Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6248132EC32311EF94E8DF6A762E951A.roa
File: 6248132EC32311EF94E8DF6A762E951A.roa (raw, json)
Hash identifier: 2wDe5hGAFJ6IY0caa2/LoP5YFRYek+clKLNo4iDvgLw=
Subject key identifier: 7F:F4:23:3A:65:51:25:1F:DD:67:2D:3F:44:91:4C:79:B4:74:2F:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6248132EC32311EF94E8DF6A762E951A.roa
Signing time: Thu 26 Dec 2024 00:50:21 +0000
ROA not before: Thu 26 Dec 2024 00:00:17 +0000
ROA not after: Fri 10 Dec 2027 00:00:17 +0000
asID: 17561
IP address blocks: 156.228.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59978 (0xea4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:17 2024 GMT
Not After : Dec 10 00:00:17 2027 GMT
Subject: CN=676ca84d-4fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:95:b6:15:e3:c5:a9:9d:51:40:e2:41:ae:
22:ad:19:d1:08:e1:61:37:02:a4:de:8e:a9:2f:94:
4e:f7:e4:3d:7f:b7:94:f7:d5:10:bc:4b:18:f5:00:
b9:26:69:d4:c3:3f:e7:a5:e5:be:f8:40:71:ec:f2:
b9:8f:6b:c2:3d:7c:76:95:19:0f:f1:51:31:a7:80:
19:b4:9e:24:c5:eb:7d:8c:c2:41:67:f7:fd:e5:fc:
55:c9:0d:8f:05:f4:cc:1c:6e:8f:a0:69:e7:a2:65:
e2:a1:77:8b:db:c2:d0:2c:e4:5a:02:81:f0:77:f1:
b8:86:57:1d:88:72:30:0b:2c:0d:31:4d:c4:ae:ea:
b1:ae:e1:64:cb:b4:d3:a0:b2:73:0d:13:05:38:bf:
94:60:d3:9f:fe:c6:70:4f:3a:80:59:58:18:be:af:
e7:44:76:2a:af:fe:c7:c9:ec:f3:62:2c:7c:92:fc:
bc:51:3c:1b:a4:af:b3:ff:f4:2c:e9:1a:22:a9:1a:
48:bf:5e:d8:75:e6:ad:dd:dc:88:f4:e6:e8:55:b9:
40:89:bb:0b:2a:93:30:52:d5:ca:b2:99:2d:7b:fb:
c3:11:c0:27:87:bd:3a:07:fc:07:65:f5:75:75:e2:
a5:a5:94:04:9f:46:c0:e7:8e:d7:31:9e:48:70:87:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:23:3A:65:51:25:1F:DD:67:2D:3F:44:91:4C:79:B4:74:2F:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6248132EC32311EF94E8DF6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.239.0/24
Signature Algorithm: sha256WithRSAEncryption
94:24:a8:b3:cf:1f:be:03:a4:f3:35:83:1d:10:cf:10:b2:b5:
46:62:5d:5b:db:d8:7e:9a:54:4d:1a:d4:3b:ab:b5:eb:51:ac:
42:8b:fb:26:d0:45:0b:93:46:73:c9:d8:ac:1c:2c:f5:fa:0b:
d4:7c:57:0d:6a:96:04:1c:8f:01:45:75:4f:c6:d7:0e:9b:3b:
8e:07:4e:7e:0f:10:1d:14:31:00:c8:d8:e5:a9:d9:95:2d:09:
7d:60:a2:02:6a:e3:fe:d0:34:eb:de:ff:7c:57:fc:0e:ae:19:
30:73:1f:98:3f:30:88:f0:80:42:b8:67:f9:17:79:76:8a:f7:
db:ea:f0:d0:80:40:ce:70:ec:80:1c:e2:a0:ba:84:48:35:b7:
31:c1:c5:c6:b0:b6:79:e2:cd:c8:1f:cc:dc:07:bd:86:a9:19:
66:ec:c5:ef:9a:68:b7:ba:89:ce:dc:37:db:9f:ea:39:83:a1:
14:5a:ab:72:52:88:ee:33:20:1c:7b:73:aa:5e:7a:b1:aa:a0:
d5:f4:8a:e2:24:18:d4:d5:a0:65:21:9f:bb:25:77:b5:f5:cb:
4c:3b:ac:10:99:5c:69:79:ca:d3:f8:a7:32:a3:0d:2b:3d:b4:
f5:ec:77:06:b1:0d:9c:7b:c5:0a:a4:13:97:90:38:48:78:ec:
5b:ab:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:13 2025 by rpki-client