Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1648DFD2CDC611EF9C7A03A0762E951A.roa
File: 1648DFD2CDC611EF9C7A03A0762E951A.roa (raw, json)
Hash identifier: DEjsxEvClHJNeitEfUxsV48/dtFmBey//1yksdwG+Sk=
Subject key identifier: AE:EE:CE:45:E1:07:F0:D7:08:9F:5E:70:6F:68:71:AC:C4:DC:D1:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01019B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1648DFD2CDC611EF9C7A03A0762E951A.roa
Signing time: Wed 08 Jan 2025 13:40:13 +0000
ROA not before: Wed 08 Jan 2025 13:40:10 +0000
ROA not after: Tue 16 Dec 2025 13:40:10 +0000
asID: 984
IP address blocks: 156.249.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65947 (0x1019b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 13:40:10 2025 GMT
Not After : Dec 16 13:40:10 2025 GMT
Subject: CN=677e803d-ad35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:fc:99:08:95:6b:ce:d3:6d:f5:e3:6d:54:
59:7b:6d:e8:1e:7b:db:98:74:7b:9b:92:47:79:14:
3a:bd:c3:6c:ad:28:6c:0c:18:36:9e:f3:22:4b:70:
64:79:27:e0:77:c9:51:fe:ff:84:28:90:f0:a5:30:
76:a9:79:ba:4b:f9:81:08:9a:7b:b6:9d:59:37:d6:
2a:e7:98:1d:47:78:8b:9a:b2:91:08:62:31:62:d8:
b4:e8:f1:47:94:37:25:0c:23:ab:48:c0:9d:7a:4b:
0d:90:42:3b:89:63:c2:2a:25:06:4e:ae:3a:1e:8b:
b8:14:66:b3:07:7b:08:78:9c:45:a5:c1:16:67:67:
74:12:99:60:08:59:4b:3f:21:27:fb:a8:2e:5f:64:
cf:0e:24:6c:34:d5:9b:ed:67:f3:7e:91:48:c7:74:
5f:b7:d2:26:03:fa:1b:bc:66:dc:18:b8:5b:c7:af:
2a:46:e7:ff:91:61:fd:13:69:36:7d:ca:f8:56:0b:
64:06:43:66:d3:3b:0b:80:2f:39:61:37:27:41:ce:
9a:26:45:2a:a3:95:da:f1:cf:d9:c4:d5:cb:7e:8c:
51:3f:f0:aa:74:7f:34:11:f8:cf:a5:a9:a3:50:64:
a0:9b:82:8b:93:a3:57:8a:d4:e4:dd:4b:dc:84:a6:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EE:CE:45:E1:07:F0:D7:08:9F:5E:70:6F:68:71:AC:C4:DC:D1:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1648DFD2CDC611EF9C7A03A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.2.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d7:9d:4c:7e:3e:99:30:d6:a7:bf:6e:73:fa:0e:82:5a:bf:
9c:8a:f7:78:e9:72:6f:7e:98:53:f0:84:ea:c7:29:03:5b:58:
d7:e4:2f:7b:89:90:d4:ad:37:54:e6:e4:8c:46:af:b7:22:ff:
14:0a:5c:57:7a:2a:a3:a0:1d:ec:28:69:b9:3c:aa:cd:4e:95:
a3:ca:d7:0d:c7:87:7d:da:2f:75:58:a1:73:3c:fe:39:e5:cf:
de:28:fc:c4:96:73:93:8a:d9:23:c8:72:33:4b:9e:1c:0d:f7:
43:25:69:b8:7c:32:3f:c9:c6:f4:b6:4d:34:ba:5f:43:0c:5d:
e2:bb:4a:27:0f:23:d2:9f:e5:3d:f8:90:2f:46:d2:5d:9d:33:
93:ee:08:f0:13:26:b9:55:09:46:dd:d5:33:ef:8d:47:7f:0b:
fe:11:cf:86:db:80:c9:13:70:f5:88:ad:42:7a:d6:2e:2e:c5:
9b:f1:10:4f:5c:73:19:6b:f0:f7:61:b7:cd:d0:a0:f3:aa:2b:
96:ed:9e:63:45:dd:c2:2c:33:65:c0:80:5a:f6:fe:62:17:6a:
85:ef:34:f7:6e:7c:48:75:97:b1:c0:db:89:0c:5a:a1:51:40:
b5:d1:59:f0:82:0c:2b:0c:91:45:e6:72:b5:8f:77:cd:0a:05:
2f:58:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:14 2025 by rpki-client