Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F880092C34D11EFA3749D89762E951A.roa
File: 6F880092C34D11EFA3749D89762E951A.roa (raw, json)
Hash identifier: oV7TalEhh5hpmw6C5uPZ14PrlHIn/ah0eUoq4gWE1Xo=
Subject key identifier: A9:8B:20:72:20:BF:3D:B4:19:23:D4:3F:8B:2F:EE:2E:9A:54:95:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F880092C34D11EFA3749D89762E951A.roa
Signing time: Thu 26 Dec 2024 05:51:22 +0000
ROA not before: Thu 26 Dec 2024 05:51:19 +0000
ROA not after: Thu 11 Dec 2025 05:51:19 +0000
asID: 984
IP address blocks: 156.228.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60495 (0xec4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 05:51:19 2024 GMT
Not After : Dec 11 05:51:19 2025 GMT
Subject: CN=676ceeda-1d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5f:7c:0d:27:40:5c:e4:c9:80:19:32:c8:93:
c4:67:0c:33:ac:35:bf:ea:10:14:52:6d:97:71:6d:
61:78:a5:ac:30:c0:28:cc:6b:44:d2:2a:86:ec:0c:
8c:6e:c5:65:23:fd:38:79:dc:93:cb:2c:d0:81:fe:
e7:58:2c:30:90:a5:60:b2:2e:ef:bc:8d:07:8e:e9:
75:fb:da:aa:0c:70:50:07:d0:a0:54:88:c3:30:ca:
43:e0:6c:6f:5e:76:6d:dc:78:da:50:8e:e7:c4:a3:
1d:bc:e7:e8:0a:60:1c:cd:69:04:a5:51:c8:20:37:
87:8b:f1:75:b5:ee:e4:4a:96:fb:16:b7:ed:e8:35:
ee:e9:b1:4f:57:c8:37:f1:83:ea:9e:e3:a7:1b:72:
02:8b:42:0c:c7:da:da:b5:da:51:0b:cc:fd:ae:10:
c5:c2:9d:b5:3c:e3:ea:04:e6:ec:00:d3:4c:78:ae:
14:d8:3d:f2:c5:0f:02:37:6a:be:1b:4f:8c:b7:d8:
35:8c:b0:49:ca:6b:a5:ab:1b:c6:42:bb:bd:b6:c1:
b8:04:7e:6d:aa:e9:a7:16:b2:02:0f:9a:a7:98:2b:
d1:8a:31:0b:eb:2d:63:bc:47:27:f8:f9:69:9b:78:
88:fe:ae:16:0a:c7:e5:e2:5f:95:87:8d:05:5a:5e:
d9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:20:72:20:BF:3D:B4:19:23:D4:3F:8B:2F:EE:2E:9A:54:95:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F880092C34D11EFA3749D89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.222.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8c:d5:80:7d:76:ba:04:ff:c6:ba:83:c2:e9:0f:59:69:40:
82:2c:1d:3a:ef:c1:d8:b8:7e:03:29:0b:96:e7:35:37:e5:92:
7a:53:b2:72:65:7b:87:50:51:02:9c:a1:45:cd:2a:87:49:c2:
64:17:f0:f9:bb:89:d2:34:31:79:09:a9:1a:05:52:fc:8b:3d:
d3:99:6d:f0:83:0a:9d:6f:2b:91:70:3f:b6:e0:e4:b3:1a:9e:
64:cd:15:5e:fd:e1:7a:e7:3d:de:52:ad:16:50:88:09:07:77:
58:df:9f:ee:1c:4e:f3:a6:36:5f:58:1d:7c:f1:cf:56:5f:47:
a2:76:9a:6b:10:86:6e:ba:86:cb:a5:89:ce:5d:1a:15:f2:3c:
84:72:f6:6a:13:22:de:57:d4:ac:84:ea:88:43:43:25:f9:f0:
71:b6:db:0e:26:1a:b7:6c:3b:8a:37:79:3c:4c:72:d7:d7:f3:
d9:ef:2f:8b:84:50:23:ad:96:a3:f7:e3:c5:50:96:e3:09:d5:
3c:d4:1f:78:99:b4:35:b1:ca:0f:cb:98:17:c2:64:1b:1d:d6:
9f:a0:97:d5:89:df:7a:0f:24:79:f5:96:7a:71:d3:3b:5d:92:
a7:60:6e:29:45:d1:bd:16:f6:0a:2d:90:95:ac:d5:2f:a2:b6:
9f:bb:7d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:08 2025 by rpki-client