Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEE34264C35911EFA24B6459762E951A.roa
File: EEE34264C35911EFA24B6459762E951A.roa (raw, json)
Hash identifier: PcKrpj1SuEZfc4tinmK0CWKoTMM4Yi9V33VPS7PUvJI=
Subject key identifier: 5C:CA:56:7C:01:E9:4A:E8:FC:6E:14:3E:5E:CF:EA:89:A0:0E:28:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEE34264C35911EFA24B6459762E951A.roa
Signing time: Thu 26 Dec 2024 07:20:50 +0000
ROA not before: Thu 26 Dec 2024 07:20:46 +0000
ROA not after: Sun 23 Feb 2025 07:20:46 +0000
asID: 63139
IP address blocks: 156.229.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60501 (0xec55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 07:20:46 2024 GMT
Not After : Feb 23 07:20:46 2025 GMT
Subject: CN=676d03d2-74bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:2d:1f:9c:c0:5f:aa:00:59:d6:4e:2a:d9:
d1:3e:ae:21:15:bb:cd:d7:c1:60:fb:c2:27:e4:28:
93:2e:a9:75:ae:47:54:f9:fa:ee:d1:ec:c0:c2:d2:
69:93:81:bd:a4:be:a1:78:dc:25:e4:a0:28:97:ce:
1a:15:23:ff:b5:40:86:c6:38:3f:88:5a:08:a5:1f:
fa:85:ca:12:9d:9f:d0:3d:ca:5d:1e:bc:ed:a8:08:
87:5b:ea:64:e1:16:7e:3e:0c:82:5f:e0:62:25:04:
19:89:36:4d:c6:6d:59:54:65:28:20:15:df:12:1b:
81:7c:47:14:4c:2c:05:15:eb:4b:ba:b8:0d:63:be:
3f:b3:91:19:97:92:d2:41:9d:de:12:46:d7:30:6e:
a6:c7:54:59:66:d1:13:92:da:8c:7c:8a:6c:a1:c9:
6b:e7:fa:59:74:94:13:01:0b:0f:c6:54:37:d4:dd:
98:b3:fa:4d:af:d4:81:7e:39:73:49:88:db:80:4c:
01:90:24:46:ab:95:a0:1e:26:96:4f:d6:96:d0:3d:
08:aa:26:b0:3a:c3:08:30:f0:cc:a2:e6:60:e6:da:
c1:f7:fe:ec:2f:eb:f0:f5:91:16:69:7d:eb:c1:1e:
e3:ba:fa:c9:3e:62:af:20:09:0d:6e:cb:62:fa:d0:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CA:56:7C:01:E9:4A:E8:FC:6E:14:3E:5E:CF:EA:89:A0:0E:28:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEE34264C35911EFA24B6459762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.40.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:e9:70:af:83:b5:d7:6d:d6:e6:fb:f3:56:52:c0:98:ae:4d:
be:1a:9d:cd:42:f0:d6:7b:a9:f6:1e:0f:e5:44:5a:ed:03:5b:
65:0e:5c:f5:f3:5e:3e:6f:6b:af:8f:40:01:47:88:9d:21:04:
13:31:1d:ff:d8:ec:07:0c:e8:1d:75:68:9c:61:0a:a1:c6:09:
31:bc:ce:5c:25:c7:43:ba:91:c3:00:2f:2b:c0:a3:0c:8c:30:
cb:b0:08:eb:f9:13:7d:6d:9a:f7:a3:b5:55:e7:95:fb:44:fe:
8c:99:e9:9e:bf:bc:db:7e:6d:c6:a7:e0:0e:2c:12:8c:7d:e4:
b6:3b:71:96:67:c6:95:a8:38:4a:9d:12:3e:f4:49:9a:08:50:
f6:a9:c6:e3:93:d2:a7:d1:98:be:36:c0:30:8f:44:0c:86:88:
91:d6:a9:d1:88:da:99:30:e1:27:21:0a:1b:65:ef:ef:f2:5e:
c0:22:54:6e:85:5f:06:75:92:aa:3b:6c:f1:51:fd:9e:d7:2d:
a8:82:22:5e:aa:a2:1c:45:5f:b5:9e:2a:1d:7e:a3:cf:fd:69:
8e:1d:5d:ae:d9:0e:6d:2d:98:15:77:8a:76:cd:7d:58:4b:8a:
6b:cd:38:96:dc:af:51:17:00:17:3c:40:68:97:71:42:8d:4d:
13:31:05:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:37 2025 by rpki-client