Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1055E064CD2811EF8AB495A4762E951A.roa
File: 1055E064CD2811EF8AB495A4762E951A.roa (raw, json)
Hash identifier: ttovDWAp5DkjrH+XBsFEASNu0Gaf7R4Oj+Gz3oaS0kA=
Subject key identifier: C7:C2:44:72:EC:C2:49:88:29:1A:E5:5F:3A:67:45:89:0B:2D:26:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1055E064CD2811EF8AB495A4762E951A.roa
Signing time: Tue 07 Jan 2025 18:49:03 +0000
ROA not before: Tue 07 Jan 2025 18:48:59 +0000
ROA not after: Mon 13 Dec 2027 18:48:59 +0000
asID: 17561
IP address blocks: 156.241.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64939 (0xfdab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:48:59 2025 GMT
Not After : Dec 13 18:48:59 2027 GMT
Subject: CN=677d771f-6137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:3c:0f:e1:dc:d0:8b:43:59:09:f1:6f:9d:
c1:1f:51:ae:2d:df:45:cc:e7:a0:26:50:5f:8a:4c:
20:e2:43:cf:8d:89:36:11:b2:e3:fe:18:e6:e2:6c:
87:20:55:24:b6:f8:79:91:dd:fc:7b:0e:9a:21:fb:
d8:7c:12:1c:40:7f:9d:cd:47:e9:01:8e:da:06:d2:
9d:0a:4b:6f:3c:c3:1a:98:f9:01:35:c9:49:8f:13:
69:64:ed:e7:fb:97:77:3d:c8:ec:60:2e:38:6c:48:
ad:9a:8e:65:04:93:d7:c0:32:74:87:84:31:2b:6d:
4b:29:e9:53:4c:71:68:59:b3:0d:25:24:ec:6d:f8:
79:11:af:63:b7:5c:f1:40:48:08:43:5a:cc:a3:f6:
88:f0:d3:c5:62:f6:9d:de:d6:c0:72:4f:26:53:74:
f4:2c:6f:df:62:8b:59:c8:33:92:37:69:f9:83:4f:
f8:70:f4:6d:b1:8f:98:70:28:7d:13:8c:cd:07:3f:
2f:76:6c:cb:94:cb:28:29:07:78:09:07:c5:28:a1:
ff:fe:c2:c1:30:89:c4:c2:11:dd:38:35:6e:c4:68:
14:37:7f:10:1e:da:ca:85:af:45:a1:4c:37:fd:22:
ca:61:0b:41:9c:f9:4b:40:6b:36:6e:e5:44:c5:9a:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C2:44:72:EC:C2:49:88:29:1A:E5:5F:3A:67:45:89:0B:2D:26:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1055E064CD2811EF8AB495A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.225.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7e:80:85:55:a5:b8:d3:1a:50:b4:86:52:67:5c:f6:1c:44:
4c:50:c8:17:b0:17:21:9c:29:b0:b7:e9:ea:1e:00:2b:2c:ed:
9e:35:82:a8:9b:34:09:b6:e9:90:35:7d:70:aa:84:c8:e4:23:
ea:b2:f9:d2:84:51:7f:86:a1:15:f2:cd:1e:60:cc:f6:62:be:
0d:94:7f:d1:66:d9:3a:5d:4d:47:ef:60:1e:1b:87:c6:27:55:
55:f6:c2:2c:c9:85:12:7c:ad:48:20:00:69:35:cf:26:c9:b8:
03:d8:b7:1d:6f:a8:75:e1:4f:7c:69:ba:9f:02:33:89:af:b0:
1c:c8:d7:4d:d7:2f:83:ef:44:1b:a6:55:84:ec:d5:08:e0:35:
78:e2:2c:fe:14:17:37:95:c2:9d:85:39:92:e2:d2:ec:1b:5a:
b2:77:6f:2d:f0:70:fb:0c:d8:31:8f:3c:33:05:6f:5d:64:d6:
79:bc:d5:d7:53:96:5f:74:78:24:70:8e:75:39:5b:22:59:62:
29:ca:73:91:75:da:4a:b0:27:c7:9b:3e:f0:7b:f9:66:42:dd:
4c:51:df:1a:eb:39:48:fc:43:84:7b:ea:d9:74:8e:7b:e6:94:
fc:ae:75:f2:2f:3a:b3:12:5a:77:c3:e5:51:e6:50:29:7c:73:
7f:a4:69:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:59 2025 by rpki-client