Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E766D912C27B11EFB24BF15A762E951A.roa
File: E766D912C27B11EFB24BF15A762E951A.roa (raw, json)
Hash identifier: DwHR0rRXuxODTPBjzFWDxKeg9YiktoynBKeFX8yuTzQ=
Subject key identifier: 91:A9:67:E7:42:A3:84:A7:7B:BE:CE:B9:67:F6:6A:A3:FF:5B:70:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E766D912C27B11EFB24BF15A762E951A.roa
Signing time: Wed 25 Dec 2024 04:51:29 +0000
ROA not before: Wed 25 Dec 2024 04:51:25 +0000
ROA not after: Wed 10 Dec 2025 04:51:25 +0000
asID: 984
IP address blocks: 156.227.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59561 (0xe8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 04:51:25 2024 GMT
Not After : Dec 10 04:51:25 2025 GMT
Subject: CN=676b8f51-44f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:56:e1:21:20:71:74:27:75:41:81:b2:87:
40:6d:17:73:b9:d5:1e:74:be:0d:9c:e5:7a:c1:b8:
ff:4a:4b:95:9e:c1:c6:33:55:45:1d:c5:3d:76:72:
e1:a1:10:4e:c4:2e:e8:92:ce:a0:be:e2:fd:ab:aa:
68:74:08:79:ef:69:7b:ba:7d:27:27:7a:c8:9b:1e:
c8:6d:7e:c9:c7:60:81:f2:24:72:15:f8:96:52:23:
40:4b:17:99:2b:ee:09:88:a5:15:b6:a9:fd:3c:09:
3e:dc:15:39:50:af:66:db:52:5f:3b:87:b7:2c:64:
5f:c8:b0:f1:d3:d0:d9:a9:f4:71:52:aa:16:e1:92:
78:9e:e5:2c:30:64:d8:d6:da:f7:55:42:b1:b3:28:
99:d1:28:03:b7:bc:4d:c9:ad:3e:91:44:da:a1:e9:
aa:fe:de:81:8d:f6:68:07:71:e5:4f:13:d9:d1:cc:
dc:41:c0:5b:e7:be:d8:82:99:f7:db:dd:a6:94:41:
e6:de:8a:b0:4a:a1:1a:ad:84:60:4d:ff:8f:1b:f8:
be:08:9c:9a:ab:42:54:a5:1d:29:b0:a6:91:f4:df:
6a:df:f8:c4:bd:e3:7b:60:bc:cf:ba:e9:4f:a5:35:
2e:83:7c:5a:32:b2:f2:39:52:78:bf:e9:26:d7:b3:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A9:67:E7:42:A3:84:A7:7B:BE:CE:B9:67:F6:6A:A3:FF:5B:70:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E766D912C27B11EFB24BF15A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.166.0/24
Signature Algorithm: sha256WithRSAEncryption
08:10:03:3c:90:42:18:12:a1:09:53:b3:e5:8c:42:7c:d8:7b:
27:41:2f:37:54:30:cf:28:92:ca:af:55:ff:2a:20:21:6e:41:
82:43:b9:ab:e5:50:12:69:de:fd:17:65:0d:de:4d:c0:93:9f:
c4:c5:43:59:57:0d:ea:32:5a:a3:ac:f8:08:55:98:b1:c6:8f:
0f:e6:6b:d3:66:59:46:e9:5d:f2:5f:30:ef:9b:3b:c4:0c:ca:
87:fa:62:6a:d6:77:27:89:dc:1d:af:79:82:c7:2f:2a:7a:a1:
52:ce:16:26:cd:bd:63:69:d8:c7:cd:c5:93:3d:c7:91:d5:25:
d7:19:3b:cd:bb:aa:2d:b0:79:46:05:b7:ab:f6:2a:54:a6:34:
20:9f:c7:fa:51:19:4c:01:7f:a5:b3:aa:a6:a3:58:fa:78:30:
47:cf:9c:5a:52:e8:2e:91:0b:54:86:26:73:4c:8b:22:ac:85:
42:1d:65:c3:0b:d1:26:7e:4a:c0:5c:c2:1d:c7:d0:73:e9:3e:
42:3a:8a:ae:f1:cb:be:8e:af:12:f7:0c:56:b5:99:18:54:ef:
fa:ba:3f:83:2f:1a:ec:4f:7d:57:b5:47:b0:a4:c6:79:6d:56:
90:2d:ee:ed:23:cc:37:af:ea:25:cb:fe:27:31:6f:5b:c9:d7:
8f:d5:09:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:09 2025 by rpki-client