Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD222D18CCE911EF845C369E762E951A.roa
File: CD222D18CCE911EF845C369E762E951A.roa (raw, json)
Hash identifier: 2jhPQBOy+gNwC2rf2yl2elLh+rJwO+6VluxGbQX+Zm8=
Subject key identifier: 00:B8:51:BB:6B:8D:4A:8E:FB:F8:43:50:E9:70:21:49:4E:48:69:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD222D18CCE911EF845C369E762E951A.roa
Signing time: Tue 07 Jan 2025 11:23:21 +0000
ROA not before: Tue 07 Jan 2025 11:23:18 +0000
ROA not after: Sat 13 Dec 2025 11:23:18 +0000
asID: 984
IP address blocks: 156.235.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64495 (0xfbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 11:23:18 2025 GMT
Not After : Dec 13 11:23:18 2025 GMT
Subject: CN=677d0ea9-c1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:00:ea:48:ba:48:01:93:fb:f4:12:1c:0e:
15:60:bf:4d:f0:b1:a8:25:c0:96:3b:83:ec:dd:c8:
c0:89:1d:9e:e0:c0:4e:72:d4:e4:27:e3:f8:06:25:
67:58:b5:41:0f:d7:b3:56:69:74:81:8d:e5:21:d9:
fb:2e:25:18:9e:3a:cf:12:55:2c:ea:05:8c:f7:68:
1d:ce:0c:8c:7e:1c:c8:e2:57:fa:ae:86:22:8b:54:
49:1a:64:19:9e:b8:c9:54:70:e9:24:35:81:57:fb:
bd:5a:cc:3b:cb:fb:d5:0e:3e:4d:b0:4b:68:c5:bd:
51:5c:45:3e:5a:3e:c2:a9:8b:a9:2f:5d:22:6a:97:
cd:5b:c8:10:3a:09:47:8c:c7:60:64:ad:35:0f:da:
6e:13:a8:38:70:0c:ad:28:fb:4e:63:e3:b4:e2:51:
32:e8:8d:0b:10:c0:1c:78:51:64:9b:8b:12:ab:9d:
e4:f1:72:a8:b8:57:62:f2:f6:70:89:aa:dd:fc:3e:
4c:e4:53:2e:4f:2d:af:5b:46:64:57:be:e1:99:0c:
96:7d:c4:1c:d1:e1:90:ca:ce:8d:f1:74:5b:ca:dd:
03:57:5c:39:a1:04:09:50:8d:15:b3:f6:dc:fc:3e:
27:8d:99:49:4e:4a:e2:76:fb:20:0a:dc:f1:0e:56:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:51:BB:6B:8D:4A:8E:FB:F8:43:50:E9:70:21:49:4E:48:69:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD222D18CCE911EF845C369E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.126.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4a:d2:fb:bd:d1:8e:04:8a:38:04:c9:1a:e9:28:44:2a:0b:
5b:b3:89:e4:d5:ff:fd:0a:48:12:18:91:72:63:f1:e7:44:d7:
dc:7c:a4:15:2e:df:39:9c:43:d2:87:62:88:f8:6d:19:84:8e:
c3:73:51:98:17:7d:6c:69:cf:30:80:77:01:08:35:6e:0b:cb:
d6:45:d6:f7:96:5b:cc:1a:c4:e5:31:c8:53:aa:33:86:23:c8:
7a:44:e6:1a:f5:14:f8:45:1e:f0:ce:5a:16:80:7b:b9:e7:01:
a4:c4:2c:3d:2e:e2:b7:eb:9f:9c:88:b0:ff:26:08:e4:ae:86:
72:3e:17:3e:b1:69:19:20:74:36:bc:31:8f:5f:a7:15:6b:5f:
80:99:ca:87:25:1d:06:d3:9a:cd:24:a5:d1:f5:42:d2:dd:5a:
f2:65:b1:2f:c3:50:26:b8:f6:34:08:02:8c:c2:77:5f:6a:56:
fc:ae:fe:2e:b1:53:0c:9f:ee:18:02:f5:4f:c1:a0:a7:af:30:
ee:c3:c0:65:61:ee:7a:c7:e8:66:cc:f0:3f:44:78:4a:2f:9a:
f1:e4:1d:33:84:ee:a5:05:32:fe:84:58:6d:d1:63:d9:77:90:
bd:8a:fb:c6:e5:bb:3e:90:17:ee:1f:b3:d1:48:7f:8e:fb:10:
2a:9a:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:51 2025 by rpki-client