Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/289FF4E2B20D11EFAC4D8251762E951A.roa
File: 289FF4E2B20D11EFAC4D8251762E951A.roa (raw, json)
Hash identifier: e8IS2AffYMswNipxjTakERKkCke0mTlI6Y/imqhyPs0=
Subject key identifier: 64:FF:A8:F1:B3:4C:6D:B0:85:FF:F7:7F:EE:05:27:67:89:E0:68:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/289FF4E2B20D11EFAC4D8251762E951A.roa
Signing time: Wed 04 Dec 2024 06:58:26 +0000
ROA not before: Wed 04 Dec 2024 06:58:22 +0000
ROA not after: Fri 14 Feb 2025 06:58:22 +0000
asID: 135097
IP address blocks: 156.224.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57132 (0xdf2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 06:58:22 2024 GMT
Not After : Feb 14 06:58:22 2025 GMT
Subject: CN=674ffd92-21f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:99:14:3d:40:29:0a:c7:56:e4:22:83:c0:
79:e7:cd:31:69:ed:32:74:a0:7a:a3:cf:f4:28:b7:
d3:3b:b3:d4:0d:76:36:69:93:35:5b:ff:1f:d1:d7:
b8:e6:90:6a:2d:1d:17:23:0d:3b:dc:d9:11:11:10:
5e:16:b6:5a:9c:83:54:bd:42:14:ef:39:0e:3f:d5:
a8:91:8f:06:42:11:82:b5:a1:6d:d0:61:b2:eb:6d:
89:e0:ba:4f:d5:4c:26:f2:c0:99:e6:f0:b7:b1:6e:
e1:4f:ba:2d:de:f9:2b:30:c3:31:6b:39:cc:26:37:
5f:ad:8e:00:9e:da:29:2b:12:5d:33:c0:8a:b1:1e:
1e:d4:74:1d:19:1d:0d:6e:a3:b8:e2:e0:7d:5d:fa:
b7:5c:8a:3d:40:ac:88:bd:14:db:8d:8e:30:de:08:
73:81:df:c4:fb:c9:6a:66:74:f8:8f:9f:2d:8e:3d:
99:c7:39:aa:da:29:eb:dc:4e:bf:f1:50:79:d2:f0:
06:83:77:cd:69:b6:4e:e2:de:6e:c9:52:d5:b8:2b:
e8:76:2d:28:97:a7:1d:b9:df:80:a5:ad:73:c2:f5:
ed:73:4d:78:67:df:9e:19:16:24:06:6a:c7:75:50:
55:12:c2:ea:56:ff:82:f3:ca:2e:48:ff:72:32:b1:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:A8:F1:B3:4C:6D:B0:85:FF:F7:7F:EE:05:27:67:89:E0:68:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/289FF4E2B20D11EFAC4D8251762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.128.0/18
Signature Algorithm: sha256WithRSAEncryption
56:a9:7c:6e:6b:4a:bf:e8:23:fe:e0:ff:34:ff:7f:ce:c5:00:
20:9a:b9:77:7d:8e:f6:95:a0:08:f3:a6:bf:f1:c5:76:a2:bf:
54:ed:56:0a:4f:22:da:90:39:73:bc:5c:11:27:81:5c:4f:37:
db:25:3f:d1:0d:22:5d:82:d2:3a:29:3e:72:34:95:6c:20:3b:
97:c3:ce:df:81:9c:94:64:a4:33:7b:8c:54:6b:fa:0e:49:61:
f5:b1:d8:7a:5b:ff:11:33:0f:11:fe:2b:17:d3:f3:a9:db:51:
92:5c:a9:8d:88:2e:3b:c5:01:0b:e0:1d:dc:f4:a3:6c:ba:b7:
72:68:72:45:02:2e:89:e4:be:96:47:84:ca:a0:16:30:78:fd:
54:47:40:6d:e2:9a:86:2e:16:7f:4b:4e:d2:3e:da:8d:97:36:
f9:42:ab:1e:d2:4a:dd:d9:f4:a8:52:59:5d:58:35:86:c8:68:
ab:62:2e:29:11:a3:9b:32:12:a2:9c:d5:fc:dd:93:b7:64:a4:
de:65:da:48:0e:5e:3d:c4:f1:02:09:44:65:3b:fe:71:78:25:
00:0f:4d:6c:c5:d3:9c:34:31:3f:fa:fe:08:b1:60:09:1d:04:
72:3d:93:f5:a8:23:a8:24:7a:9f:47:74:1b:07:31:1d:c5:71:
61:fe:fa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:59 2025 by rpki-client