Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EBFA08CCDA211EF80F092BE762E951A.roa
File: 8EBFA08CCDA211EF80F092BE762E951A.roa (raw, json)
Hash identifier: H0YgrLmSbCGqqub48sstkyiHVNZ/x1PvaYYd12p9QDA=
Subject key identifier: 86:B5:3E:9E:72:D9:33:51:D0:8E:15:23:C0:D0:89:AA:01:51:49:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EBFA08CCDA211EF80F092BE762E951A.roa
Signing time: Wed 08 Jan 2025 09:25:53 +0000
ROA not before: Wed 08 Jan 2025 09:25:50 +0000
ROA not after: Tue 16 Dec 2025 09:25:50 +0000
asID: 984
IP address blocks: 156.249.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65779 (0x100f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:25:50 2025 GMT
Not After : Dec 16 09:25:50 2025 GMT
Subject: CN=677e44a1-d050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:ef:de:f6:c3:5e:5c:ce:77:4b:c6:28:99:
0f:a6:f0:9d:99:94:92:e7:2e:4d:0b:81:3f:9a:62:
c8:a7:4c:7f:b1:8b:09:6d:82:b0:f2:97:28:0d:26:
23:ae:85:18:84:c6:22:de:9e:97:c5:66:3c:15:35:
17:9f:6b:6b:fa:5c:9b:f5:04:34:a6:03:65:e5:4d:
3e:b4:4f:0d:98:ae:ea:1a:d2:cd:a1:10:11:e3:76:
15:e4:ed:a7:96:8b:c2:6c:bf:9c:c8:43:a5:3d:55:
b6:41:b3:e3:c8:f0:84:49:ab:78:8b:67:10:88:6a:
4e:3a:5c:1f:0a:6d:4c:01:46:5b:20:f6:25:0e:b1:
7f:0a:88:86:5a:74:85:ca:15:8e:55:5f:45:25:83:
ac:b6:43:31:95:7d:8d:44:2d:e9:22:c0:1e:0c:fc:
fc:db:e1:5c:39:7e:a2:ee:6c:be:f2:2f:07:8e:5f:
a8:31:01:d3:5a:18:ec:f5:e6:0c:cf:44:8d:8d:75:
0f:09:7d:a0:7f:61:a3:76:ce:b5:63:62:f6:c1:c8:
e9:a4:c3:fe:d2:8a:e6:37:52:28:e5:8c:11:50:62:
22:17:a4:78:00:64:bc:02:f6:18:7c:0a:6b:8a:32:
f0:08:e8:7e:d3:91:fc:81:41:16:cd:9c:14:ed:07:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B5:3E:9E:72:D9:33:51:D0:8E:15:23:C0:D0:89:AA:01:51:49:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EBFA08CCDA211EF80F092BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.122.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:95:da:fe:de:45:3c:06:d4:07:71:0a:9c:af:0d:c8:bf:4e:
16:48:c0:6b:90:40:66:e9:c1:33:c9:e9:e5:7d:95:c4:30:4f:
ea:6b:52:f8:4e:5b:ae:b0:3f:ac:63:d4:80:71:2f:43:c6:c8:
6f:03:32:cb:91:ed:31:f1:08:5c:63:39:4a:0c:3b:b0:78:a2:
82:33:27:37:33:15:c1:50:e7:3d:e5:57:97:71:c4:7a:2e:77:
d8:b9:95:22:9f:c0:f7:db:e2:02:94:28:53:45:e0:87:83:5b:
34:0c:d8:3c:8e:ef:4c:3f:cd:3e:7a:b7:7d:93:8b:ac:27:98:
17:0a:71:0b:aa:0b:7a:68:62:55:32:10:07:32:91:34:55:eb:
c3:1f:34:57:13:16:96:d9:62:e3:3a:c5:5f:b4:89:e6:07:1c:
c0:45:d4:36:e7:f1:b0:65:af:e0:55:d2:20:f4:ee:d1:e1:2a:
4f:f5:7c:91:32:e3:24:7f:4d:4b:4d:f5:70:2e:a7:df:a2:ca:
b7:12:a1:fc:79:61:df:dd:8e:1b:40:89:f1:23:b8:44:a8:ce:
e7:16:67:48:72:1d:80:5d:59:45:0d:1d:b8:f2:0c:0a:92:06:
40:d7:d4:32:6e:e9:4a:95:3c:6c:1c:aa:06:4a:08:bb:19:88:
0d:07:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:28 2025 by rpki-client