Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A51A10ECDCB11EF850999BE762E951A.roa
File: 1A51A10ECDCB11EF850999BE762E951A.roa (raw, json)
Hash identifier: xZxa87ydLBCEshfuUHrePgtxQiAkh3wN88PSbjawE4s=
Subject key identifier: B4:DC:65:A9:A4:C0:46:1D:1A:0B:13:B6:07:A0:26:C0:99:62:12:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A51A10ECDCB11EF850999BE762E951A.roa
Signing time: Wed 08 Jan 2025 14:16:08 +0000
ROA not before: Wed 08 Jan 2025 14:16:04 +0000
ROA not after: Tue 16 Dec 2025 14:16:04 +0000
asID: 984
IP address blocks: 156.249.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66008 (0x101d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:16:04 2025 GMT
Not After : Dec 16 14:16:04 2025 GMT
Subject: CN=677e88a7-8469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:dc:d0:79:94:5f:a0:91:da:d7:64:52:ed:
c6:e2:59:a2:8b:98:8e:11:e7:a2:e8:ca:15:2d:c3:
01:ce:ef:83:13:a9:70:1c:3a:11:a1:d9:dd:b8:cf:
78:59:64:cb:2a:0d:12:a4:60:c9:b5:40:49:5e:ff:
35:51:7e:3c:f1:f0:e6:41:28:cd:7a:78:47:69:a7:
b8:32:3e:ff:fb:2f:2f:83:e8:8c:83:84:25:77:25:
f4:6c:8f:00:70:cd:77:4b:05:c0:09:33:3e:80:d8:
a9:c8:8b:ae:00:23:92:87:c2:01:30:3e:18:6b:80:
53:c2:b6:ac:f4:58:06:22:81:b9:eb:a5:c1:ce:03:
61:92:66:4e:8e:fe:9c:b5:83:46:d5:0f:bc:9e:ad:
53:6d:79:7c:7f:f0:7a:bd:c5:ee:45:87:12:1c:32:
a4:66:93:08:09:b5:3e:60:60:4c:82:5e:48:9f:5e:
74:fa:f2:44:e6:7f:08:6f:2a:ff:81:36:a9:8c:eb:
18:e4:91:cc:16:dc:75:85:85:71:ea:ae:11:12:b6:
70:89:56:29:12:43:e1:9b:16:24:65:02:f6:a4:93:
7d:95:72:a4:27:2b:a1:82:9f:1c:85:70:2b:e3:64:
c5:38:5d:80:59:53:99:34:91:c6:20:9b:49:9b:1a:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:65:A9:A4:C0:46:1D:1A:0B:13:B6:07:A0:26:C0:99:62:12:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A51A10ECDCB11EF850999BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d8:5d:3f:e1:12:82:d5:0c:3e:b3:d6:39:e5:06:c0:63:ce:
26:46:88:63:5c:d4:0b:c0:15:02:e7:5d:6a:43:a4:bc:9c:b9:
16:88:18:8a:39:32:0b:ec:45:2e:b6:8d:df:b5:7d:10:0c:11:
f3:7e:af:a2:d3:b9:84:36:7d:3c:2f:4c:26:69:d8:09:78:cd:
52:dd:b9:53:70:23:30:7a:41:38:89:d8:28:ec:7c:a6:1d:9a:
99:bd:f6:7c:91:d2:21:2b:21:cd:64:ee:d9:a6:86:a5:f7:85:
b6:a4:5c:74:e6:7f:12:ed:5f:7d:88:60:d5:81:eb:c8:62:61:
38:f4:ea:b2:b6:fb:83:1c:9e:aa:81:ba:b4:7c:a7:5e:55:90:
00:5a:79:a3:24:76:4b:55:41:40:d4:55:71:10:31:45:e5:fa:
47:fb:e1:ec:7b:d9:52:62:52:99:d6:ec:bf:eb:73:5f:1c:ba:
9e:71:ce:50:45:6a:c0:62:54:9c:c0:67:48:dd:22:7e:58:f4:
46:c5:f2:a7:7f:6e:70:be:f5:72:c0:b7:7b:d0:b3:87:d0:35:
14:92:75:a6:4c:7f:c8:6c:87:1d:d4:14:b3:09:7e:50:ab:7f:
18:ee:0a:e4:cd:b7:97:20:f2:c9:fa:7a:66:ee:0f:ea:c8:51:
9c:fa:08:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:27 2025 by rpki-client