Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E098DE0C31F11EF8B329D4F762E951A.roa
File: 6E098DE0C31F11EF8B329D4F762E951A.roa (raw, json)
Hash identifier: z3C6hyvMMcLJCOCQxsacWAo/Mn0+UsDvIZbDGqf3e/s=
Subject key identifier: C3:9C:33:22:1D:23:F6:22:E3:6C:38:55:7C:29:3D:D6:AF:0D:FE:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E098DE0C31F11EF8B329D4F762E951A.roa
Signing time: Thu 26 Dec 2024 00:22:03 +0000
ROA not before: Thu 26 Dec 2024 00:00:59 +0000
ROA not after: Wed 10 Dec 2025 00:00:59 +0000
asID: 984
IP address blocks: 156.228.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59917 (0xea0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:59 2024 GMT
Not After : Dec 10 00:00:59 2025 GMT
Subject: CN=676ca1ab-ef6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:8e:53:d0:cc:9c:3b:b8:72:da:9a:83:a2:
01:5b:3e:bd:b7:32:1f:f4:73:79:10:2a:92:10:84:
bb:35:cf:a9:c1:7a:6c:85:73:14:e8:14:ee:af:52:
09:75:5c:70:e6:19:3b:e7:47:b6:24:89:af:37:fc:
13:3f:3b:89:fc:ae:d6:aa:1c:98:1e:a0:00:0f:f6:
9e:81:24:f7:d5:b9:21:e7:c1:e0:0c:a4:a0:2f:0a:
92:75:d0:49:27:1e:b7:b4:b4:8c:19:65:63:12:b8:
c8:f0:12:52:37:96:7a:b9:1a:14:4d:36:94:58:44:
bc:69:58:47:2d:56:6d:59:71:80:21:7f:68:a0:bf:
6d:de:5b:f0:15:39:76:df:88:f4:a4:fa:13:1f:f3:
9b:92:31:7e:c1:e7:8b:19:4c:81:d9:5b:86:57:db:
4f:0f:a7:10:19:99:45:28:b6:da:74:59:83:0a:8a:
fa:25:a1:da:11:90:a6:2b:08:3a:61:74:22:0a:7b:
2e:09:23:3d:fa:55:00:12:c1:ab:69:45:89:91:35:
9c:15:25:55:6c:e2:24:40:aa:d8:b2:08:15:7d:b9:
8b:78:56:81:2d:d2:a1:81:c4:a5:14:f2:d0:66:ef:
af:34:93:cc:36:40:c5:6e:d0:80:8e:6c:f1:02:ce:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9C:33:22:1D:23:F6:22:E3:6C:38:55:7C:29:3D:D6:AF:0D:FE:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E098DE0C31F11EF8B329D4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.213.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e2:62:ee:c3:18:da:cb:ea:b7:3f:e1:b4:86:61:7f:c3:13:
99:b7:97:7a:0a:51:5e:d4:4a:57:aa:f2:1c:38:93:4f:f8:30:
2c:af:4e:0a:df:d3:15:f1:07:89:6c:5c:3b:8c:d6:00:38:93:
9c:e3:32:19:2a:52:50:c1:4a:82:a9:d7:d1:cf:77:b2:d4:da:
89:83:33:7d:0e:00:de:a1:bc:27:8c:c4:99:30:98:1f:5e:10:
f0:88:3a:f6:5e:87:95:55:42:d8:d4:d9:0d:c8:bb:50:4f:63:
a6:62:46:8d:42:f6:b1:f0:b3:1c:e2:85:4d:65:6d:52:dc:75:
a6:3f:b4:a5:73:10:04:3c:25:fe:89:44:ef:bc:52:c2:8b:58:
ea:91:84:75:6b:8e:6d:33:5b:02:6a:7f:6a:48:d6:2e:1c:15:
31:9f:59:f4:d4:5f:3b:27:05:28:c0:de:d7:29:30:30:de:a0:
e1:d5:49:f0:36:27:5d:c8:44:f6:4c:b4:3d:c1:62:94:06:7b:
0e:50:d5:19:ca:3d:85:84:af:a1:86:81:a1:a9:a3:4e:7b:66:
ee:28:64:04:da:29:e4:7a:97:db:b4:91:4f:8a:82:9c:34:43:
f0:eb:ec:87:c8:2a:9b:9e:64:31:ed:01:d2:ce:48:e2:02:aa:
4b:b0:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:54 2025 by rpki-client