Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15035F1CC32111EF9C97265A762E951A.roa
File: 15035F1CC32111EF9C97265A762E951A.roa (raw, json)
Hash identifier: 2OIYecEoGJAWuikAsQNEhBsJK98fRsgKNQ+lI+n46dk=
Subject key identifier: 6D:4C:68:D4:13:D7:2B:AE:0B:BD:BE:5A:05:D8:25:83:A4:42:B6:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15035F1CC32111EF9C97265A762E951A.roa
Signing time: Thu 26 Dec 2024 00:33:53 +0000
ROA not before: Thu 26 Dec 2024 00:00:49 +0000
ROA not after: Wed 10 Dec 2025 00:00:49 +0000
asID: 984
IP address blocks: 156.228.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59937 (0xea21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:49 2024 GMT
Not After : Dec 10 00:00:49 2025 GMT
Subject: CN=676ca470-c646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:c0:88:8d:2a:70:8b:91:62:1e:0f:69:9f:
1b:b8:5b:f3:3c:db:df:f7:4a:07:86:08:75:3a:85:
1b:89:7d:2e:66:d0:0b:cb:0b:5e:42:72:27:3a:15:
8e:bf:88:a8:67:49:ad:c5:ff:00:bb:72:ff:fd:93:
7c:d4:d5:cb:29:53:19:3e:57:13:93:eb:22:fa:86:
59:92:c8:3b:32:2a:b2:a1:a6:4f:3a:01:17:63:90:
e4:5a:7c:2d:f7:0e:29:d1:01:03:f0:d7:75:e9:54:
54:4d:1c:a5:e6:10:e5:47:57:ba:d6:8b:50:2d:c4:
e6:78:16:c9:49:1c:4a:76:58:19:a5:29:eb:25:f0:
e5:c5:3e:86:96:2d:f8:20:d4:9e:8f:fa:e9:bc:b3:
f0:a6:c6:dd:f9:55:05:2c:50:2e:ce:ce:c6:51:a1:
d2:fb:7d:91:61:f0:53:3b:ae:bd:ea:06:3c:03:cf:
53:3e:2a:50:c6:2b:e9:21:8f:26:05:e6:a7:74:fd:
58:ce:97:f1:63:e1:3a:f8:60:b2:11:87:8c:a4:e1:
26:5e:8a:af:d4:64:f3:b5:26:ec:ce:00:3d:25:82:
1f:de:10:b5:aa:97:d6:2e:eb:d7:c1:17:8f:41:ee:
54:b4:6e:4d:4b:ab:2c:57:ef:ae:6f:d1:2b:ed:96:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4C:68:D4:13:D7:2B:AE:0B:BD:BE:5A:05:D8:25:83:A4:42:B6:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15035F1CC32111EF9C97265A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.225.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e7:4b:ef:73:2f:de:8f:04:78:a1:51:0c:3e:7b:c8:1e:fa:
14:ee:7f:b4:f6:59:13:8c:ec:b9:8d:61:b4:ea:b1:c6:5e:38:
db:91:19:35:f8:e0:79:ae:80:68:da:f1:96:bc:37:61:5e:ad:
8b:23:e9:9b:c0:79:64:fd:a5:cf:7b:57:ef:0d:ba:1f:7e:02:
db:52:52:11:84:92:5a:ca:31:c8:19:22:ef:63:0c:29:ec:68:
73:d1:82:df:56:f8:37:e7:f1:6b:2d:95:8f:99:93:04:93:1b:
b6:b6:12:f2:cb:4c:ad:df:8d:6e:e1:d4:f2:6f:0c:39:b0:05:
c4:a1:c5:84:a2:6a:67:28:1f:f2:29:84:19:db:1e:d5:89:4a:
5b:7c:78:2d:11:f0:13:cd:38:f9:59:a0:ac:b4:2a:88:de:bd:
4d:68:5b:b4:10:a7:4e:8d:21:22:71:0d:7e:76:3e:e8:da:03:
d5:5c:45:9a:5e:38:1f:aa:c2:24:2d:88:97:41:6b:e0:0e:02:
b5:4a:9a:3f:2a:9b:54:5f:ec:7f:de:d2:bb:21:1d:46:86:82:
16:6b:2d:91:d2:82:b8:76:4b:21:44:c2:99:1c:d5:9d:67:d6:
d1:b2:e3:1f:1e:a6:39:da:7b:4d:ba:09:05:94:66:97:45:c3:
1d:b6:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:13 2025 by rpki-client