Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/190F46B8C96E11EF91D94573762E951A.roa
File: 190F46B8C96E11EF91D94573762E951A.roa (raw, json)
Hash identifier: jNl3aZEGY9znrytNOs1wbwBrhvFIl81UDsvPLVPdj78=
Subject key identifier: D4:B0:FE:15:38:3A:F3:35:69:BE:DC:C2:91:54:C1:BB:0A:4A:AC:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F498
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/190F46B8C96E11EF91D94573762E951A.roa
Signing time: Fri 03 Jan 2025 01:00:18 +0000
ROA not before: Fri 03 Jan 2025 01:00:14 +0000
ROA not after: Mon 13 Dec 2027 01:00:14 +0000
asID: 17561
IP address blocks: 156.227.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62616 (0xf498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 01:00:14 2025 GMT
Not After : Dec 13 01:00:14 2027 GMT
Subject: CN=677736a1-fb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:e6:91:9f:2d:94:82:a1:40:e8:1f:f4:6a:
29:f5:22:2c:e6:f6:d2:7e:e9:49:8a:51:c3:a2:e6:
23:c3:8d:4f:c4:a7:f4:b7:af:49:75:64:c5:fd:a8:
06:54:54:1a:f9:09:f4:1e:49:85:b2:0b:ec:87:f9:
7c:ae:5e:fd:a1:9a:77:73:b4:4c:3e:7e:1d:33:3b:
d0:52:f6:7d:22:18:b0:2a:90:cc:0c:77:4d:aa:eb:
67:25:26:3f:ed:f1:37:c3:1a:c7:4f:16:1b:a7:3c:
64:b8:15:e0:58:9f:81:05:e1:1d:a0:c9:7f:19:0f:
91:8c:71:35:3a:f7:29:fd:5d:17:42:7a:4c:78:e0:
d9:cc:a5:6a:aa:28:d6:91:3f:12:99:5a:3d:bc:b1:
b6:c1:28:18:be:26:2f:3b:11:af:6c:a1:0d:fc:0d:
78:18:6f:67:0d:95:84:f7:04:9b:6a:2a:4f:71:5d:
e2:e4:c8:bd:a9:cb:65:6a:c5:04:9b:0c:11:dc:cf:
69:81:e3:3a:5e:b9:79:5d:c9:82:67:6f:a8:ad:f5:
60:1e:d5:c8:54:24:f8:60:e9:0b:8d:4a:94:65:97:
ca:30:f2:23:93:77:3f:fe:cf:f0:7b:9c:28:fd:cc:
31:0f:a2:ae:e9:02:ec:97:09:de:9d:7d:b6:d7:46:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B0:FE:15:38:3A:F3:35:69:BE:DC:C2:91:54:C1:BB:0A:4A:AC:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/190F46B8C96E11EF91D94573762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.8.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ee:98:85:0c:d1:49:52:60:2d:4b:f5:a6:0a:78:55:2f:01:
03:76:49:57:85:7c:69:92:96:60:62:59:5d:4c:a8:bb:d3:42:
5b:35:99:02:48:5e:08:cb:49:27:fb:61:67:60:0d:ed:95:93:
ba:f2:bb:01:a6:75:4b:77:5f:9b:f1:47:d4:c4:f4:c1:11:3a:
b2:f5:4d:80:d7:ee:e4:d6:b3:bd:41:ec:b8:6a:4b:54:20:7a:
47:f4:92:cd:8b:38:8a:a8:8f:45:58:d6:f2:96:1c:ad:2d:6b:
f2:e1:4b:29:27:5c:c1:51:b4:c1:9d:c3:b2:14:d5:4f:85:b7:
3a:44:92:6e:b6:4a:a1:27:c2:d1:18:8e:d2:7e:2a:da:c0:ca:
f0:e9:cb:cf:9a:3c:4b:07:be:4d:6b:b9:58:d9:1e:2b:34:41:
a7:00:66:cb:ed:1a:c9:1a:27:02:f0:5d:06:de:d7:61:b4:cd:
67:b7:0c:b0:96:5c:4d:d2:cb:00:90:ff:cf:f0:56:29:0d:0f:
59:7a:b7:b9:2f:0e:4c:3f:86:d1:ff:17:de:4e:a2:3d:5b:88:
fd:6a:21:d1:fa:fd:4f:05:77:e3:ee:18:c4:ec:ac:32:58:db:
0a:6a:98:47:3e:27:55:1e:81:de:e0:e4:d4:bd:98:dc:84:a9:
86:cb:dd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:55 2025 by rpki-client