Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086E7CCED31F11EF9D3E4E8E762E951A.roa
File: 086E7CCED31F11EF9D3E4E8E762E951A.roa (raw, json)
Hash identifier: TFJxutIi+/SiyOdSNkwbT950jJ//DzDtInzOU/YDtEI=
Subject key identifier: A2:BC:F4:50:AA:0D:91:27:ED:7F:B2:A5:72:72:2F:F5:36:F4:94:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010883
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086E7CCED31F11EF9D3E4E8E762E951A.roa
Signing time: Wed 15 Jan 2025 08:59:31 +0000
ROA not before: Wed 15 Jan 2025 08:59:27 +0000
ROA not after: Mon 03 Jan 2028 08:59:27 +0000
asID: 17561
IP address blocks: 156.254.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67715 (0x10883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 08:59:27 2025 GMT
Not After : Jan 3 08:59:27 2028 GMT
Subject: CN=678778f3-25cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:ec:62:ab:af:0c:cf:42:4c:55:e8:58:96:
4c:2f:53:67:67:92:1a:2c:df:ad:8f:74:c7:9d:77:
42:93:6e:59:cb:63:e2:41:7f:b5:6c:0e:fa:17:22:
f3:9b:5d:9b:a9:b7:45:1a:39:64:56:af:03:cb:1e:
6d:df:8d:fe:d5:ba:4e:d7:c0:85:ad:cb:af:59:3f:
6f:f3:c1:1a:8c:6f:a9:ea:78:db:d7:f7:9d:3a:94:
8e:f5:28:3a:37:fa:ef:5e:81:e3:5c:65:47:0a:3d:
8a:e3:0e:42:cb:a2:ef:3a:d9:71:2e:e8:0b:47:95:
50:ba:81:02:dc:aa:d4:38:ef:bd:66:e3:c7:23:d5:
8a:a2:9c:4c:a4:f7:6f:c3:9c:42:0f:85:7d:9e:e0:
27:3a:c4:66:c7:ed:c5:cd:83:d0:ea:15:9c:69:16:
ea:56:0e:dc:4a:f6:ea:c6:25:b9:de:9e:a9:ce:e1:
c6:da:e9:ab:19:37:e7:45:be:25:b4:31:3f:27:44:
88:47:b8:e4:3d:50:9a:97:06:b9:6f:f0:77:66:38:
d9:24:11:9f:0a:0e:7e:c4:8e:f7:67:0a:b5:b3:a6:
fb:8a:9e:23:69:44:bf:60:9b:88:77:ac:71:d1:13:
c1:55:f6:42:0a:b2:0b:e5:4e:cf:05:26:ad:48:b1:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BC:F4:50:AA:0D:91:27:ED:7F:B2:A5:72:72:2F:F5:36:F4:94:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086E7CCED31F11EF9D3E4E8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e1:2b:25:eb:3a:47:35:99:d5:7b:9e:4d:0d:27:33:7f:14:
19:17:53:f2:ed:40:80:19:f6:ca:30:7d:c7:8b:2e:ab:a9:30:
ad:30:f5:37:02:76:4b:55:0c:15:02:7b:d3:c8:cb:bc:1e:07:
d9:2c:4d:94:7e:e1:c0:11:61:0c:f7:b6:ec:53:b6:6d:65:30:
ee:e5:b9:79:4e:bf:40:92:4b:e9:12:e0:16:61:72:5c:48:99:
2e:8e:ce:f1:1a:0c:00:c0:c2:00:e9:a1:e2:03:3a:aa:26:65:
4f:a7:ab:57:c1:d6:41:0b:1e:e7:4f:0b:8c:2c:9e:4a:7a:a9:
73:61:5d:9d:3c:18:5b:f9:d9:21:13:80:21:19:38:e4:d4:16:
3c:b1:7e:f1:ca:8a:9d:97:0e:4e:4f:0d:4f:5c:92:57:d7:9a:
40:58:a3:c7:2f:59:a2:87:7e:d3:5d:ea:4d:27:df:ce:e5:b4:
5f:9a:3d:a7:a1:36:eb:4e:1a:fa:cb:a0:e1:97:ad:d2:d7:4a:
8c:37:02:0b:32:63:ac:00:5b:5d:16:fd:79:07:d7:78:1d:55:
96:71:33:dc:22:3b:4b:1c:cb:54:59:8a:f8:7c:07:bc:d6:24:
d3:2a:cf:98:b9:5a:45:9b:a4:fa:6c:43:6f:c4:19:71:8a:f1:
ee:f4:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:11 2025 by rpki-client