Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EAB28B6DF7A11EEBDE6C962775412E6.roa
File: 9EAB28B6DF7A11EEBDE6C962775412E6.roa (raw, json)
Hash identifier: 8R4ywboM31Db5lyG99r7AyfZf4nlF9STb68sMUTE1Rs=
Subject key identifier: D0:9E:97:A3:8A:37:43:E2:5C:87:65:6E:C6:AF:52:69:AD:2E:A8:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7E0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EAB28B6DF7A11EEBDE6C962775412E6.roa
Signing time: Mon 11 Mar 2024 07:40:24 +0000
ROA not before: Mon 11 Mar 2024 07:40:20 +0000
ROA not after: Thu 13 Mar 2025 07:40:20 +0000
asID: 56655
IP address blocks: 156.225.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32267 (0x7e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 07:40:20 2024 GMT
Not After : Mar 13 07:40:20 2025 GMT
Subject: CN=65eeb568-c0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:25:63:75:51:18:20:da:2b:28:ca:cf:c4:
c7:b8:b8:0c:1b:69:49:6f:ee:22:2c:57:36:a5:a2:
86:2e:f2:18:74:98:11:fd:79:3d:cd:9b:5f:e9:e7:
e9:2f:13:34:4d:b5:63:6b:3b:af:6d:0b:55:88:e5:
87:0e:43:db:5d:40:4d:73:c3:81:20:91:eb:48:7b:
87:50:ab:76:69:b1:e0:6f:46:48:51:94:06:16:66:
2b:e0:07:ed:c2:0f:87:c5:b8:97:14:84:de:c2:70:
a2:d6:6b:50:45:c6:cd:37:57:68:91:08:49:22:6a:
39:09:27:42:cb:bf:51:c2:1a:55:e1:fe:43:9a:30:
07:ac:9c:bd:a0:2c:41:ef:b7:c0:c6:3f:38:4f:c0:
8d:c2:89:a8:e2:10:ed:59:b5:bd:c8:5e:df:6b:33:
4c:d0:f4:cb:d2:37:58:a3:ea:59:6c:b0:d4:31:8c:
f5:7f:c7:0d:ec:ec:77:44:71:14:84:38:7b:03:d2:
fc:4a:e3:69:ab:b4:61:d2:4b:17:aa:d2:46:86:33:
0b:2d:7b:b9:d2:1e:cc:51:c8:96:05:f9:44:c2:e1:
bc:63:5a:20:b5:84:37:a5:d1:03:11:a9:fd:c1:ad:
85:f1:82:62:e5:f0:5d:d1:27:c6:21:85:e5:95:7b:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:97:A3:8A:37:43:E2:5C:87:65:6E:C6:AF:52:69:AD:2E:A8:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EAB28B6DF7A11EEBDE6C962775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.66.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:71:4e:6e:ae:60:52:36:ec:e3:57:a3:02:82:90:39:c7:69:
a3:c4:d4:3f:fa:32:c2:0d:69:2a:ed:6a:1d:93:2e:2d:d7:b5:
92:31:fe:c5:3e:85:cd:65:45:47:11:2b:fb:5e:2a:da:4b:5f:
c9:a7:a4:dd:36:1a:86:a6:30:e5:f5:9d:27:9e:cc:79:39:c9:
45:e4:2e:eb:06:ae:8c:bd:8b:25:f0:3b:39:08:64:64:60:08:
62:52:d4:03:fb:d9:3c:36:5f:4f:c1:dd:b6:be:ce:2d:6e:ff:
76:ea:46:17:89:c0:00:6a:bc:32:e1:ea:80:59:2e:cb:14:06:
10:b4:b4:1f:06:0d:cd:9b:c0:21:00:fe:61:dc:45:a0:ed:04:
b9:4c:05:29:ce:74:94:a5:40:41:bc:ef:9a:9d:b1:91:41:72:
58:c1:51:77:5d:cb:f6:20:9e:f2:52:c6:57:13:9e:b5:ca:1b:
13:66:bd:f3:e0:e5:d0:93:62:ea:76:61:98:5a:92:fa:b5:91:
0a:83:bd:b0:29:e7:93:a4:7b:cb:ac:2a:a9:40:74:60:23:46:
11:88:90:a9:65:ac:aa:2a:e9:3f:d1:af:24:e4:20:04:52:24:
e2:3b:d4:80:0d:55:af:2a:db:f7:67:6d:00:c3:bd:72:ca:de:
b8:a8:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org