Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2496E4CD1011EF8CC5E893762E951A.roa
File: EB2496E4CD1011EF8CC5E893762E951A.roa (raw, json)
Hash identifier: cE9RyKOBfx5vVm2NonPl6GTWE9UU9BSnjqckcH+v9vc=
Subject key identifier: 23:CE:61:32:15:46:17:29:66:B7:4E:B2:3D:4C:8C:53:21:65:48:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2496E4CD1011EF8CC5E893762E951A.roa
Signing time: Tue 07 Jan 2025 16:03:22 +0000
ROA not before: Tue 07 Jan 2025 16:03:18 +0000
ROA not after: Mon 13 Dec 2027 16:03:18 +0000
asID: 17561
IP address blocks: 156.239.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64753 (0xfcf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 16:03:18 2025 GMT
Not After : Dec 13 16:03:18 2027 GMT
Subject: CN=677d504a-bfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:5a:7f:5f:74:f7:23:f6:c3:be:3e:41:de:
34:6e:b4:63:76:6b:94:6b:a9:5f:6c:42:1f:29:28:
d5:8e:bf:e7:7e:62:62:f6:fb:cc:0f:27:f6:c1:21:
f4:4f:56:11:ec:a9:2a:a7:54:a8:d6:e4:83:f2:9f:
d9:61:70:a1:57:f8:a3:ed:0f:ad:dc:5f:4f:e5:65:
5a:cd:f3:40:97:a4:ee:98:fd:74:c4:07:58:67:c2:
9b:d3:8c:85:a8:9a:e2:41:6c:1e:1b:6b:df:ce:68:
35:da:6e:43:d9:7a:f3:86:95:78:94:03:f2:b8:d8:
12:56:e1:9d:14:a7:a0:68:e1:c2:6b:a0:1f:98:f0:
18:0e:2c:d4:a7:25:57:2a:11:e4:59:74:54:f2:62:
7d:79:88:0d:ba:84:1c:2e:e3:f1:ac:c9:fa:a5:fb:
88:fe:35:da:8a:6a:93:51:0b:49:c9:29:98:d6:b2:
5e:26:a0:42:2e:c6:05:ac:ab:f9:c2:52:36:cd:ce:
6f:2e:bd:20:b4:7b:5f:e4:56:00:9e:fb:7f:da:5b:
c6:39:c5:d8:97:03:5e:02:f0:37:0d:94:c9:5e:73:
c9:28:0e:e0:56:67:ea:85:bd:5e:67:2a:04:4e:de:
28:06:05:02:fe:9d:5a:08:7b:15:d8:c9:2c:f8:c7:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CE:61:32:15:46:17:29:66:B7:4E:B2:3D:4C:8C:53:21:65:48:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2496E4CD1011EF8CC5E893762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:12:ad:69:d4:14:2a:a4:29:50:6c:08:06:00:8b:ff:23:9e:
8b:76:d7:5d:3d:fa:74:ea:e4:75:10:30:34:85:73:14:d1:c8:
e9:9a:21:ac:20:b4:ad:f4:e1:28:62:5b:7a:37:71:bc:75:8b:
25:aa:8f:b2:8e:9b:d3:fa:0c:71:31:28:97:5e:49:d7:e2:68:
17:98:7c:25:40:bd:09:a1:ce:df:5b:eb:4d:18:68:b6:37:81:
dd:fa:75:e0:7b:d2:0f:fb:be:56:66:69:17:ad:50:1b:14:b5:
92:37:4d:12:d1:71:16:ca:de:ce:3a:83:7d:26:05:c7:04:1f:
83:6a:df:9b:cd:c0:e3:ad:3e:ea:e0:38:eb:5c:6b:73:f3:38:
97:4d:6a:c0:df:81:5a:3e:ce:c4:a4:95:fa:2e:a2:61:b3:d7:
8e:42:d6:30:1e:6a:d8:b5:fc:35:f6:d6:b9:89:c2:84:10:46:
2a:0f:ba:8e:0d:de:46:ec:f7:66:c3:fa:d7:e7:f5:02:99:48:
d3:47:58:e0:4a:a1:30:be:8e:63:3c:4e:b7:eb:3a:4d:3d:d0:
a3:39:57:65:3b:1d:46:a9:88:95:0a:77:b6:22:7e:3e:b7:f4:
6c:7f:25:4d:22:24:3e:1e:0b:be:70:a5:84:15:1b:52:fd:37:
b0:55:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:36 2025 by rpki-client