Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D051168CD0811EF9210375D762E951A.roa
File: 3D051168CD0811EF9210375D762E951A.roa (raw, json)
Hash identifier: NyfMsDP9MfNtFKXZ2ajGzWxL/ptHlGAmIRORAWEp6iA=
Subject key identifier: 4F:A5:65:42:49:ED:B2:0B:09:1E:1B:AF:D7:71:BD:FF:1B:B2:45:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D051168CD0811EF9210375D762E951A.roa
Signing time: Tue 07 Jan 2025 15:01:14 +0000
ROA not before: Tue 07 Jan 2025 15:01:10 +0000
ROA not after: Mon 13 Dec 2027 15:01:10 +0000
asID: 17561
IP address blocks: 156.239.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64683 (0xfcab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 15:01:10 2025 GMT
Not After : Dec 13 15:01:10 2027 GMT
Subject: CN=677d41ba-76d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:72:2d:2c:9f:63:05:51:9a:50:ee:02:e2:
04:40:2f:0e:e8:c1:ea:32:33:72:a2:08:54:24:c1:
43:87:e1:3a:41:0f:78:d4:0b:3a:b5:a6:92:e0:7d:
f2:13:96:1c:1a:bc:ff:df:e6:e6:b3:62:b8:ac:6c:
b8:86:e7:23:62:6b:1c:b7:25:96:06:3b:de:4d:ac:
a4:36:df:11:cf:94:73:14:1a:ea:5e:e5:97:71:95:
52:c7:99:a5:82:c7:40:0d:9e:37:3f:2e:2e:a8:99:
08:08:ce:89:fe:60:9f:c2:4f:3f:3d:44:91:64:3d:
08:3d:54:76:d8:1e:ab:ad:6b:f9:04:70:e8:4e:62:
20:13:40:e0:cd:0b:62:f2:31:94:f3:3b:ce:c8:4f:
04:cb:3c:bf:7c:e2:58:2d:7e:dc:a6:ea:c6:44:c3:
22:4b:ac:79:f9:ca:5a:06:04:b9:33:7e:30:ac:5f:
81:de:0a:ea:ac:15:21:c0:1e:49:f7:27:1f:fd:d7:
88:de:5f:c0:94:d6:96:a0:51:1b:4c:35:b8:86:de:
ca:7d:f4:31:54:43:bf:e2:75:36:15:f8:44:da:e9:
13:ac:b8:f9:e8:5d:05:43:d6:61:fc:ad:21:ac:16:
64:87:db:9b:1e:11:2c:85:75:2f:ce:b3:f8:78:81:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A5:65:42:49:ED:B2:0B:09:1E:1B:AF:D7:71:BD:FF:1B:B2:45:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D051168CD0811EF9210375D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.39.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f8:c9:9c:0c:60:2a:85:e4:55:10:5b:04:b9:75:91:6a:ff:
ce:5d:3b:9e:7e:80:92:dc:8c:d4:b5:b7:48:03:3d:a2:91:9b:
1f:22:56:ce:1d:de:c2:4d:98:fe:ad:3f:a6:fe:64:84:c2:d5:
87:f9:5a:c0:29:b5:9b:ed:1a:a7:00:ec:1b:9c:2a:ce:9b:d4:
cc:a7:55:52:3d:7b:87:53:75:b1:44:45:ca:ae:6c:95:20:9c:
ac:8b:a0:48:a0:5e:7f:1c:c6:7f:82:ee:d0:ea:c3:58:06:91:
f7:79:5f:4d:f2:80:d5:00:96:5c:1a:28:ae:13:21:a8:1c:f8:
fe:32:5b:1d:04:af:bb:fe:c8:ca:c5:87:ab:d8:1d:ab:ed:e5:
8b:70:48:b6:5b:88:74:5e:97:fa:26:71:10:a4:4d:2f:93:b1:
b2:0e:7d:0e:0a:60:96:14:16:b7:ad:e2:56:e4:2d:80:b2:8d:
39:7a:c7:c4:a7:92:4f:b2:e0:3b:c5:81:19:5e:74:0b:37:05:
97:1f:44:cd:c7:c1:c9:fa:03:6d:51:30:b8:d8:77:25:9d:c8:
1b:38:4f:44:e7:d2:02:90:86:8f:49:bd:e5:17:86:1c:d8:4b:
d0:af:53:1f:aa:49:76:5e:df:dc:f1:e0:ef:5f:e8:09:eb:cf:
c3:1d:69:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:54:28 2025 by rpki-client on console.sobornost.net