Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AFBA856C28011EFBB69D974762E951A.roa
File: 3AFBA856C28011EFBB69D974762E951A.roa (raw, json)
Hash identifier: PeNq+gqPk90vagzbihO+rFEGnjX5emkGmISAN5MXXZ0=
Subject key identifier: CE:B0:3F:D2:BA:40:BD:4C:4C:F8:D9:B6:E8:EE:46:FD:94:DE:C7:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AFBA856C28011EFBB69D974762E951A.roa
Signing time: Wed 25 Dec 2024 05:22:27 +0000
ROA not before: Wed 25 Dec 2024 05:22:24 +0000
ROA not after: Wed 10 Dec 2025 05:22:24 +0000
asID: 984
IP address blocks: 156.228.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59615 (0xe8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:22:24 2024 GMT
Not After : Dec 10 05:22:24 2025 GMT
Subject: CN=676b9693-d30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:ca:c7:de:bb:ba:a5:60:a7:58:13:ac:31:
a9:e7:74:87:82:a2:be:4b:44:ac:e9:d3:57:6b:76:
d3:3d:bb:12:41:27:13:8a:33:ee:8e:06:4b:b1:ce:
37:14:02:6a:65:27:09:a3:bd:66:14:db:60:69:ed:
47:67:cd:f5:4d:91:37:6d:aa:3d:99:8b:98:0b:d3:
08:d9:4c:cc:c9:d0:32:45:c5:93:7e:6d:54:87:54:
1a:bf:4b:38:15:c0:8d:65:fa:38:6d:bc:51:e1:e5:
29:94:39:3a:3b:da:2b:a3:c1:99:4c:2d:b7:e2:8f:
97:7b:8c:1f:5c:b1:10:c9:98:47:f7:eb:ef:6c:ec:
ae:01:a0:96:f2:87:6d:f2:85:dd:ff:ad:1d:63:6d:
1d:13:e7:ea:70:5b:27:f4:2e:12:41:f8:7b:f1:24:
1e:00:e1:23:e3:b5:cb:ca:3d:48:83:3b:bc:5e:1c:
d3:3a:65:19:ac:c0:c2:fc:c6:18:74:fa:1d:2e:09:
94:41:af:1e:5d:1b:43:b5:3f:02:dd:76:f9:61:99:
71:ae:cd:35:ac:4f:23:bb:67:91:f4:7b:57:e6:c9:
77:06:0b:83:6f:38:3c:c7:86:d0:68:92:0f:0e:a0:
29:93:9e:c4:78:47:48:7b:77:54:a6:00:30:61:a7:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:3F:D2:BA:40:BD:4C:4C:F8:D9:B6:E8:EE:46:FD:94:DE:C7:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AFBA856C28011EFBB69D974762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:6a:ad:22:85:c9:f5:d2:2b:3f:9a:d9:3c:d0:25:91:95:61:
72:3c:e5:fa:7c:ac:7a:b3:a0:ed:51:0d:1d:b4:c5:0a:76:9f:
51:b6:2e:5b:e7:f0:22:0d:9b:5f:0d:da:1a:fc:79:af:bc:c1:
c5:8c:17:dd:44:92:f5:c9:7b:cb:dc:18:70:43:47:0e:72:d9:
4b:9d:27:88:08:cd:ad:7a:ee:e0:f6:21:22:df:7a:b0:78:d2:
2d:1a:3a:2f:66:a7:55:2c:b5:9f:05:a9:f1:71:2f:8d:ed:43:
48:96:a0:6e:01:2d:05:f6:22:0e:f9:0c:a3:c3:3e:66:2f:1d:
fb:ae:b5:b7:df:53:57:6b:de:c1:f6:33:ea:d0:d0:25:98:77:
fe:02:f9:aa:61:88:05:1c:66:1c:42:fc:21:d2:cb:86:fe:21:
37:a2:5c:43:d4:34:6c:91:42:25:aa:62:2a:f9:37:25:aa:f8:
95:7f:f6:8a:7b:61:79:83:cb:1f:2b:13:21:b9:2a:f5:de:d9:
fb:1d:b4:1a:e4:1e:8b:19:00:fd:1d:91:51:3d:88:02:b4:9c:
ca:b8:30:b6:56:0c:62:53:8a:dc:c5:17:19:18:6d:9c:81:4b:
85:23:03:de:e0:46:0f:96:3a:4c:32:a9:c4:e2:9a:3a:51:8f:
0a:a8:12:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:35:50 2025 by rpki-client