Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFCA62E0CD0611EF83CCD254762E951A.roa
File: FFCA62E0CD0611EF83CCD254762E951A.roa (raw, json)
Hash identifier: mMjo3JB4nV5MB+HXOYEAxMdm81ddAldfjb6+v4P+z5Q=
Subject key identifier: 86:67:FE:3B:A6:D8:80:B2:91:48:54:28:4B:F6:8D:B1:E5:A2:0E:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCA1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFCA62E0CD0611EF83CCD254762E951A.roa
Signing time: Tue 07 Jan 2025 14:52:22 +0000
ROA not before: Tue 07 Jan 2025 14:52:18 +0000
ROA not after: Mon 13 Dec 2027 14:52:18 +0000
asID: 17561
IP address blocks: 156.239.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64673 (0xfca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:52:18 2025 GMT
Not After : Dec 13 14:52:18 2027 GMT
Subject: CN=677d3fa6-5458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:ff:e0:cc:ac:8f:a5:15:13:8f:50:de:f4:
ef:2c:3c:ad:9d:06:41:b7:0d:30:55:ae:c5:ac:37:
3c:d1:e3:03:8d:eb:96:77:54:d2:7e:76:39:7c:11:
f5:ff:df:88:53:a1:07:9e:7b:30:e4:c9:d2:73:1a:
6d:04:d5:ee:fc:68:0d:65:21:59:40:e9:71:02:c0:
6a:2f:e1:38:29:42:b3:7a:78:6c:5b:e8:f9:21:ac:
40:ac:11:08:e0:a7:ad:2a:2b:d3:cc:cf:a3:83:13:
17:d2:30:21:ff:68:15:61:a5:e8:9a:71:78:ab:43:
c2:ee:c0:51:c0:c8:29:87:9d:3b:e3:de:be:c2:b9:
ae:a0:a9:23:c0:e5:fc:2f:80:d1:11:e1:19:29:ef:
b8:41:67:ce:8e:9e:58:2a:cb:19:60:46:2f:c0:3a:
f3:82:95:4b:ac:59:c7:e3:60:8e:19:b1:28:fc:88:
6a:a7:2a:95:28:af:88:1b:61:44:6c:93:f9:8a:5b:
fa:70:08:77:b4:cc:88:c3:5b:aa:d6:1d:b7:fa:df:
f8:63:bd:37:af:96:77:92:9e:ef:b0:ef:1b:96:64:
0f:2f:ea:97:db:ca:8b:d3:cf:27:63:51:0c:8e:2a:
d9:49:8a:47:a3:4c:54:5a:db:77:0a:ed:a9:80:62:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:67:FE:3B:A6:D8:80:B2:91:48:54:28:4B:F6:8D:B1:E5:A2:0E:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFCA62E0CD0611EF83CCD254762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.34.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b1:a6:5d:7d:39:04:c2:d5:de:cc:58:c6:13:53:cd:b3:01:
cb:28:c5:7c:5e:c3:1c:ee:ea:95:25:1d:02:60:6a:48:7c:cf:
f6:99:3c:5d:b8:e8:4a:d1:7c:55:ef:f1:92:da:5a:5b:e4:a6:
3f:57:2d:93:ec:ed:02:4f:aa:c2:44:c7:c6:0b:25:e8:24:16:
85:7f:2b:f5:e0:75:3a:a8:b5:8b:0b:dd:50:d5:54:d2:ba:af:
a8:89:af:f9:f5:76:4f:d7:aa:ed:19:74:02:e1:95:08:6c:85:
a6:29:46:30:f9:3a:c9:41:0c:68:45:01:07:7e:46:8d:9c:b0:
5a:8d:3e:d2:c4:55:b3:be:bc:20:a7:e4:02:e0:43:88:c2:26:
44:37:73:c6:c5:47:c3:9e:e0:d9:f4:48:4b:ea:c2:8d:52:f9:
98:f1:50:3f:fc:40:0b:69:a4:c7:41:2a:c6:eb:a9:b1:99:fd:
4f:89:36:48:ae:2a:fd:5d:4f:32:15:d6:24:85:94:bd:ef:80:
c2:e5:7d:c4:51:fe:eb:ac:0b:8d:44:15:4e:ea:b6:ee:25:10:
3e:29:b2:8d:ed:1c:c1:3a:86:23:48:c3:48:37:d1:56:f0:87:
46:20:6d:f9:9e:d6:07:7f:3e:7c:2d:d5:8e:74:b8:57:d1:bc:
47:d2:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:07 2025 by rpki-client