Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2CB05FCCD2C11EF98F73F44762E951A.roa
File: E2CB05FCCD2C11EF98F73F44762E951A.roa (raw, json)
Hash identifier: Dpnopilmud4fAMIISOhGVxEpOlhFTvQK0oUBgO196U0=
Subject key identifier: DA:F0:5B:9D:AC:72:90:A8:78:9F:E2:19:C4:C7:0B:17:1A:A4:8F:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2CB05FCCD2C11EF98F73F44762E951A.roa
Signing time: Tue 07 Jan 2025 19:23:34 +0000
ROA not before: Tue 07 Jan 2025 19:23:30 +0000
ROA not after: Mon 13 Dec 2027 19:23:30 +0000
asID: 17561
IP address blocks: 156.241.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64977 (0xfdd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 19:23:30 2025 GMT
Not After : Dec 13 19:23:30 2027 GMT
Subject: CN=677d7f36-4996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:80:07:3a:83:6e:eb:8d:bb:d6:be:d3:48:
76:4c:4f:4c:84:5e:01:05:54:f2:8c:01:0c:fc:26:
b0:16:87:58:9f:eb:06:14:41:4d:dd:71:b4:c0:a5:
11:82:cd:9f:a9:ce:ca:cc:72:d6:30:ee:67:c2:9a:
53:92:5c:e7:21:a3:45:d8:28:03:a5:ea:c2:a1:97:
86:6f:f1:53:95:cd:77:65:77:40:ab:ae:ff:47:3e:
bb:34:22:f9:8e:ad:86:79:91:93:f1:c4:cc:53:e9:
a3:e9:84:ad:77:41:f1:be:f7:5c:a4:0b:ba:7f:d0:
8a:13:87:fe:1b:49:a8:89:45:68:52:00:f0:7c:90:
75:8a:ce:06:90:9a:fa:5b:d2:e5:50:ac:bb:20:f8:
25:f3:b2:51:e7:fd:6c:ad:12:2e:d7:65:6d:43:56:
d4:68:24:17:3f:42:45:a0:e8:f8:d6:f4:cf:ca:28:
04:63:9f:88:ba:ed:94:65:a6:84:3f:aa:df:c5:17:
1f:7d:35:18:48:30:4f:e6:82:47:5e:20:30:0a:d7:
59:a8:b6:36:90:9b:07:3b:cd:07:05:ed:a4:6b:f8:
01:ad:2b:4b:84:a5:11:ea:42:56:25:82:5d:77:f4:
62:31:52:85:f7:ba:1d:e9:3c:0d:2b:d8:3a:05:23:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:5B:9D:AC:72:90:A8:78:9F:E2:19:C4:C7:0B:17:1A:A4:8F:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2CB05FCCD2C11EF98F73F44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.246.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c7:8b:7f:f9:bb:85:42:d1:ab:e5:a8:35:16:7d:8e:85:16:
de:5f:34:dc:33:52:5a:9b:39:fd:df:d1:1f:e6:db:df:a4:5c:
5c:03:1d:87:97:93:2b:2e:de:f9:3a:02:76:82:3d:bd:f9:c7:
9b:6c:57:0b:3d:eb:c2:3f:ac:84:9a:aa:73:db:ea:bb:45:2e:
a1:96:f1:65:fd:ce:ad:fa:c3:66:b1:df:60:ec:67:b8:70:5a:
d1:af:1d:b5:63:77:f1:be:3e:3a:a8:72:bb:17:51:15:98:a2:
c6:75:aa:f1:65:c8:3e:c7:a7:20:79:b6:79:9d:4b:27:8a:41:
9c:08:ab:6d:eb:6f:f6:67:f3:5a:69:fa:90:88:28:67:1c:77:
7b:f7:34:cf:07:6a:5c:09:27:b0:02:4a:69:df:f1:ba:9c:1b:
75:61:f7:13:87:b8:79:54:d0:0f:b1:6f:c4:7d:3d:04:c3:32:
45:f6:49:df:2c:eb:eb:11:2a:bb:08:87:07:31:c3:12:0b:72:
80:15:e1:02:75:5c:49:9a:09:a2:d4:5c:8c:6c:a0:93:79:be:
fe:2e:70:01:11:bb:ab:f2:b4:94:55:73:6b:2f:43:c1:5e:08:
27:0d:78:7c:3f:2f:4b:08:a0:f9:06:09:0b:0b:fe:ca:41:e8:
38:24:ea:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:29 2025 by rpki-client