Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E69644C27E11EFB18D0E6C762E951A.roa
File: A2E69644C27E11EFB18D0E6C762E951A.roa (raw, json)
Hash identifier: uuw7RK9nRdpnpvBA6SThg6n6BUrRBfPeXfTp2NO+Vew=
Subject key identifier: FC:FD:13:54:81:EA:A6:BC:50:42:E9:5F:01:88:E0:21:23:90:22:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E69644C27E11EFB18D0E6C762E951A.roa
Signing time: Wed 25 Dec 2024 05:11:03 +0000
ROA not before: Wed 25 Dec 2024 05:10:59 +0000
ROA not after: Wed 10 Dec 2025 05:10:59 +0000
asID: 984
IP address blocks: 156.227.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59595 (0xe8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:10:59 2024 GMT
Not After : Dec 10 05:10:59 2025 GMT
Subject: CN=676b93e7-297d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:94:79:ac:c7:b3:6c:e2:c4:e7:28:d3:51:
1b:8d:6a:b9:86:b2:0f:b1:be:5b:8f:b0:9c:47:a1:
98:4d:44:e7:c6:4d:62:9e:33:2a:65:05:91:35:dc:
00:53:a1:32:27:cc:8f:33:24:eb:d0:6a:8e:0e:65:
e5:23:08:5e:a4:68:46:d2:32:e4:b2:28:b3:4f:3f:
7b:c1:ee:44:47:43:70:47:ea:3f:a5:21:ac:43:aa:
ce:b4:f8:04:57:e9:b6:e9:f2:b5:8d:7b:fd:aa:52:
78:47:69:7c:bf:da:9e:d5:84:f7:0f:aa:a6:46:1a:
5e:37:4e:c3:80:e3:4f:06:c7:8d:e1:40:d2:d2:1c:
23:c3:74:4b:1d:65:72:d8:ed:73:d0:59:62:fd:17:
a2:af:39:18:fe:9a:31:11:a5:e1:01:15:85:e1:74:
3c:3f:01:87:39:74:11:4a:06:59:56:d3:2d:ec:6f:
36:d3:d1:39:a3:b1:a0:e3:06:a0:ed:eb:d9:a6:4d:
17:50:b8:62:9e:4b:63:1f:0f:fd:4c:1f:53:0d:d1:
b6:f0:1f:53:60:90:47:b2:78:35:42:8b:ab:66:bc:
e7:f0:2f:77:83:12:c5:aa:79:d4:d6:c4:cb:b0:7b:
ec:b4:2c:fc:fb:be:bc:4a:24:44:d5:59:87:cc:2e:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FD:13:54:81:EA:A6:BC:50:42:E9:5F:01:88:E0:21:23:90:22:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E69644C27E11EFB18D0E6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.183.0/24
Signature Algorithm: sha256WithRSAEncryption
49:10:a7:8a:ec:9a:82:ae:a8:eb:45:96:24:56:ab:71:3b:16:
49:2f:b0:79:2d:38:fc:af:06:a6:68:e4:54:eb:3c:c7:a2:bf:
9c:85:26:03:f0:04:c2:5b:3a:74:64:11:db:8b:e9:a7:cb:50:
d8:a8:33:74:98:5e:e3:7b:b7:b6:89:48:7e:c7:9a:a2:68:f9:
31:68:db:ee:8d:0a:9b:ed:69:23:4a:5e:d1:6b:c3:77:6e:1d:
bd:77:81:14:46:45:c6:e8:8b:10:36:aa:39:a7:6f:8f:d4:72:
02:6b:e3:7b:a2:16:f4:e9:3d:c7:f6:b8:53:52:1e:94:1d:b6:
4e:2c:7d:3b:41:a8:97:7a:b8:28:bb:54:e9:ff:5e:2e:16:74:
ee:39:76:a4:42:d3:e9:b4:9e:e7:68:ab:f1:42:35:22:f5:ff:
8f:54:55:a5:0f:a2:77:aa:9d:98:e5:4a:fc:71:ec:d2:ec:fc:
79:b6:d9:4d:ad:31:59:9e:12:73:ac:51:7e:e7:4f:33:fb:1a:
d2:3b:29:ab:6d:3f:11:91:c5:48:b3:5f:c8:9b:02:c1:bd:74:
7d:79:a5:b1:27:f9:58:4a:c0:9f:d5:eb:12:fb:49:e1:24:20:
4c:1e:27:35:f3:ac:24:a4:95:a2:d5:dc:d0:ce:ac:50:94:a6:
34:e8:07:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:17 2025 by rpki-client