Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1577E4E2CD6A11EFA5CA0855762E951A.roa
File: 1577E4E2CD6A11EFA5CA0855762E951A.roa (raw, json)
Hash identifier: 5I5o4/F7LaiasKLzPFOmJ9MGNmqFkhRVKdJOejoMTx4=
Subject key identifier: 6D:AE:7F:8D:9D:F9:BF:C0:40:00:2B:6B:86:7C:97:57:FE:7E:3A:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1577E4E2CD6A11EFA5CA0855762E951A.roa
Signing time: Wed 08 Jan 2025 02:41:38 +0000
ROA not before: Wed 08 Jan 2025 02:41:35 +0000
ROA not after: Sat 13 Dec 2025 02:41:35 +0000
asID: 984
IP address blocks: 156.247.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65375 (0xff5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 02:41:35 2025 GMT
Not After : Dec 13 02:41:35 2025 GMT
Subject: CN=677de5e2-33e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:74:64:41:85:31:88:3c:50:cc:63:4e:1a:
46:66:d6:8f:be:98:93:ec:50:a1:38:bd:d5:86:25:
54:ec:11:0f:48:f7:a2:ae:6c:1a:c2:ed:ce:45:de:
48:d8:cc:43:e1:aa:4c:17:4b:a5:d4:b1:eb:0c:95:
c7:8d:01:56:c9:e3:c2:d1:b5:b7:3a:83:0c:35:74:
21:c7:b5:9c:25:10:92:e5:93:d6:5e:d3:db:82:26:
bb:4d:c9:4a:3a:9d:84:95:e8:81:79:ca:7b:7e:36:
12:c7:b5:e6:a7:fe:dd:9f:d9:9e:50:69:a4:34:5c:
be:89:99:d5:e0:87:9e:12:be:97:f7:37:b6:fb:1c:
c8:3b:af:99:a2:f1:57:47:b1:92:11:14:c1:1f:6f:
8d:d9:bf:68:95:92:1d:10:f6:15:9c:74:7f:62:f9:
fc:ee:68:e3:1e:03:a3:de:8c:f1:fb:c4:7e:6c:ca:
f0:d1:89:c4:82:46:64:00:69:92:bf:e0:ef:eb:46:
bc:57:dd:af:40:10:be:ec:09:5e:fe:c4:16:aa:d2:
80:a4:3a:1d:7e:93:31:89:74:36:23:ac:b5:14:15:
f2:cb:42:7b:48:1c:51:e7:81:3a:9d:09:62:ef:aa:
aa:18:4c:61:96:d7:12:d4:59:4b:c6:ac:31:3d:d6:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AE:7F:8D:9D:F9:BF:C0:40:00:2B:6B:86:7C:97:57:FE:7E:3A:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1577E4E2CD6A11EFA5CA0855762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e0:9a:a1:46:03:51:42:8b:4a:c2:dd:ae:87:08:4a:31:c6:
e8:a0:6e:1d:e0:d9:39:4b:0e:b4:2b:df:8c:3a:9d:9e:33:b5:
30:a6:be:89:d6:f0:65:4a:21:12:c9:8c:57:a2:ce:4d:af:d6:
d2:75:50:1b:29:c4:d7:08:c8:0b:de:a0:75:60:57:98:7b:12:
16:59:5c:f9:79:02:f7:62:18:54:ac:fa:5d:5b:10:2e:c6:ea:
63:83:40:9a:38:3b:08:f4:e3:92:76:58:e4:58:3f:f2:c3:8d:
18:c1:16:b7:e4:55:30:78:18:03:e0:95:5f:03:fe:86:b0:ed:
d4:f8:50:5f:50:09:2f:3a:1a:1a:30:e8:01:c8:eb:e0:5c:b5:
5c:35:cf:76:92:55:f1:9a:98:fe:5a:02:a6:e7:5b:bb:a6:cf:
31:cd:79:e1:4c:b1:0c:50:e4:1b:43:a2:56:c4:13:9d:8d:99:
b6:ef:52:df:0a:bd:d5:d5:ab:ab:b3:c7:17:92:32:37:6b:0e:
58:70:b6:bf:1e:89:f6:88:cd:f9:90:61:01:99:45:12:2a:e5:
4f:e0:a0:c4:2b:3a:3d:3d:28:5b:87:4a:93:6b:ed:0e:f6:c8:
7b:fc:c4:fa:6a:2f:9b:1f:72:0e:77:4f:9c:4a:23:45:05:24:
39:36:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:30 2025 by rpki-client