Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA05A62CCDC911EFAF980CB8762E951A.roa
File: EA05A62CCDC911EFAF980CB8762E951A.roa (raw, json)
Hash identifier: 0vydAF8+LUOQRf1Zs8ygrDPGmQW+9+YKiF058F+VSJc=
Subject key identifier: 68:B6:39:2A:66:2D:5D:E0:6A:64:A5:8D:E7:25:87:39:29:CB:E7:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA05A62CCDC911EFAF980CB8762E951A.roa
Signing time: Wed 08 Jan 2025 14:07:37 +0000
ROA not before: Wed 08 Jan 2025 14:07:34 +0000
ROA not after: Sat 25 Dec 2027 14:07:34 +0000
asID: 17561
IP address blocks: 156.243.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65990 (0x101c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:07:34 2025 GMT
Not After : Dec 25 14:07:34 2027 GMT
Subject: CN=677e86a9-806a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:f0:d3:60:1e:05:88:15:7d:1b:9a:44:cf:
ca:9f:93:52:05:b0:a9:8d:b1:c3:df:7d:68:56:1a:
29:4f:c8:67:7a:33:b6:be:d3:c6:18:b8:e0:4c:f5:
f0:a2:f2:8c:54:6c:05:c1:19:4a:e0:51:08:06:a3:
25:e1:7d:de:33:a7:b1:73:fa:9c:92:77:96:97:60:
b4:65:f3:ca:f4:14:f8:39:24:34:46:bd:01:60:f0:
9c:f0:c1:06:c0:1e:e4:f2:6e:b9:81:9a:49:07:96:
2a:a0:8d:3b:d7:55:04:f0:43:d2:92:2f:63:65:14:
13:02:d4:4a:80:cb:b6:42:f9:a1:33:f5:77:56:47:
55:7b:08:b3:c4:ae:28:f9:54:bb:61:f6:c0:26:c8:
08:e8:df:7f:2e:95:62:7b:ee:00:9f:5d:25:d1:81:
b6:44:c8:85:53:0a:ef:cc:da:f1:08:b0:7a:57:68:
92:19:24:26:4a:fc:5c:66:27:60:dc:d2:dd:9f:d7:
bb:70:76:51:0c:64:cb:06:26:72:05:a2:19:f9:3f:
5c:7d:5f:c2:35:bb:5c:90:0d:e4:47:0f:a8:9b:21:
3c:ee:49:d5:80:f9:25:d6:7d:6b:24:9f:e3:b5:e1:
14:0b:f7:03:c2:30:69:4a:0a:bb:4c:11:43:01:51:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B6:39:2A:66:2D:5D:E0:6A:64:A5:8D:E7:25:87:39:29:CB:E7:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA05A62CCDC911EFAF980CB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:50:e8:a0:fa:5b:7c:1f:ab:86:8f:cf:63:d2:0e:de:2c:54:
c9:6a:3c:4a:39:42:87:53:18:15:86:b7:bf:18:ed:a5:7f:6b:
e0:91:5b:b5:56:ad:58:d8:f3:cb:73:65:c1:de:35:b1:ef:cd:
5d:2a:ab:27:b7:fa:aa:b3:a1:db:02:2b:68:71:7a:a2:7f:06:
37:ac:d5:7c:96:df:30:3c:e6:44:fe:77:80:0d:b3:8f:f8:c1:
83:47:97:1e:53:4c:e3:bb:f4:50:cc:5e:49:88:3d:6d:b4:1a:
ae:42:0d:d3:e6:c4:92:ed:a6:60:32:af:30:ec:14:a5:c3:88:
f5:60:4e:46:2a:e8:7b:c6:29:9d:86:e5:06:f4:a3:9a:31:7a:
3d:e1:52:df:5e:fd:0d:bb:fb:91:fa:ea:f5:93:be:d7:e0:8a:
52:5e:8c:a8:d4:7b:95:80:b0:69:9a:31:8e:44:96:4d:76:49:
73:ab:bf:9b:93:20:df:df:1c:ae:23:37:45:12:c4:c2:5e:f6:
44:81:c7:de:44:5e:57:c8:e6:53:fb:7c:86:a1:3e:5d:a8:df:
cb:34:ba:23:3e:50:e7:13:6c:94:ab:d2:7a:8e:04:f0:1c:cb:
79:fd:be:d8:f0:43:4e:be:18:5c:8b:70:45:e5:34:6c:7c:7f:
34:fd:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:37 2025 by rpki-client