Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE7DDDF2C32611EFA9AE0382762E951A.roa
File: AE7DDDF2C32611EFA9AE0382762E951A.roa (raw, json)
Hash identifier: JOIPPgB3rPqu+SJ5xOjoFI8MaBCS6+5zmEX7BIjMrSg=
Subject key identifier: A2:36:59:9C:16:C5:0F:64:61:F4:D8:F2:08:83:29:4E:BE:88:2F:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE7DDDF2C32611EFA9AE0382762E951A.roa
Signing time: Thu 26 Dec 2024 01:13:58 +0000
ROA not before: Thu 26 Dec 2024 01:13:54 +0000
ROA not after: Fri 10 Dec 2027 01:13:54 +0000
asID: 17561
IP address blocks: 156.243.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60049 (0xea91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:13:54 2024 GMT
Not After : Dec 10 01:13:54 2027 GMT
Subject: CN=676cadd6-c8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:59:8d:2f:df:d5:76:dc:e7:67:65:ec:c6:6d:
c6:42:86:77:bc:38:06:84:07:1a:a5:77:3f:2a:4e:
d2:d1:51:7f:f4:ea:69:39:09:da:59:c7:e4:70:f5:
f7:1c:6c:05:4a:df:fe:dc:82:9e:16:3c:fd:cc:e6:
54:6d:63:8f:d3:5f:58:51:6d:09:df:38:4e:be:2b:
d4:47:81:17:e4:57:1b:f9:7f:0a:03:8d:f1:68:ec:
47:26:a4:9d:4b:01:32:7d:24:19:ca:c6:49:49:f7:
96:c1:c4:d1:a0:07:75:f0:68:9a:8b:68:9e:11:62:
1d:ef:69:30:70:ea:e5:c8:18:1e:8b:e2:05:4b:6f:
7c:26:aa:9e:a5:f4:4b:03:f3:12:8b:5f:1f:40:5f:
5a:fe:58:b0:98:9a:17:55:06:ca:db:c0:2e:8a:9f:
bc:9f:5b:58:83:84:f5:c4:19:59:26:64:c7:44:93:
29:d9:8d:43:61:f0:35:0e:3b:fb:9e:b5:d3:56:04:
9d:51:ed:62:80:35:c2:37:9d:33:ce:f3:59:4a:ef:
b2:fc:59:e9:6c:b5:9e:12:16:7f:3c:1e:81:f8:34:
c5:a7:40:12:1b:bf:2e:8d:9b:6e:72:aa:45:32:f3:
c1:f8:29:b9:f9:a1:3d:14:a6:86:43:dd:8b:73:34:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:59:9C:16:C5:0F:64:61:F4:D8:F2:08:83:29:4E:BE:88:2F:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE7DDDF2C32611EFA9AE0382762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.136.0/24
Signature Algorithm: sha256WithRSAEncryption
15:06:2e:b9:09:27:8f:2b:f7:0a:45:18:16:08:d5:40:b5:e7:
98:9d:e3:55:f5:cf:77:a2:95:fc:3a:1f:6d:73:58:6f:49:50:
14:e4:e2:e7:64:cf:fe:04:15:d1:8b:45:ff:03:6d:b3:26:74:
95:33:67:16:23:10:47:8e:c3:09:d5:ce:fb:e2:da:df:5d:3b:
0b:8f:94:cf:5c:de:26:3d:2e:4c:a9:12:c6:f7:e5:a0:24:53:
9c:1f:66:a3:62:79:e3:48:7c:57:83:ce:9a:c6:56:81:5f:c2:
6c:fd:1c:bb:53:3e:a5:a3:11:1d:de:11:da:ca:fb:6d:36:16:
53:e6:67:d8:f0:8d:23:29:1e:38:8e:22:67:68:2c:42:41:f1:
ba:5d:06:8d:12:cc:ea:38:8e:29:2a:fe:91:d7:42:38:6a:95:
7f:bf:b5:24:7c:41:21:8a:c7:ea:22:f9:d3:30:4e:ef:78:dd:
9f:2f:75:23:ec:ce:36:59:0d:3a:26:28:cb:4c:b8:61:7f:54:
9c:7c:77:e5:04:90:71:cb:b0:84:6e:e3:06:f5:72:c8:33:0a:
3d:96:13:4d:fa:4e:4d:46:76:74:97:e7:13:75:7e:67:2e:f6:
72:09:80:3c:22:1d:99:16:63:fb:89:35:7e:37:9c:b8:61:35:
e6:e5:f0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:04 2025 by rpki-client