Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E37F426CC1C711EFAE7AB34F762E951A.roa
File: E37F426CC1C711EFAE7AB34F762E951A.roa (raw, json)
Hash identifier: TQ2AXXUs5rJeOfMY9DITUbGDaH+M8EJz9/gkbpYxLSc=
Subject key identifier: 06:08:A3:49:30:A0:F3:0A:07:C4:1E:64:1B:4B:25:DB:56:A5:83:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E873
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E37F426CC1C711EFAE7AB34F762E951A.roa
Signing time: Tue 24 Dec 2024 07:22:53 +0000
ROA not before: Tue 24 Dec 2024 07:22:50 +0000
ROA not after: Mon 30 Jun 2025 07:22:50 +0000
asID: 216050
IP address blocks: 156.232.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59507 (0xe873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 24 07:22:50 2024 GMT
Not After : Jun 30 07:22:50 2025 GMT
Subject: CN=676a614d-d54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:ef:c0:32:48:4b:d2:1e:1b:47:5c:02:44:
4a:c1:f2:a1:1e:79:33:88:c8:43:81:42:99:c3:5c:
62:07:0e:55:00:ce:d0:60:13:21:94:6a:46:36:e1:
e4:78:9b:64:cf:24:e3:7a:ce:85:61:94:09:69:4e:
57:d4:e5:c0:6c:f6:a8:b7:a6:57:ba:f4:64:23:56:
06:79:91:d6:12:ed:7e:da:85:cb:8e:6f:28:2d:bb:
46:4a:5a:f1:83:6a:29:90:9d:dc:96:58:f2:3f:ec:
00:01:64:ba:93:86:da:f9:08:14:02:30:a4:09:0b:
51:f0:30:72:d8:9f:f3:b2:fc:66:8d:c4:00:ae:a2:
02:98:f4:ff:1e:52:86:91:5d:c7:a6:2e:48:b4:24:
c2:9f:93:6c:2d:c1:df:c9:1c:4f:be:de:51:0c:3b:
27:4f:f1:ef:4e:a7:f3:7e:30:40:22:ff:b6:99:d0:
76:ac:0e:39:ca:91:34:94:44:c4:d1:3c:93:05:46:
5d:9d:2c:7f:ee:f7:ae:11:ed:40:13:06:be:55:9c:
50:6e:ca:d4:9b:11:20:b2:49:63:7b:5a:dd:9d:30:
d0:71:e6:9b:18:6f:25:64:ca:37:a1:58:cc:2d:fc:
47:1c:f3:a6:f9:5f:e5:db:c4:17:a9:b9:5a:25:44:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:A3:49:30:A0:F3:0A:07:C4:1E:64:1B:4B:25:DB:56:A5:83:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E37F426CC1C711EFAE7AB34F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.90.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:ad:a8:69:e9:52:ee:02:da:3e:48:54:4d:9c:de:e3:7d:c1:
7b:d6:68:b3:bf:ed:d7:41:10:49:54:98:f4:64:0c:83:74:92:
b1:5e:77:ab:38:ca:f3:7a:e1:01:e6:e4:78:82:d2:52:e4:ae:
f5:09:00:6e:3d:c4:1c:60:dc:0e:9f:13:86:bc:db:9d:41:87:
40:da:4d:66:13:15:f0:f3:c9:1c:0f:1f:bc:f8:5f:36:85:bb:
36:1b:30:9f:c2:04:dd:ec:35:f8:91:c0:fd:d4:05:73:33:36:
20:59:f1:15:0d:c1:62:a1:22:a5:e7:81:0f:e4:d6:9b:2d:93:
a2:96:ba:70:86:17:33:47:e1:99:08:91:ca:f8:b8:d8:83:a9:
43:fe:9c:75:b0:f7:dc:04:72:3c:d9:2e:c0:9d:0b:d4:9a:32:
46:54:e0:55:cc:12:52:ef:97:91:f1:2a:51:4f:5d:0f:77:47:
b7:d7:22:c6:6b:3b:55:28:87:c0:71:13:24:fd:52:77:cf:8b:
8d:11:11:00:e8:63:b2:01:d9:a7:56:bb:70:7f:2a:91:60:a0:
c5:23:78:43:fa:75:6c:4f:5f:78:89:8b:b9:7f:eb:a4:5b:1d:
5e:69:2c:b3:f4:6f:13:7b:8e:83:f3:0b:29:4f:36:fa:af:d2:
87:9e:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:04 2025 by rpki-client