Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EBFF69ACCCE11EF94A66B6F762E951A.roa
File: 5EBFF69ACCCE11EF94A66B6F762E951A.roa (raw, json)
Hash identifier: jG9dLWc3BrqZlEQAB9NHQbhtnuZOi5IZJ8azUbldN8U=
Subject key identifier: E2:1C:47:CB:96:7E:3A:5C:D1:31:66:9B:61:15:24:98:9D:F3:E9:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EBFF69ACCCE11EF94A66B6F762E951A.roa
Signing time: Tue 07 Jan 2025 08:07:00 +0000
ROA not before: Tue 07 Jan 2025 08:06:56 +0000
ROA not after: Mon 13 Dec 2027 08:06:56 +0000
asID: 17561
IP address blocks: 156.233.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64156 (0xfa9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 08:06:56 2025 GMT
Not After : Dec 13 08:06:56 2027 GMT
Subject: CN=677ce0a4-0361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:55:94:65:57:8e:51:3d:99:5d:57:2c:c4:
3e:de:ba:53:fa:60:c3:60:9e:d8:70:3f:6b:06:e8:
04:c3:72:bd:45:01:ca:b2:5c:02:11:f5:67:cc:cc:
e7:77:5a:85:5d:54:0c:eb:98:88:3a:e5:3b:45:d5:
89:17:82:4d:7e:48:7c:24:e6:c2:d6:e1:28:61:99:
1f:4b:2c:37:7e:22:d9:61:59:8c:34:95:c6:d0:ff:
1c:d7:52:ba:4e:c4:73:c3:fb:62:3d:b4:38:14:56:
42:e6:1c:5a:5f:01:2f:ae:40:87:cc:ef:75:c2:d9:
ed:c8:a4:da:f6:13:8f:bc:92:bc:4e:b9:68:58:c7:
d2:6d:97:91:d0:5a:5f:c1:62:a2:f2:1e:42:09:64:
9a:10:3e:2f:bd:98:e6:a7:2b:ee:ff:39:25:65:6a:
c1:e0:ef:d8:d0:24:3e:3c:8e:9d:99:23:1d:75:b9:
e5:fe:b8:c2:b5:6e:ab:35:0a:83:e4:e2:e5:41:f0:
02:c0:3c:90:59:c0:17:2c:02:17:ff:3e:03:30:36:
a4:43:4b:a0:62:5c:4a:9b:84:ce:20:4d:e0:76:44:
9f:8c:87:cc:50:6d:0c:ce:8e:37:38:2d:0a:6d:12:
b0:9a:d6:ab:87:3f:60:42:30:f4:6d:e8:d9:3a:80:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1C:47:CB:96:7E:3A:5C:D1:31:66:9B:61:15:24:98:9D:F3:E9:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EBFF69ACCCE11EF94A66B6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.138.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:cb:f1:c3:4e:9c:02:48:59:68:54:a7:18:95:42:66:fd:9c:
16:b0:f4:9a:a0:2d:c6:27:cd:8e:42:27:21:b0:f7:81:31:4c:
fa:b2:a0:30:35:4a:ab:7c:ca:50:be:9d:2c:81:c3:ed:06:6f:
72:44:3f:61:38:ee:83:64:8b:7e:f2:02:bb:c5:93:a2:bb:fc:
f1:92:7f:04:5b:be:4c:d6:41:ce:b7:4a:44:15:bc:17:24:0e:
29:8a:b3:f8:41:f2:65:f2:4f:2e:da:fe:38:49:58:66:05:29:
de:67:94:85:8a:eb:ea:46:02:c8:11:c8:fe:46:a5:c2:65:52:
23:92:8c:a8:63:1a:8b:2f:db:fd:1f:2e:ad:04:b8:17:2f:e3:
c8:95:52:6c:56:99:90:9b:5a:3e:c4:6a:2e:80:e5:cc:77:c6:
0a:dd:6d:e0:fb:f9:0a:a4:6c:96:b1:8b:56:46:0d:8a:5d:97:
e1:dd:7a:d4:3a:d8:f2:82:92:e5:83:0e:9a:53:b9:2a:18:77:
5f:af:d1:ac:d2:2c:e2:f1:2d:c0:42:f5:17:88:5b:f7:67:18:
d2:b6:aa:fc:88:d0:a3:00:37:5d:79:37:69:e1:7c:0b:26:51:
b5:9f:ba:bc:53:30:fe:9b:a0:61:a3:96:6e:8d:c4:ad:6e:7f:
63:58:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:05:20 2025 by rpki-client