Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB0ECBFCBEAB11EF856F72B8762E951A.roa
File: EB0ECBFCBEAB11EF856F72B8762E951A.roa (raw, json)
Hash identifier: GGfR8Itw+mZDXuYKxDcS1vFJTLAigw9GTHE0R2q9Bhs=
Subject key identifier: C0:53:F9:F2:6B:EE:1D:9A:DB:32:D9:EA:D6:FA:D4:F3:AC:E8:A6:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E721
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB0ECBFCBEAB11EF856F72B8762E951A.roa
Signing time: Fri 20 Dec 2024 08:25:06 +0000
ROA not before: Fri 20 Dec 2024 08:25:03 +0000
ROA not after: Sun 23 Mar 2025 08:25:03 +0000
asID: 328608
IP address blocks: 156.229.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59169 (0xe721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:25:03 2024 GMT
Not After : Mar 23 08:25:03 2025 GMT
Subject: CN=676529e2-afbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:a8:5b:01:df:e8:52:d3:f9:0a:c7:e2:76:
9d:64:2c:33:8f:4c:c7:29:2b:fb:96:00:cf:c9:ad:
25:92:fa:32:b8:6e:50:07:39:e9:ea:f4:14:06:a2:
1a:38:ce:80:01:8e:fa:5c:8e:a6:c1:2b:51:bd:58:
79:c8:15:86:62:fa:9f:f1:9b:a8:38:74:f5:87:28:
95:2a:2e:66:c6:21:50:7e:ed:d9:01:15:eb:97:f8:
52:3f:ef:1c:91:0e:7d:4c:7f:96:bf:d0:d7:77:c3:
87:c8:46:e3:ed:7c:45:c0:37:08:79:60:9d:f3:13:
15:89:2a:25:06:c4:a8:40:54:76:92:48:ef:c3:a9:
fb:31:69:79:7e:8e:b6:f3:93:41:61:6f:c2:75:1f:
f4:69:ea:7b:67:36:d3:bd:0e:df:ad:27:db:b9:33:
0b:54:b3:0a:6c:3d:46:6b:c2:51:26:4c:01:0f:0b:
c8:20:b0:6d:5d:ff:29:38:8e:ee:b0:f2:b6:9c:fe:
8c:53:52:ee:6e:11:a1:95:3e:d6:0f:30:bd:57:77:
5b:2b:9f:e8:a7:67:18:2c:d1:89:91:fa:31:15:7e:
22:51:43:cd:11:d9:88:33:79:bf:0d:56:95:8f:2d:
b9:71:67:22:75:c3:82:4e:59:d2:e2:85:56:07:2e:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:F9:F2:6B:EE:1D:9A:DB:32:D9:EA:D6:FA:D4:F3:AC:E8:A6:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB0ECBFCBEAB11EF856F72B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.96.0/22
Signature Algorithm: sha256WithRSAEncryption
56:f0:9b:9c:23:80:f5:28:56:64:3f:f5:55:06:c8:67:d1:72:
46:df:e5:b5:ee:3e:18:98:f4:5e:fd:34:91:26:ec:59:da:19:
6a:74:38:ac:dc:54:e9:20:e3:09:aa:68:96:c9:96:23:99:33:
80:7f:95:2d:c3:b3:de:15:e3:48:fe:65:88:d7:8d:71:f7:8d:
b6:86:69:35:42:05:36:ca:6d:8a:54:35:89:55:de:83:20:78:
3d:0e:5b:9b:a9:d8:27:92:b8:75:21:8a:ac:67:4e:13:c1:1b:
cc:f8:43:74:dc:d7:4a:9e:07:ac:5e:22:2f:28:f0:6d:95:47:
95:21:06:ab:c4:46:ba:fd:f5:8a:21:c1:a1:38:e8:5c:01:bd:
a4:0d:26:a4:c5:3d:ce:58:57:48:4b:a7:b3:ca:ee:d8:23:15:
00:5e:eb:47:16:8f:cf:85:be:e4:7c:c8:92:32:d9:84:f9:43:
61:9b:21:96:32:c8:6d:63:33:94:63:69:5a:77:59:ef:08:de:
e1:2c:90:78:3a:91:93:df:aa:4c:3f:c9:8b:ae:2b:b0:18:d5:
81:6b:99:10:f2:d0:4d:c0:d1:9e:19:bc:07:03:6e:b0:80:ad:
00:76:b6:7a:1e:7d:26:30:d0:63:52:e9:94:c2:2b:cb:21:66:
da:48:22:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:24 2025 by rpki-client