Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/157250BEC95411EFB9B6444E762E951A.roa
File: 157250BEC95411EFB9B6444E762E951A.roa (raw, json)
Hash identifier: gpE42CV7XtTSKUzygLkJNDS4J4+SZR1BiHZwFomT4g0=
Subject key identifier: EC:3F:63:41:31:CC:39:3B:41:AA:AC:D2:04:52:C6:F4:70:DF:B6:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F3E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/157250BEC95411EFB9B6444E762E951A.roa
Signing time: Thu 02 Jan 2025 21:54:05 +0000
ROA not before: Thu 02 Jan 2025 21:54:01 +0000
ROA not after: Sat 13 Dec 2025 21:54:01 +0000
asID: 984
IP address blocks: 156.226.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62436 (0xf3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 21:54:01 2025 GMT
Not After : Dec 13 21:54:01 2025 GMT
Subject: CN=67770afc-60d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:b2:5a:80:b4:e4:76:61:f3:b2:d6:d2:ef:
93:af:db:6d:d5:b1:61:6a:08:ff:fb:53:2b:6c:15:
04:4d:32:18:43:1d:55:12:f8:9b:f4:52:82:ed:59:
49:99:d9:e5:f0:7d:00:96:54:d6:4c:41:64:2c:7d:
fe:a2:98:0a:75:04:4b:c2:1c:00:84:f0:b6:93:1f:
4d:6b:fe:e4:99:6a:4d:6d:00:c2:9a:6c:39:df:7f:
82:48:03:e3:3d:dd:fa:49:52:a6:75:e7:76:be:2f:
66:e1:a5:2e:de:74:21:06:ce:01:f6:a4:5a:fa:28:
22:ad:13:ee:b1:5c:17:dc:13:96:eb:93:a6:9f:f4:
0e:6c:42:d0:17:69:d8:d6:eb:c5:39:f6:88:16:2e:
5e:15:d2:6d:d8:31:5f:d4:d4:66:e2:04:ba:43:f4:
59:b1:67:4c:d0:fd:66:85:ba:c9:83:c9:6c:ee:be:
1a:c5:4d:c4:f9:77:ba:6e:c4:07:99:b3:a2:14:ab:
53:a0:0a:d1:c3:5c:79:b4:e6:1b:bf:d5:a5:47:69:
9e:c0:d8:12:5c:1d:bf:cd:5d:c1:c1:df:c4:b8:4d:
91:0b:77:0b:73:ce:c3:bf:23:9f:a7:78:34:d6:fe:
51:66:c1:d7:18:6c:68:22:73:fb:ea:6d:0c:6a:bb:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:63:41:31:CC:39:3B:41:AA:AC:D2:04:52:C6:F4:70:DF:B6:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/157250BEC95411EFB9B6444E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.138.0/24
Signature Algorithm: sha256WithRSAEncryption
57:fe:2a:05:01:43:b5:80:b9:82:b1:e0:08:01:19:1c:63:b1:
92:f6:2a:b6:85:3f:37:0e:e7:de:16:bd:a7:7a:7f:4e:09:59:
ee:3f:e8:74:cf:bf:9b:dc:b7:74:35:3e:44:a6:02:e4:29:8f:
b7:68:10:92:38:4d:ce:95:cc:9a:34:cd:e3:d2:fc:ae:03:eb:
7e:d7:92:c4:56:4f:16:fa:73:fa:eb:05:95:35:2b:39:83:61:
81:58:8d:ce:44:68:18:81:4a:15:2b:d4:2d:20:f4:15:ee:43:
a4:12:6a:94:ee:f0:9a:2d:a9:32:9f:97:74:f4:d4:7a:4b:31:
44:20:fc:3d:e9:85:25:a7:e5:65:40:ce:fa:fa:19:20:9f:a5:
7e:1a:6b:ba:2a:75:b3:9e:80:a0:c3:5e:15:e8:2a:6d:a9:cc:
0a:30:93:74:39:90:4d:b0:e7:dd:c0:ed:6c:14:20:d0:cf:28:
ed:e1:80:b3:d8:d9:d9:fb:ae:29:86:1e:7d:0a:90:14:6e:9a:
c4:58:7f:9b:fb:99:bc:4f:19:85:94:72:2f:6f:46:a2:41:95:
0d:12:60:41:92:ee:ea:b4:8c:7d:5c:89:78:82:65:9b:2c:4c:
c7:cc:c2:b7:87:4f:19:0a:19:1d:e2:b4:34:e1:b5:ec:ab:bb:
b1:dc:19:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:45 2025 by rpki-client