Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F78A9C90C35A11EF8D74CE5F762E951A.roa
File: F78A9C90C35A11EF8D74CE5F762E951A.roa (raw, json)
Hash identifier: e7WxcI8BQHsuOfPVHIQf7ws0SKQSmJrE9TcniFo/DPc=
Subject key identifier: A2:5A:59:40:36:F1:D8:BB:1B:BC:CD:F3:04:2F:21:80:D4:F4:6A:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F78A9C90C35A11EF8D74CE5F762E951A.roa
Signing time: Thu 26 Dec 2024 07:28:14 +0000
ROA not before: Thu 26 Dec 2024 07:28:10 +0000
ROA not after: Sun 23 Feb 2025 07:28:10 +0000
asID: 63139
IP address blocks: 156.227.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60513 (0xec61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 07:28:10 2024 GMT
Not After : Feb 23 07:28:10 2025 GMT
Subject: CN=676d058e-3f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:84:50:23:d2:86:85:1e:73:0f:01:89:33:8e:
a3:09:39:bc:10:06:05:a6:96:7a:bd:c2:34:5b:fa:
f5:bd:74:42:c3:e4:b9:ff:9d:f1:56:09:5a:db:7d:
96:1e:a0:47:b3:4b:3e:f9:4e:2f:61:36:ee:71:c0:
84:31:e0:e3:e6:07:ad:c9:ae:1f:0b:53:bb:27:78:
31:26:27:fb:17:f7:a5:f8:93:7a:d5:3b:b7:e9:82:
0d:cf:0c:d4:a8:b4:38:10:85:51:23:c4:54:28:c2:
a2:39:bd:8c:a6:5b:d3:28:3b:b9:12:90:ce:58:f1:
ab:e5:48:36:c7:9e:d5:4e:b8:ed:99:4d:b3:31:67:
19:c8:fa:f8:c2:f8:73:c3:a2:97:02:56:71:82:00:
25:f1:e2:36:d0:61:fc:69:e0:39:00:e3:5c:9e:56:
7a:e4:33:6d:6b:02:30:17:13:47:ed:c6:ce:58:a8:
8f:55:5c:66:35:61:1a:44:fa:2e:65:91:1c:ad:da:
73:b1:b0:54:ea:7e:d7:a4:91:ca:94:92:a4:84:a6:
3c:0d:f5:08:52:92:75:cf:cb:f3:dc:00:cf:f8:3e:
17:bd:b9:6e:59:25:e4:18:be:1a:65:99:f3:80:1d:
f9:26:bf:95:fc:3f:b7:6e:29:b8:73:2b:0a:36:08:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:59:40:36:F1:D8:BB:1B:BC:CD:F3:04:2F:21:80:D4:F4:6A:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F78A9C90C35A11EF8D74CE5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.192.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:91:ed:61:7d:37:cf:ba:8d:5d:b2:38:db:95:9f:73:83:ab:
99:07:a1:33:7c:77:fd:42:f5:82:4d:ce:e4:0a:69:4f:ec:0c:
5e:08:46:2a:b0:e4:40:a3:6d:c4:c8:96:78:c4:b0:fd:55:bd:
26:ff:99:94:f9:58:a5:96:5e:ad:47:66:59:e5:91:34:d2:ed:
50:dd:f9:1d:0b:c1:d9:35:f1:1b:e6:fa:c3:31:f6:3d:1a:bf:
31:6c:ba:c6:f7:13:b0:d5:48:9e:cb:55:0c:20:ea:e9:34:28:
9b:0a:82:54:47:7f:25:a5:74:3f:74:0a:c9:58:5f:90:50:0c:
b1:5e:eb:ee:54:43:8a:ec:b7:d7:9d:eb:a6:2a:f6:b6:0f:05:
46:b9:56:95:6e:8d:64:5c:a4:96:53:09:54:74:db:e2:7f:39:
bd:10:38:b2:a8:40:da:8a:70:66:70:8d:27:31:1c:8d:c1:08:
82:c0:dc:cf:f3:ad:af:ec:d6:46:12:9f:73:cb:15:32:80:69:
d0:3b:17:64:c2:8f:f2:c1:40:3e:53:a8:c2:a4:9c:04:af:7f:
c2:82:ce:2a:67:e3:d5:ff:6d:1c:b1:a7:91:16:bb:d4:66:cc:
af:28:6e:5f:90:bd:c6:7b:ea:5a:b6:06:a9:1b:3e:1e:e6:75:
bb:d6:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:02 2025 by rpki-client