Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE7C13ECCA011EFBF41074B762E951A.roa
File: AAE7C13ECCA011EFBF41074B762E951A.roa (raw, json)
Hash identifier: lSCFQrameQsOQL9Zq3pwLjotD2cRpaJN7KkVP2ePkDE=
Subject key identifier: BB:80:DF:61:50:62:8F:B8:F4:1A:2F:15:D2:76:04:2E:C5:72:C6:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F990
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE7C13ECCA011EFBF41074B762E951A.roa
Signing time: Tue 07 Jan 2025 02:39:51 +0000
ROA not before: Tue 07 Jan 2025 02:39:47 +0000
ROA not after: Mon 13 Dec 2027 02:39:47 +0000
asID: 17561
IP address blocks: 156.227.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63888 (0xf990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 02:39:47 2025 GMT
Not After : Dec 13 02:39:47 2027 GMT
Subject: CN=677c93f6-5082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:e6:35:e0:86:e8:44:48:39:92:c8:37:8f:
ab:e4:46:96:e1:26:be:4b:e8:31:15:64:4a:89:52:
1f:41:b7:c9:c8:ca:9c:a8:61:0f:33:81:56:9f:8f:
d9:09:06:7b:27:94:c5:fb:28:ea:ea:f0:29:3b:28:
d5:78:47:86:ff:e7:69:38:27:aa:0c:6d:42:3c:8f:
a2:98:66:7f:64:f6:b6:ff:22:50:19:4e:ad:c1:0e:
5c:75:2e:6d:0b:19:00:3d:8a:b5:6b:c5:ea:74:5d:
c1:d2:21:fe:59:0a:92:77:46:f5:3b:76:0a:3c:82:
c1:fb:c5:36:d1:16:d7:fc:ee:fe:26:58:df:2c:19:
2d:71:12:04:cd:42:4a:5c:34:4d:54:4f:ef:51:b8:
c4:8a:a7:0f:d6:cd:47:e0:25:5d:e4:d1:a7:53:03:
9d:11:02:da:9d:b8:fa:f1:25:c9:88:25:11:e4:20:
55:87:76:76:80:54:6c:30:b1:58:11:2a:cb:43:56:
db:f2:c6:00:0d:8a:d1:22:fa:91:c1:88:ef:88:16:
a8:15:3a:9b:9f:09:bb:e5:40:d3:6f:f8:dc:76:57:
1a:78:28:17:26:2b:fa:f3:ef:59:67:96:f9:b9:84:
27:e9:99:90:ac:a6:71:79:10:2d:41:59:a0:51:67:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:DF:61:50:62:8F:B8:F4:1A:2F:15:D2:76:04:2E:C5:72:C6:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE7C13ECCA011EFBF41074B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.126.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b9:5a:9b:cf:1e:de:2c:07:d9:fe:35:14:36:5c:45:30:5b:
b1:d4:ff:7a:a7:39:f7:13:9b:a7:cc:e3:4e:f0:72:d4:47:06:
8f:53:51:62:41:d8:4d:c9:6f:3d:4b:88:2a:56:4d:fa:72:85:
9e:03:bc:36:85:f9:9c:24:b6:4c:11:6e:d4:b7:40:82:c0:bb:
40:5c:65:da:12:92:da:af:20:62:d7:1c:d3:84:c5:9d:f6:47:
34:9b:60:f7:bf:91:17:f8:52:00:8b:a3:9f:b5:88:11:4f:2f:
21:34:75:d4:38:96:7a:fa:88:30:c3:62:7c:c4:f9:fe:ad:b5:
44:d9:75:bc:54:44:c8:21:0f:22:f9:f2:42:7b:55:a3:70:17:
15:b2:3f:09:90:d2:c4:3c:7a:44:4e:14:56:d4:67:00:cf:cc:
19:7b:20:90:16:df:b5:b3:c0:7c:d3:9d:68:84:47:33:b6:c1:
85:31:19:52:1c:01:d8:40:33:ed:63:9b:4c:1b:af:9a:a5:2b:
37:93:c2:40:8b:78:56:1e:73:84:21:04:9f:c1:11:3d:20:11:
08:ad:a8:79:fa:c0:c8:bf:63:3c:a9:60:e4:a6:cb:4d:cd:40:
70:50:73:fd:32:75:62:da:c3:e5:22:cc:1e:8b:c2:79:d0:89:
79:84:ca:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:26 2025 by rpki-client