Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E35519A8C96311EF92B56AB0762E951A.roa
File: E35519A8C96311EF92B56AB0762E951A.roa (raw, json)
Hash identifier: khryXtGXYlXRs8pwgne3WNRc2OVRAMUcvr3CuSu7b/Y=
Subject key identifier: 19:2F:23:D3:CB:34:E1:84:1A:41:D1:7D:5A:CE:EA:13:A3:44:44:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F47A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E35519A8C96311EF92B56AB0762E951A.roa
Signing time: Thu 02 Jan 2025 23:47:12 +0000
ROA not before: Thu 02 Jan 2025 23:47:09 +0000
ROA not after: Sat 13 Dec 2025 23:47:09 +0000
asID: 984
IP address blocks: 156.226.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62586 (0xf47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 23:47:09 2025 GMT
Not After : Dec 13 23:47:09 2025 GMT
Subject: CN=67772580-406b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:3a:d7:36:91:97:fe:1c:5e:f6:2d:a0:36:
cd:e9:9a:08:74:2b:79:fc:72:3f:b5:cd:30:36:4f:
bd:21:fa:af:21:e1:36:39:7a:15:93:7b:68:70:13:
b0:a6:fb:14:f6:67:58:3b:c9:c9:11:a8:aa:91:44:
ba:dd:fa:9a:f1:3e:fe:1e:fa:b3:3d:dd:4f:00:ac:
32:6c:f9:35:b5:60:37:3d:6b:ad:45:34:54:43:14:
61:87:66:3c:ed:b1:3f:ff:08:0d:10:3b:fc:7b:7c:
c7:ce:1a:aa:51:33:8f:d7:30:05:5d:cc:c6:99:f6:
84:6c:2c:2f:cb:e0:a3:9b:62:3d:54:10:0b:7e:96:
91:b2:39:b4:95:c7:17:6b:3c:89:5c:94:dc:22:49:
02:0b:58:68:f6:c7:2f:aa:78:1a:6f:07:f1:9e:56:
ec:cb:0a:47:67:48:a5:e9:c4:8b:e4:a0:15:ac:5a:
51:18:06:4e:aa:9b:10:fa:3c:0a:a2:ce:35:0d:f7:
4e:9f:c1:c3:25:4e:fc:f5:1b:a4:c7:e2:2d:cc:9b:
46:dc:f3:53:c0:31:ae:68:33:e6:ef:c1:a2:ae:1d:
71:ce:55:ba:53:10:10:f2:45:b0:fd:eb:30:fa:4d:
c9:d8:c0:a3:c4:84:74:a0:4a:ed:d1:46:f6:7e:01:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2F:23:D3:CB:34:E1:84:1A:41:D1:7D:5A:CE:EA:13:A3:44:44:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E35519A8C96311EF92B56AB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.240.0/24
Signature Algorithm: sha256WithRSAEncryption
86:65:15:ee:c9:5d:5d:a7:1a:95:75:37:ac:30:25:c4:2d:3d:
07:71:28:36:26:f2:a7:72:20:f8:c8:a3:99:23:3e:e8:1a:91:
ca:0a:bc:72:7a:71:de:c3:7c:7c:40:2d:f9:23:51:e3:96:b4:
5a:e3:da:a8:e7:0e:ea:ab:e1:ee:28:9e:15:12:f4:ab:f7:e5:
db:5d:61:1c:84:de:d2:de:84:e4:40:44:ab:c5:66:7c:3f:f9:
45:e9:22:f6:54:cf:60:a9:1b:df:aa:19:01:50:b3:5d:ef:c6:
a8:8d:b3:cf:57:6a:8b:d8:3a:7f:08:14:da:18:8a:5a:84:d8:
86:83:cd:c7:83:b8:bf:8a:40:3e:3c:22:3c:6b:b7:b8:78:9e:
fa:b0:e5:10:ed:97:f8:13:05:89:30:08:7c:fd:6f:e0:e8:b3:
ee:4f:3b:36:93:55:04:f9:60:6e:52:02:8c:c2:5c:fe:ac:2f:
57:41:06:d3:65:4c:fc:76:2a:5c:60:82:7a:74:40:27:bf:7f:
94:3c:27:33:e7:c3:2c:65:d2:5f:7f:bc:e8:26:91:92:f0:33:
28:84:c9:e8:0a:d9:7b:07:c1:00:40:e2:2c:e9:67:ad:d6:da:
6c:e0:12:0c:5d:81:44:ac:a2:14:08:98:b0:27:f1:a8:35:93:
8a:ee:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:19 2025 by rpki-client