Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEEA6DE6D17D11EFBC1391B2762E951A.roa
File: EEEA6DE6D17D11EFBC1391B2762E951A.roa (raw, json)
Hash identifier: IWr+cDrmHTOc7P12wZdOEH+/dH6pts5PQKcFjbjPSck=
Subject key identifier: FE:91:EA:BA:89:CD:B1:67:41:87:D3:D9:79:41:A0:53:20:BC:F0:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010688
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEEA6DE6D17D11EFBC1391B2762E951A.roa
Signing time: Mon 13 Jan 2025 07:13:48 +0000
ROA not before: Mon 13 Jan 2025 07:13:44 +0000
ROA not after: Thu 20 Feb 2025 07:13:44 +0000
asID: 7018
IP address blocks: 156.253.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67208 (0x10688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 07:13:44 2025 GMT
Not After : Feb 20 07:13:44 2025 GMT
Subject: CN=6784bd2c-75bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:25:b7:3c:9e:4d:07:fd:94:5f:61:34:1d:
de:43:f6:69:fc:0a:67:4f:1f:27:b8:1e:e2:1d:ae:
21:39:d4:82:d3:ca:71:73:be:52:65:20:08:b8:da:
79:b6:9c:d2:89:c4:00:4f:4c:9a:2c:48:46:cb:37:
9f:ea:a4:b6:45:0d:d1:b4:f6:66:bc:fc:8a:d0:76:
10:92:47:58:fe:26:4c:77:80:c0:f1:3f:95:4a:20:
95:ff:db:6f:6b:02:ac:e7:78:3e:39:9b:67:36:81:
9d:0d:24:e5:15:50:c8:4a:be:b7:ad:35:81:f6:cf:
a8:c5:fc:4e:28:0b:0c:18:f6:f0:5f:22:a3:91:26:
ab:c2:cb:00:9d:cb:ac:36:61:cb:e7:e5:39:77:6b:
92:60:a5:8a:1a:bf:5b:04:6f:6c:8a:ce:1c:fa:a1:
73:3f:e0:1c:70:3f:0f:db:a4:4d:70:22:bc:08:b9:
75:b7:c8:0b:6a:bd:1e:d0:da:a4:ae:4b:07:65:83:
4f:f6:0b:e4:33:5c:99:92:f8:18:a8:21:e5:e8:3c:
cc:50:12:16:68:7b:d6:c8:62:b2:c1:26:9f:15:9b:
f1:17:34:22:bc:8e:71:c0:5a:0a:d2:d6:d3:e6:ac:
13:a1:39:64:3a:09:c4:44:57:c5:9f:81:a6:dc:f3:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:EA:BA:89:CD:B1:67:41:87:D3:D9:79:41:A0:53:20:BC:F0:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEEA6DE6D17D11EFBC1391B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.226.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bc:da:8c:80:33:da:48:75:ff:91:f4:85:dd:49:a4:d2:93:
82:97:29:2e:17:d3:76:fe:1e:69:d9:25:46:a3:dd:f6:25:37:
c7:47:15:19:51:59:8d:43:f6:05:4a:9c:ab:f2:93:9c:81:43:
a3:8e:1f:9f:08:da:03:78:7c:28:1b:3d:db:05:69:93:af:20:
42:74:9a:84:cb:0b:58:90:57:26:1b:9d:d7:68:24:a9:cb:8b:
1c:39:15:a7:17:f7:31:2c:d8:bc:a6:94:33:2f:c0:16:76:83:
96:a1:5a:12:67:8b:83:fb:2c:17:00:7a:04:9a:a6:5e:1b:a1:
27:66:5b:25:c0:07:b5:5a:28:cd:fc:57:05:11:43:de:f1:9a:
4e:aa:e2:33:5e:b0:d5:c9:1a:3a:53:10:66:63:06:85:20:49:
41:22:8e:3a:44:88:cb:be:78:d0:f0:df:30:d4:74:35:70:87:
f4:8d:62:d3:d3:ff:d7:90:79:b5:2c:de:d7:ce:89:a8:52:2f:
fb:9d:c3:7b:b0:f5:4c:31:5b:35:0b:af:95:4a:0c:32:65:95:
6a:1d:61:ec:aa:a5:3f:20:83:57:10:25:66:1c:19:31:12:7a:
bf:89:47:75:7b:b0:43:4a:32:7c:f2:81:97:44:a3:ba:c6:2f:
e1:e4:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:11 2025 by rpki-client