Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C00D6E6CD3F11EFAE2B27B5762E951A.roa
File: 1C00D6E6CD3F11EFAE2B27B5762E951A.roa (raw, json)
Hash identifier: hi4PhM12odhM/1YEfH3mF+E9ZBLCaTTP4Ma3PfmMNTM=
Subject key identifier: 2A:D1:62:3C:47:2A:4E:D5:EC:DF:06:1C:6D:C0:9B:8C:F0:82:0F:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C00D6E6CD3F11EFAE2B27B5762E951A.roa
Signing time: Tue 07 Jan 2025 21:34:01 +0000
ROA not before: Tue 07 Jan 2025 21:33:57 +0000
ROA not after: Sat 13 Dec 2025 21:33:57 +0000
asID: 984
IP address blocks: 156.243.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65121 (0xfe61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 21:33:57 2025 GMT
Not After : Dec 13 21:33:57 2025 GMT
Subject: CN=677d9dc9-1f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:85:f9:7a:41:90:5d:52:42:6a:8b:19:ca:f3:
e0:24:b0:48:83:ae:7a:48:fd:7c:a9:64:4a:38:d8:
48:c8:20:06:7b:8f:d4:7e:a0:9b:65:49:0f:f1:da:
0b:6f:75:6d:78:3f:b7:c8:b1:b1:b1:c3:1f:d7:43:
d6:96:d6:6f:b3:ae:8e:b1:12:8e:39:ce:f1:bd:bc:
ce:54:00:51:58:42:a5:64:b6:2a:b5:e4:5c:62:f6:
30:da:c3:43:9a:fa:0d:43:c7:32:f4:d8:d5:17:41:
7e:06:1b:b8:08:ef:7c:02:1c:c0:3d:04:d0:0b:c4:
dd:fe:b1:4f:fc:16:d7:63:73:cf:19:20:19:e8:66:
f1:28:59:cb:72:83:60:58:c2:01:eb:df:4a:00:88:
92:8a:6c:45:f7:30:dc:1c:9a:4a:2a:d2:20:b8:ba:
f2:92:d1:94:1d:83:c2:12:e4:0c:e6:2a:45:ef:f3:
90:2a:84:f4:6a:46:ac:34:87:01:e9:b8:b8:2d:12:
78:e9:9f:c6:06:3e:df:bd:e6:65:c6:a2:10:65:d4:
3c:65:c7:71:9c:b4:9e:0c:10:0d:19:3f:07:79:fa:
72:30:01:51:90:1d:28:52:bc:4a:01:2c:a9:39:d9:
ee:c3:ca:67:20:e6:c7:b3:77:18:99:0e:39:17:52:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D1:62:3C:47:2A:4E:D5:EC:DF:06:1C:6D:C0:9B:8C:F0:82:0F:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C00D6E6CD3F11EFAE2B27B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.89.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ba:57:9e:c1:f1:db:14:ff:ba:76:a2:1e:bc:08:a0:48:17:
0a:64:f6:3e:ba:b5:5a:fe:45:04:62:e2:02:b1:83:25:61:11:
21:eb:ea:07:c8:5f:9d:c9:96:83:b5:75:00:40:c3:24:7b:df:
69:be:9c:ca:20:74:1b:7b:a2:48:8d:63:54:b5:be:3a:99:56:
f5:0c:5c:3a:4f:ac:91:ab:9f:04:0d:e6:ea:7a:c5:fa:83:f1:
ce:da:fd:06:24:f8:a5:dc:46:91:27:d6:9e:4c:d4:48:96:0b:
cb:7c:42:68:ab:3a:bd:89:b7:da:54:3f:4c:6a:07:ae:67:85:
ac:99:ac:23:58:19:87:5c:fa:3f:c7:7e:28:e5:ff:0a:47:35:
ef:01:95:e8:04:28:35:cc:60:66:75:22:f1:e2:1a:a0:2f:66:
aa:1d:db:5a:41:5e:ec:4f:0d:ed:9f:7d:04:0c:7b:6c:51:2a:
67:b1:f6:e5:cb:23:8a:50:32:7e:e1:fa:b2:9f:c9:3d:bb:d9:
ae:12:ed:0e:ba:96:a2:dd:42:e9:ad:b9:63:e1:ae:62:5e:d3:
a1:ac:73:f5:42:73:38:ed:37:ec:87:6d:cf:67:40:c8:90:32:
36:10:73:3c:e2:bb:ef:99:47:10:6b:00:b3:9e:f6:8e:18:d1:
77:c0:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:51 2025 by rpki-client