Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/941AAF12C32111EFB4C0AE5C762E951A.roa
File: 941AAF12C32111EFB4C0AE5C762E951A.roa (raw, json)
Hash identifier: Kk91Giuv59bUglhjTPXurVRtcINSRGmqsPfhPFZVZPA=
Subject key identifier: 5B:EB:FD:E3:0C:BD:BF:2E:4F:82:E4:DF:A8:12:53:F6:86:72:D4:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/941AAF12C32111EFB4C0AE5C762E951A.roa
Signing time: Thu 26 Dec 2024 00:37:26 +0000
ROA not before: Thu 26 Dec 2024 00:00:22 +0000
ROA not after: Wed 10 Dec 2025 00:00:22 +0000
asID: 984
IP address blocks: 156.228.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59943 (0xea27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:22 2024 GMT
Not After : Dec 10 00:00:22 2025 GMT
Subject: CN=676ca546-a0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:21:79:49:b0:c7:c0:b0:32:35:79:30:f0:
99:99:02:bf:5e:72:10:b1:17:96:17:74:3e:52:f9:
95:d7:88:42:56:ea:cb:1b:4b:5e:06:21:e9:1a:fb:
29:9d:ea:23:da:5d:61:37:c7:89:32:c4:67:4d:9c:
60:e1:c5:76:c8:44:51:8d:4f:a7:52:7a:4e:52:c2:
2d:83:f4:e0:67:6c:bf:f7:60:46:33:aa:11:a3:82:
aa:c6:d5:02:7a:f3:3d:09:ae:7a:07:07:c1:fa:b3:
47:1f:a1:fd:83:71:15:e4:d8:dd:e6:ae:fd:5e:96:
86:53:13:b9:ba:b8:e1:7f:38:d3:b0:be:53:9d:de:
08:99:93:08:2f:a7:5c:4a:bf:78:f5:ba:f1:14:fb:
22:86:01:56:c9:7c:f8:a5:97:3d:4c:b9:cd:19:a2:
9d:a7:1f:bc:03:f1:c6:76:d1:b1:79:02:b4:6c:1c:
17:9c:c7:da:9f:4f:8a:d6:ac:3f:45:49:80:22:5c:
74:e6:ce:a6:fe:d4:a1:9b:da:59:ec:0e:11:8d:0a:
b0:09:ff:0a:3a:19:04:42:00:e3:22:1b:b9:ec:be:
f1:92:6d:b2:2a:74:e1:65:aa:35:d5:08:3b:d8:b2:
64:af:00:b6:22:2f:cb:49:53:85:33:1f:e7:8b:4d:
e2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EB:FD:E3:0C:BD:BF:2E:4F:82:E4:DF:A8:12:53:F6:86:72:D4:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/941AAF12C32111EFB4C0AE5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.228.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4e:82:af:49:2f:e3:29:10:ea:74:f9:b8:7e:3a:3d:ce:0c:
23:59:fb:76:62:8c:27:e0:e3:38:a8:66:21:01:d9:f1:c4:71:
f9:20:a3:8d:a0:3c:60:ae:14:e4:df:41:d8:d7:6a:66:3c:ef:
5b:da:6d:64:8c:53:92:9d:8c:81:4f:3b:c6:bf:93:05:40:02:
d2:86:00:66:6a:b0:04:05:6e:2e:78:d4:47:b0:c4:be:18:50:
95:7d:e9:43:53:6b:c1:cd:75:0b:0e:e1:d0:41:dc:a5:21:4b:
f9:3d:6f:ab:08:3c:80:f7:0e:86:f3:49:7e:90:d1:9b:67:a3:
8d:84:89:64:ed:c0:53:16:c6:9d:d6:ae:55:88:04:78:f4:ad:
ed:d4:18:15:7a:1c:b8:22:a6:96:be:9a:5c:04:1b:f1:6b:c4:
67:ef:ee:bc:70:4a:8f:33:72:b5:5e:6d:62:ea:d6:60:30:a9:
54:14:4f:42:26:19:06:b3:92:e6:7e:c0:fe:8d:14:b9:9c:92:
f3:2d:b5:6b:ad:09:e3:4c:50:c0:8b:da:30:66:3e:8c:fc:5f:
d1:24:23:02:74:b3:27:e9:28:a8:85:f2:1c:37:54:5e:95:22:
44:6f:9f:6f:45:79:74:83:7b:17:11:6a:f2:eb:57:8a:93:f1:
62:cd:b9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:24 2025 by rpki-client