Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2495A058C32A11EF8264079B762E951A.roa
File: 2495A058C32A11EF8264079B762E951A.roa (raw, json)
Hash identifier: ycx8+uw2hyFMkgdZ8EzztstNMz6XCpstRsMq7IZ6lRs=
Subject key identifier: F9:2C:A3:60:9B:ED:9B:C0:9C:CA:08:70:30:88:16:43:35:1C:D4:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EABB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2495A058C32A11EF8264079B762E951A.roa
Signing time: Thu 26 Dec 2024 01:38:44 +0000
ROA not before: Thu 26 Dec 2024 01:38:40 +0000
ROA not after: Wed 10 Dec 2025 01:38:40 +0000
asID: 984
IP address blocks: 156.243.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60091 (0xeabb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:38:40 2024 GMT
Not After : Dec 10 01:38:40 2025 GMT
Subject: CN=676cb3a4-c04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:79:20:c2:97:54:04:23:03:76:ad:11:11:
1e:35:7c:98:b4:c0:dd:5a:48:22:a9:13:db:f3:f6:
5c:7d:1d:f1:a4:8d:cb:c1:b8:a8:a0:43:e9:f7:c2:
cc:b7:c0:c9:84:31:45:eb:25:ea:86:d3:b8:31:eb:
0a:e6:9f:31:1f:69:8b:9b:b4:9e:64:76:ef:2e:c9:
ee:49:60:f1:50:17:dc:c9:43:64:cc:a5:5d:63:4e:
f2:c0:7b:e3:28:cc:46:10:95:f3:93:88:63:dd:ad:
2b:61:08:6c:33:5e:50:5e:3e:35:ea:88:f2:c2:b8:
d2:7a:79:31:df:57:60:78:4d:71:cb:67:d5:da:0a:
fc:ba:2f:60:ef:b3:27:6b:b6:0c:07:18:a7:d0:b9:
c1:b7:b2:af:db:e6:2d:8f:82:44:c1:96:7c:11:fc:
91:fb:fe:8b:ad:47:d4:c2:7b:23:b2:b9:da:7a:6b:
d5:2f:63:d7:52:93:09:e8:f9:cb:a5:82:d2:9f:f1:
5d:b9:e3:35:fb:9a:eb:b7:8e:4a:cd:1f:70:e6:29:
25:ef:f1:60:6f:c3:16:36:0b:32:9c:d9:9d:24:19:
6c:ef:0a:97:75:71:b9:cc:3e:fd:4a:08:74:b5:6b:
2a:fa:f3:52:62:69:b2:2d:8a:37:29:d6:95:d7:19:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2C:A3:60:9B:ED:9B:C0:9C:CA:08:70:30:88:16:43:35:1C:D4:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2495A058C32A11EF8264079B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.158.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e9:81:ed:28:b9:90:35:59:8b:8a:b4:65:e8:16:16:17:2b:
06:85:78:3b:38:66:4d:c5:e2:a3:dc:6b:2f:28:68:e8:b4:dc:
11:eb:ca:1e:af:05:bf:ff:c9:c9:b2:5d:f6:0d:8b:fa:4f:f5:
83:33:2a:ff:d1:8d:22:7d:b5:54:7d:e3:d9:d0:56:ff:28:49:
0f:c5:67:db:3b:8c:0b:d4:c0:da:52:5d:c2:bb:5e:52:ea:3b:
cf:80:52:ec:66:3c:f4:67:b8:61:6b:5b:92:6a:83:14:01:42:
b3:68:23:a2:75:0f:d2:21:6e:54:a6:b5:06:21:3f:93:af:35:
dc:80:80:19:91:98:84:67:05:3c:b9:b1:93:3e:25:dd:ed:95:
0b:b9:88:f9:b9:26:99:31:c1:2d:0d:ab:fa:67:e0:30:d7:0c:
37:0a:38:89:dc:cb:f8:0c:8c:87:10:8c:b1:55:62:d0:8b:81:
cf:22:1f:5c:e0:d0:c1:6f:a5:03:41:e7:a0:76:c9:9f:68:89:
84:11:58:a6:7c:25:a3:49:4a:a3:94:f1:3c:03:6a:e5:8a:eb:
b8:62:e3:28:d2:f4:54:48:85:9a:4b:b7:05:aa:e5:a4:15:0a:
d8:c1:d7:8f:5d:5d:29:be:5e:95:46:c8:c8:a1:06:a9:d6:07:
81:72:ce:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:23 2025 by rpki-client