Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A64AA46C33711EF8F76087D762E951A.roa
File: 5A64AA46C33711EF8F76087D762E951A.roa (raw, json)
Hash identifier: 5S9LGHA64rnQA71QUDuQAsNUHUOrXvSJ3ldsGfLuptE=
Subject key identifier: 2D:B7:49:0A:00:88:29:98:8D:15:EF:8A:BC:DD:4C:7A:99:A3:41:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A64AA46C33711EF8F76087D762E951A.roa
Signing time: Thu 26 Dec 2024 03:13:18 +0000
ROA not before: Thu 26 Dec 2024 03:13:14 +0000
ROA not after: Fri 10 Dec 2027 03:13:14 +0000
asID: 17561
IP address blocks: 156.244.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60249 (0xeb59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:13:14 2024 GMT
Not After : Dec 10 03:13:14 2027 GMT
Subject: CN=676cc9ce-9658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:6b:81:c6:71:89:9b:33:38:ff:5e:9e:60:
e7:4a:63:d8:b7:80:ac:f3:87:7b:c5:64:1a:24:60:
71:a8:ec:27:20:3c:05:c3:7c:ba:76:44:18:b2:42:
ed:67:02:24:15:93:5b:bf:96:1e:0b:4f:7b:3a:6d:
b7:63:b6:46:5d:ee:32:dc:0a:50:1b:0e:69:d0:4c:
fb:8e:f0:fb:67:35:eb:fd:a0:f1:c1:ae:43:17:06:
cd:b2:32:b2:fd:1b:ca:0e:ad:d5:9d:97:eb:8a:b4:
a0:f7:5e:93:ac:7f:8e:71:3f:c5:3e:0e:68:94:a3:
3b:59:84:51:67:96:5c:e2:a7:d4:33:03:0e:fa:f7:
32:98:ba:b4:b0:96:5b:cd:e8:12:7c:d7:c4:bd:18:
87:3d:da:ef:99:5d:8e:91:5f:1c:48:bf:73:44:f6:
39:8d:1d:ad:fd:68:69:56:f1:32:f7:94:e8:83:ba:
74:d9:5b:be:78:f0:68:b2:02:d7:e9:00:79:ec:49:
b4:48:fe:ed:14:c8:89:6b:95:84:e7:cc:83:8e:91:
b7:84:9b:de:53:40:ab:7f:45:3a:c3:ba:7e:fa:1e:
d6:cf:fa:ee:90:31:f0:33:56:d9:89:fa:f9:46:58:
4c:27:f7:3b:77:53:33:80:cc:4a:21:6b:c0:78:78:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:49:0A:00:88:29:98:8D:15:EF:8A:BC:DD:4C:7A:99:A3:41:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A64AA46C33711EF8F76087D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:28:71:40:c0:7d:d0:7d:23:f9:3e:5c:7b:49:2f:f1:d9:4c:
72:ee:f0:f3:f3:ee:02:3b:d7:fd:22:ed:c3:5d:11:9e:b5:db:
93:a1:96:86:38:90:02:a7:ea:29:67:40:24:42:77:38:74:86:
5f:62:17:dd:b2:ee:61:f6:52:90:90:04:ca:cc:94:b5:6c:7c:
f4:bb:d9:da:47:d4:f5:82:bb:2b:71:6e:00:b5:1a:89:31:38:
3d:ab:da:62:0a:ec:cb:d0:d6:1a:d1:56:f6:15:89:ae:ec:69:
ba:e3:7d:44:e6:16:e1:54:a5:b1:bd:31:60:26:b7:d7:ba:27:
f8:14:e4:ca:92:07:0b:c0:5c:5f:42:be:c4:0a:ba:fd:f4:d4:
1e:ac:dc:36:3d:34:7f:2a:5f:3f:2c:50:2c:df:ec:f8:47:7e:
43:9f:38:7c:13:19:d6:bc:2f:89:ca:2c:ce:7a:dc:92:bf:27:
70:e0:80:31:bf:dd:06:fb:e0:14:fb:e7:f7:5f:b3:42:aa:39:
d1:51:da:64:0f:26:6a:f1:1e:74:ac:a8:80:67:d6:6a:f5:99:
76:55:87:f3:01:cc:ce:fc:ed:bf:b6:db:cb:bf:b2:0d:1c:c2:
fd:9e:18:b3:8e:29:5b:95:ab:14:44:8e:e8:13:93:dc:1e:e6:
e6:9e:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:08 2025 by rpki-client