Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05C41E76D31411EFB35C4349762E951A.roa
File: 05C41E76D31411EFB35C4349762E951A.roa (raw, json)
Hash identifier: e6JNG5EdstX93QP/E6Z/yJLdFFWNg9SfSNGQ5/ZxUrg=
Subject key identifier: DE:F0:67:1D:4A:2A:D5:1B:67:C1:4B:18:04:DF:ED:BF:20:89:84:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01085F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05C41E76D31411EFB35C4349762E951A.roa
Signing time: Wed 15 Jan 2025 07:40:42 +0000
ROA not before: Wed 15 Jan 2025 07:40:38 +0000
ROA not after: Mon 03 Jan 2028 07:40:38 +0000
asID: 17561
IP address blocks: 156.254.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67679 (0x1085f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 07:40:38 2025 GMT
Not After : Jan 3 07:40:38 2028 GMT
Subject: CN=6787667a-61a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:ab:b8:79:82:71:39:5a:6f:0d:e0:bf:c8:
4e:c3:2f:7d:e0:a0:85:df:3c:49:0b:d4:2e:41:fd:
4b:d4:52:4b:19:54:5b:9d:1c:c3:3c:f1:a5:a5:ed:
d9:76:37:9a:28:d2:c6:81:0a:0e:66:d2:8d:33:93:
e5:b7:d7:79:8b:cb:30:cc:04:fc:76:05:d1:c1:a8:
4b:37:ef:23:77:a7:7a:5e:5f:73:5c:3e:fa:ab:ba:
b1:cd:aa:fd:86:0c:57:24:ed:a1:64:67:90:37:6e:
54:c6:6b:61:99:d6:7d:f9:4d:d7:dd:94:4f:3e:17:
71:78:63:49:80:f6:f5:e0:2d:3a:90:54:60:d7:00:
b0:3a:77:e9:2f:f2:2a:3d:66:c4:5c:71:94:fa:0b:
03:f6:08:29:f1:ea:2e:ce:3d:ba:4d:d8:4b:fc:9d:
dd:80:c5:0b:f0:b3:24:d1:c1:3a:4e:c4:c8:dd:fd:
59:d8:0b:f2:a3:04:6c:3a:0f:32:42:6a:aa:ec:72:
1a:84:f3:90:0c:de:0a:e4:06:2f:0d:da:6a:fe:e8:
e0:e7:b5:93:80:6b:6a:66:10:27:eb:a1:a9:83:0e:
3a:02:6e:8a:36:1c:d8:35:96:36:aa:2f:a0:2a:cc:
02:93:1d:e5:e6:c8:34:db:f5:f3:f1:36:3f:4c:59:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F0:67:1D:4A:2A:D5:1B:67:C1:4B:18:04:DF:ED:BF:20:89:84:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05C41E76D31411EFB35C4349762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.69.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f7:2d:b7:24:9c:cc:af:c4:6c:67:4d:9d:a4:99:2b:b0:6c:
d0:df:d6:f7:ab:4f:3c:e4:cb:e7:49:48:34:e6:66:76:7b:10:
ce:5a:6c:44:0d:c5:bd:7d:9d:a7:87:7c:11:19:6c:4d:7f:9c:
bd:08:d6:db:ca:f2:b5:af:62:6c:9f:51:9c:a3:31:7d:dc:85:
4c:21:95:da:7d:4b:55:fe:e3:e6:04:02:0b:b6:4f:a0:75:93:
67:79:02:ee:18:05:82:12:d3:f2:28:9e:26:c4:f4:68:38:96:
b0:15:66:9b:b2:a5:3b:98:49:ac:dc:68:e4:d6:ca:2e:9a:6b:
0d:c3:dc:1c:a5:cd:a9:76:19:17:e1:3c:cc:fb:0e:67:bb:41:
da:56:b1:1b:1d:cc:37:05:c9:76:46:af:4a:89:f3:89:bc:b5:
c4:95:95:f0:6f:a4:90:5c:eb:1a:38:9e:95:c7:91:b3:ac:db:
98:76:c1:e5:cb:13:bb:c6:dd:e3:61:cf:f9:04:81:da:19:7b:
06:ea:18:53:bb:36:3b:e0:6a:82:2d:2a:5e:d6:79:57:7f:4f:
ef:ac:90:df:34:eb:b0:7c:07:f1:f1:bc:f0:fa:3d:5b:47:18:
08:9d:86:d1:50:d6:d0:20:12:e8:e9:aa:1a:4a:34:64:7f:fd:
fb:c3:4e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:05 2025 by rpki-client