Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC14739AC32311EF8597A46D762E951A.roa
File: EC14739AC32311EF8597A46D762E951A.roa (raw, json)
Hash identifier: 5vIO0Xzn61fe5YdIFZR62R0bs2y5SDs30Ytfd+qE8qI=
Subject key identifier: F9:89:06:66:8C:DB:5A:15:B1:7D:C3:1F:ED:C1:61:82:BA:72:C2:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC14739AC32311EF8597A46D762E951A.roa
Signing time: Thu 26 Dec 2024 00:54:12 +0000
ROA not before: Thu 26 Dec 2024 00:00:09 +0000
ROA not after: Sat 01 Mar 2025 00:00:09 +0000
asID: 984
IP address blocks: 156.249.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59992 (0xea58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:09 2024 GMT
Not After : Mar 1 00:00:09 2025 GMT
Subject: CN=676ca934-721c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:07:91:da:86:a3:a4:8b:05:ae:74:ef:aa:
84:52:26:38:87:40:af:19:8a:3c:e1:f4:92:73:35:
dc:b6:fd:35:09:04:39:dc:36:1c:47:f1:da:78:39:
39:6c:0e:0c:2e:41:25:8a:ff:79:96:90:bb:e6:19:
24:5e:2c:01:79:7c:1c:c5:d3:ea:da:f2:14:76:6a:
68:45:84:f2:32:c9:8c:11:ce:ef:9f:69:4a:43:9a:
a1:45:a7:ce:a7:56:bb:21:65:ab:da:8b:db:53:8e:
0c:57:41:04:26:29:aa:4e:f9:04:29:34:a0:d2:fb:
b7:f5:8a:0e:e3:0d:5f:89:ba:e2:69:b6:5a:77:e4:
98:f9:cb:46:b7:89:a2:99:43:cb:c6:66:9d:d4:ae:
1e:32:18:78:fb:73:15:64:78:f5:61:6d:d1:b9:87:
5a:dc:c1:e2:e3:32:76:eb:be:fc:f2:1b:61:65:3a:
87:19:d6:6d:b6:67:3f:6a:79:92:95:09:c8:80:46:
98:aa:81:f9:53:a0:5f:3f:2e:69:46:28:49:e2:30:
11:81:07:37:f9:49:a3:a3:2b:11:e5:f6:9a:65:d7:
d3:23:4e:0a:af:17:ae:b5:f1:0c:0e:27:b4:95:43:
ac:fb:ec:b0:b3:0f:ed:f1:71:a3:96:50:2d:49:b1:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:89:06:66:8C:DB:5A:15:B1:7D:C3:1F:ED:C1:61:82:BA:72:C2:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC14739AC32311EF8597A46D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2e:ef:ed:06:51:2c:47:62:5f:c0:92:e3:2e:47:c0:be:f9:98:
18:1e:11:a0:c9:7e:a0:b0:bc:f6:28:cf:4c:68:95:85:59:3e:
07:52:5e:58:73:1e:d8:61:2b:72:7b:3a:5a:0d:39:c1:98:dc:
bb:05:a7:00:24:5c:e0:d7:cb:87:51:66:23:b6:db:51:df:3c:
4f:ca:da:d0:01:48:ad:36:02:14:91:b0:9a:c7:96:1d:48:33:
ff:3a:12:90:24:e6:64:2a:e9:8d:41:30:b7:bf:ac:c8:cd:af:
6f:d0:96:5c:b6:02:76:f7:f8:6f:8c:f5:3b:6e:c1:3f:14:a5:
52:4e:2b:89:df:18:8f:f1:ce:bf:7e:d9:0b:b5:2e:5e:0d:b1:
bb:6e:47:68:ad:c8:e8:9b:3d:73:52:49:d8:8a:75:52:1b:8f:
87:c2:f1:bd:3b:62:f6:da:46:e0:02:5c:75:e4:3e:18:0e:51:
82:b6:36:31:ea:ea:6a:ea:74:94:8a:97:ac:38:e4:ea:c3:58:
29:5c:a8:ee:ef:6c:44:bd:75:0e:33:ae:eb:0e:c3:98:2a:df:
6f:c6:e4:b4:dc:aa:a0:ea:00:d6:6d:d7:81:af:e9:4b:80:6c:
3c:7b:ff:f1:b5:d3:05:54:12:92:06:ff:99:3d:1b:ac:3f:2e:
03:a1:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:42 2025 by rpki-client