Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15216D1AC32411EFA2CEC66F762E951A.roa
File: 15216D1AC32411EFA2CEC66F762E951A.roa (raw, json)
Hash identifier: 2G6QF0QdpJe5KLF/LOzvw5SHVScyfkgrXWLEoqn0Ir0=
Subject key identifier: D2:58:35:0B:41:9C:80:2B:3F:4C:88:A8:A9:C8:83:88:E4:89:12:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15216D1AC32411EFA2CEC66F762E951A.roa
Signing time: Thu 26 Dec 2024 00:55:21 +0000
ROA not before: Thu 26 Dec 2024 00:00:18 +0000
ROA not after: Sat 01 Mar 2025 00:00:18 +0000
asID: 984
IP address blocks: 156.249.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59997 (0xea5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:18 2024 GMT
Not After : Mar 1 00:00:18 2025 GMT
Subject: CN=676ca979-7cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:a2:48:a9:c1:9c:80:82:4a:8a:6e:06:d4:
e0:a4:14:83:2c:b0:ed:eb:12:44:42:76:e1:3e:5c:
39:d8:ec:e5:b0:2e:6a:3e:ec:7f:b2:9a:a0:2e:0d:
44:d8:af:da:ba:87:11:a5:e2:66:6c:3b:f3:9b:21:
19:df:22:18:ee:af:30:43:b2:4f:84:1f:da:29:4b:
94:6e:5d:b8:13:7a:9c:68:d0:68:85:de:82:50:f5:
63:6f:d1:19:84:40:dd:b2:e9:58:bb:5d:14:9b:96:
7b:3f:45:4c:60:fd:9e:06:bf:b8:a6:1d:ed:e8:da:
9d:89:37:18:bb:a9:13:c8:4f:77:4a:d0:5d:b0:9e:
aa:d6:e5:57:ee:a5:56:ed:70:dd:a1:d5:9d:75:6e:
55:5c:bc:7d:1a:47:55:7b:92:b7:6c:f8:e3:28:61:
ca:f7:7d:61:9d:13:dd:3e:6b:1d:c7:0e:53:be:49:
00:5c:a6:da:6d:63:ba:40:19:44:b7:6b:c3:4b:e6:
ee:21:73:38:80:53:22:5a:a4:49:be:b4:26:7d:e9:
0c:51:77:85:9b:dd:62:0f:43:b1:d2:97:41:73:d8:
b0:e8:ce:b6:25:62:38:72:5e:7e:45:9c:6b:dd:6d:
9f:d5:d6:30:b7:23:15:ae:74:4e:5b:ba:e2:8a:9c:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:58:35:0B:41:9C:80:2B:3F:4C:88:A8:A9:C8:83:88:E4:89:12:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15216D1AC32411EFA2CEC66F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/18
Signature Algorithm: sha256WithRSAEncryption
82:dd:b7:cf:16:02:71:f2:cd:87:cd:0a:69:cc:71:75:dc:af:
6a:0c:cf:01:29:b7:7f:ba:13:57:15:a1:8f:a0:cc:2f:46:53:
7b:8a:4a:55:24:22:08:eb:79:58:ab:e1:98:38:ca:94:00:d2:
f8:75:7e:9e:05:47:57:c5:61:f3:39:22:7b:6f:2f:6d:4f:f5:
40:72:e5:c0:21:c8:06:7e:f0:cd:e9:8c:8b:7e:26:80:fc:ae:
f4:33:83:12:f3:36:cb:b4:3a:2c:84:b2:a6:77:78:e4:e2:93:
5c:f0:9f:81:1a:e5:ce:65:fe:b4:e0:64:2b:a0:58:89:a7:aa:
7b:21:0b:df:e4:ff:b7:bd:92:ae:c2:4d:d6:05:b9:22:a3:df:
c3:6b:95:22:17:a7:4b:f3:46:9b:39:f4:29:b4:7f:29:31:b0:
47:73:a9:ce:eb:d0:62:fa:af:72:98:ac:42:d5:2c:d0:92:d2:
d0:fd:4f:bb:d2:83:48:9f:37:1f:bb:86:89:e7:16:13:1b:30:
97:da:3b:69:2d:a8:c5:8c:fc:6b:40:02:f6:48:b0:6b:d8:33:
cf:e6:b0:a7:5f:a8:bd:b8:4f:b1:7e:61:b9:39:d0:85:6c:31:
0d:09:f2:57:fe:cc:16:92:2a:61:18:bb:12:ed:0c:68:93:6b:
ff:59:38:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:21 2025 by rpki-client