:74:ca:16:f5:2e:fa:54:1a:f4:10:68:5b:9d:4e:
46:24:52:f6:1e:dd:27:05:bd:e3:27:9f:1a:df:f8:
6c:7d:da:24:7a:3e:9d:48:28:dd:6c:7c:a6:5e:0a:
40:96:66:f1:bf:a2:6f:35:56:83:9e:2d:36:7f:3c:
2b:d8:f1:8d:01:3a:4d:99:4c:0b:c6:41:12:bf:42:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2A:7F:BC:E3:7E:6F:D1:55:50:DE:C5:4B:79:47:F0:53:DB:A6:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE1F8834CE4C11EFAC5C2883762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2e:f9:d1:09:ba:89:7c:e1:a3:79:25:ff:f6:97:80:1e:ae:
f6:d9:a1:8e:09:e7:d6:0e:1e:79:e2:ba:3e:24:d7:7b:bf:2d:
0f:bd:b0:8e:53:07:a4:b9:0b:fe:3f:c7:89:5e:de:a7:fd:bf:
f3:43:c5:bd:6b:95:7f:2d:1a:19:cf:5f:15:97:38:07:5f:5f:
6b:95:c6:cc:27:7f:dc:31:c7:5e:55:0d:20:7e:a1:c1:5f:90:
63:ef:14:be:e3:3d:89:b0:70:8e:c0:b9:48:0b:0c:fc:38:95:
4c:fc:cb:a0:b5:0a:f4:90:98:e8:1f:72:4e:6d:d4:2b:bc:0c:
c1:5a:e8:cf:55:a6:fb:df:e8:22:f2:ca:65:ef:6f:64:13:e7:
13:5a:16:ac:2f:48:eb:88:4a:6b:4d:80:a8:68:09:4b:76:83:
e3:17:2b:5a:c3:ba:c9:a7:ee:6b:8d:ec:48:90:b9:b4:bd:af:
05:05:dd:84:36:0b:0e:4a:ae:11:cc:55:4c:d7:5a:2c:43:f2:
ee:84:3f:01:4f:82:dc:76:cc:09:95:f1:a7:b5:99:ac:19:28:
e9:3c:ec:3d:91:f4:df:4d:09:83:4c:53:9d:6b:b2:a8:2b:5b:
0a:ee:8e:11:47:98:35:60:d4:95:33:98:3e:58:22:e3:63:08:
96:c9:7b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:42 2025 by rpki-client