Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FA788CC28211EF9D304C81762E951A.roa
File: 06FA788CC28211EF9D304C81762E951A.roa (raw, json)
Hash identifier: eGcXBrbZW766ikH1rGNhqNlHXk/fP08ASRWsv9TaA9w=
Subject key identifier: 04:8B:1D:94:BE:6B:55:14:98:23:2E:49:0A:53:B5:62:24:A2:54:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FA788CC28211EF9D304C81762E951A.roa
Signing time: Wed 25 Dec 2024 05:35:19 +0000
ROA not before: Wed 25 Dec 2024 05:35:15 +0000
ROA not after: Wed 10 Dec 2025 05:35:15 +0000
asID: 984
IP address blocks: 156.228.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59637 (0xe8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:35:15 2024 GMT
Not After : Dec 10 05:35:15 2025 GMT
Subject: CN=676b9997-8735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:47:99:7c:d1:d5:b5:c7:99:bb:14:51:4f:
94:5c:47:8c:e1:22:b9:b8:d3:e3:ad:40:70:29:28:
d5:c5:2b:44:f8:76:c2:e0:55:46:7c:08:dc:84:4c:
9f:81:15:ee:aa:f5:77:30:41:c7:60:9b:5f:59:83:
2b:40:8a:10:8b:3d:28:7a:a8:4f:2a:ea:b2:17:a9:
f5:53:45:61:81:e9:b7:2f:70:23:a6:7a:a0:67:c6:
39:6b:1e:b6:0e:7a:a6:35:46:28:dc:38:36:c6:08:
b6:53:d3:37:55:5a:bb:6a:da:b4:38:49:85:8c:9d:
da:99:de:ec:29:5f:2d:50:cf:86:fe:07:72:d8:7c:
a0:43:c0:46:41:25:f8:5d:12:7c:f5:1e:d3:c8:39:
e2:0b:38:2d:f8:ea:37:99:be:dd:15:39:a6:cf:52:
c5:54:f7:97:02:ac:ba:2b:11:6b:ba:63:9b:7e:21:
41:75:8c:23:9d:e8:4c:5d:26:2c:9e:fc:73:49:8a:
a3:4f:d2:1d:81:77:bf:1e:28:78:51:c9:d3:ab:c0:
18:5f:1d:d7:d3:8c:6d:19:ef:78:80:e7:b9:81:e4:
21:df:10:75:2d:b1:4f:dd:b1:a9:1f:00:8d:b4:6d:
1a:ce:f9:85:b4:b0:0d:cc:80:1e:4c:d0:ad:a8:22:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8B:1D:94:BE:6B:55:14:98:23:2E:49:0A:53:B5:62:24:A2:54:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FA788CC28211EF9D304C81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:46:e0:52:24:72:bf:ab:27:5b:b3:92:31:40:c9:bd:07:5b:
e3:97:a1:2d:13:f7:5b:25:83:96:01:90:35:f1:80:f3:6f:89:
d3:ee:3f:4e:f4:6d:4e:5c:f9:09:a7:d3:82:f8:97:81:58:6a:
db:59:09:0c:a5:fe:dd:a3:a4:21:c2:b9:a7:75:95:2a:27:41:
5c:5c:f3:19:77:c8:16:f3:79:7b:01:1f:1c:57:e3:db:c3:fc:
a2:6b:31:94:f8:3a:0b:26:d6:bd:8b:a8:ef:4d:3a:32:1f:69:
af:7b:70:8a:8a:a1:7a:a3:c8:53:19:ac:a3:62:ba:e9:21:45:
c3:90:12:10:c6:18:ef:4c:ac:e1:45:0b:95:ab:13:89:a8:15:
28:1c:29:03:2b:63:9e:63:1a:7b:93:5a:fc:4d:23:f3:4f:df:
b2:38:f6:6a:8b:e4:35:a5:f6:fb:d7:46:0b:50:d6:f9:46:f6:
76:81:59:ed:1d:41:7f:c9:60:16:e2:cb:bd:4d:88:6c:75:d6:
aa:5f:6d:6f:5f:2a:83:eb:19:b2:d7:2c:98:30:c7:13:50:94:
1c:c3:c4:9f:db:b8:7f:39:24:24:01:60:7e:f7:61:07:a4:d1:
14:c2:21:6e:d5:12:1f:1c:7c:f2:63:47:7a:fb:4b:14:d5:6b:
05:71:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:44 2025 by rpki-client