Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10EB80E2C96D11EFA40AA66B762E951A.roa
File: 10EB80E2C96D11EFA40AA66B762E951A.roa (raw, json)
Hash identifier: unN9HFYXJ383gYlB6wl7WQt8fzeUvDj2sGjr0fVYNDs=
Subject key identifier: C5:83:89:FD:69:10:8A:54:BA:A6:3E:9E:89:BD:62:0D:1D:8A:D2:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F48E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10EB80E2C96D11EFA40AA66B762E951A.roa
Signing time: Fri 03 Jan 2025 00:52:54 +0000
ROA not before: Fri 03 Jan 2025 00:00:51 +0000
ROA not after: Mon 13 Dec 2027 00:00:51 +0000
asID: 17561
IP address blocks: 156.226.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62606 (0xf48e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 00:00:51 2025 GMT
Not After : Dec 13 00:00:51 2027 GMT
Subject: CN=677734e6-e3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:60:c8:c8:d3:72:8f:e0:9d:2f:11:24:f5:
79:80:3e:16:b2:54:e0:36:aa:65:e9:0e:7c:64:a7:
97:6e:a7:c6:d2:72:15:e9:01:65:f0:d8:2a:5a:23:
bf:14:f5:ee:a8:0a:2f:30:0c:be:9d:04:f9:20:00:
09:66:aa:15:70:25:81:03:6d:e6:be:e7:91:68:dc:
36:9f:d4:de:18:9c:1c:54:29:3b:69:ae:4a:52:7f:
68:84:ae:1a:a1:0a:48:fb:73:af:b5:87:b3:cc:79:
f2:f2:4f:f7:61:ac:df:13:0b:16:b3:95:d2:de:d0:
fa:82:1e:ea:cb:ac:c9:0e:82:4b:0d:de:1b:db:17:
f4:c8:7f:5f:22:31:1e:a5:06:17:58:34:b0:1d:74:
c4:af:8f:e2:b5:ed:63:e3:fa:a2:b4:ea:18:c2:8c:
1a:e5:21:1c:6b:14:26:3d:84:8b:24:b9:86:20:ab:
19:5b:90:44:b0:21:de:74:77:48:be:83:63:65:21:
b7:a3:3f:05:f3:54:dc:91:24:a0:66:07:35:2c:8b:
35:48:e6:6c:3e:84:9e:a9:34:37:6f:13:8a:af:66:
fa:93:21:32:a6:e3:29:e2:07:09:d3:bc:65:86:d6:
8a:8d:99:95:e2:e4:5d:83:14:63:ad:81:1d:85:62:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:83:89:FD:69:10:8A:54:BA:A6:3E:9E:89:BD:62:0D:1D:8A:D2:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10EB80E2C96D11EFA40AA66B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f7:95:cd:88:ff:6b:ba:77:7c:25:e3:8e:78:00:e1:17:4b:
54:36:fa:7c:46:12:26:92:be:91:0f:54:2c:09:ed:4d:35:f1:
7f:e3:01:fc:b0:9b:14:14:87:17:3a:8f:7b:c1:ea:c5:c7:61:
2c:d2:b2:6f:e1:9a:59:aa:64:65:0a:2e:b8:df:df:30:0c:11:
36:dc:6a:a3:84:78:32:3e:6d:26:4d:5e:43:de:1a:55:67:b4:
de:a2:d3:24:81:14:ba:31:55:e7:1c:8a:02:1f:c0:ae:27:b0:
52:64:e8:97:7f:4d:de:b5:fa:0e:7e:30:00:75:f0:4b:d1:7e:
92:1a:dc:d8:28:0e:d6:b3:1a:0c:52:88:da:95:48:1b:67:28:
e8:2b:4b:c7:9f:12:e8:dd:8a:1f:db:8e:4d:40:e4:89:74:79:
d2:c6:f1:e2:6a:0f:fb:ba:73:3f:07:a0:36:45:3b:ee:f1:04:
24:64:d5:e7:39:8b:bf:3d:78:33:d5:57:d0:08:dd:3e:38:b0:
bf:c5:d0:c2:81:3f:c9:56:80:8f:f6:de:40:96:03:3b:b1:47:
f6:b9:bb:91:0a:0d:67:64:19:db:23:7f:54:9c:aa:54:a6:4d:
00:3c:d2:9a:55:57:3a:15:db:e1:fe:5f:95:9c:ae:6d:b2:88:
dc:95:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:14 2025 by rpki-client