Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A265286AC28411EF9C426190762E951A.roa
File: A265286AC28411EF9C426190762E951A.roa (raw, json)
Hash identifier: t8EIafwjDJIWloV7NA3/fOjdJEG+KhBXB5QWixmqMfs=
Subject key identifier: 46:11:0E:C5:A4:E8:E6:50:75:8A:6F:45:B4:A6:45:8F:3F:98:32:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E915
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A265286AC28411EF9C426190762E951A.roa
Signing time: Wed 25 Dec 2024 05:53:59 +0000
ROA not before: Wed 25 Dec 2024 05:53:55 +0000
ROA not after: Wed 10 Dec 2025 05:53:55 +0000
asID: 984
IP address blocks: 156.228.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59669 (0xe915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:53:55 2024 GMT
Not After : Dec 10 05:53:55 2025 GMT
Subject: CN=676b9df7-6f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:e3:60:7a:2e:7d:28:ef:ce:44:05:91:1b:
e1:7e:a1:f2:98:c6:92:72:66:fd:5e:d6:29:8e:fb:
24:28:21:06:02:24:ed:a6:ba:b5:e0:d6:6d:41:24:
0e:6f:67:e9:ef:03:e7:8d:2f:ac:18:ae:cc:28:e7:
74:da:23:21:ef:6b:bf:f2:0f:07:a0:fe:9a:bb:80:
e8:a0:11:a6:51:eb:e1:d8:75:23:2a:e1:eb:15:90:
ab:c3:33:0d:25:3e:72:1e:1f:84:b7:ce:3c:a6:e7:
9c:fb:9d:b8:91:41:0a:dd:cb:88:6e:b6:75:f8:79:
e7:e4:2a:e6:90:e2:d4:b9:9a:39:64:d4:bc:0d:7d:
ea:cd:41:87:e0:1e:88:a5:8f:78:be:b7:2e:a9:5e:
9f:0d:4e:8b:5d:43:b0:bb:7c:fb:ff:cc:de:29:9e:
88:af:bb:3c:97:1d:e6:42:23:d2:aa:d2:e6:82:dd:
a6:49:d7:9b:25:11:c1:1b:a5:41:76:31:99:f5:f1:
bd:8e:10:06:0a:3d:d4:38:ff:8e:b1:12:d6:82:5e:
d6:90:32:cc:0d:3b:14:fc:41:a0:82:e5:dc:97:db:
ba:62:eb:96:06:28:c2:0d:fa:b3:48:df:18:f0:55:
bf:c6:98:e4:cf:f5:be:74:63:21:af:4b:db:ec:cc:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:0E:C5:A4:E8:E6:50:75:8A:6F:45:B4:A6:45:8F:3F:98:32:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A265286AC28411EF9C426190762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.42.0/24
Signature Algorithm: sha256WithRSAEncryption
29:13:3b:43:fc:af:7a:31:b9:77:dd:e2:09:9a:fb:13:2a:f4:
71:23:22:e7:67:3d:c6:ee:46:f3:ab:2c:3b:6c:06:0d:bf:e2:
25:7a:74:71:1d:9e:d0:23:dd:2a:b1:fa:e6:32:9e:1d:30:02:
90:ce:c0:8d:18:69:a7:73:2a:71:c6:bd:43:f6:5a:fb:4b:82:
c2:a4:b5:b7:7b:c1:90:c3:53:ed:f0:e7:96:8a:fa:c8:ef:44:
f5:01:2e:e2:47:73:90:d7:29:94:37:8d:f6:73:33:7d:a2:e9:
39:f3:91:f9:fa:1c:5f:25:4c:9c:49:de:39:0c:fa:2f:47:b7:
9a:aa:e8:bf:22:31:c5:cd:0d:a1:d4:f1:a0:6e:95:46:76:92:
39:08:00:eb:02:27:a7:8a:20:4b:b5:fa:05:06:80:70:ec:05:
fd:98:79:6e:a1:dd:bc:ab:0c:2b:9c:ab:be:fd:ce:3e:f2:f9:
94:6d:fc:a6:de:f7:78:a3:a3:ac:0c:f4:aa:56:f6:f1:cc:98:
f1:25:95:1e:c8:5e:5b:ac:db:21:11:d4:bb:16:3e:b7:9e:d1:
33:9b:7e:4d:f8:1f:61:ee:52:c8:5a:09:d4:23:66:93:f9:91:
87:e4:73:8a:7e:27:0a:8b:14:d1:8a:0e:d6:ab:c9:76:1e:be:
6b:7e:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:53 2025 by rpki-client