Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAEE0B6CD4B11EFB73EE081762E951A.roa
File: 1EAEE0B6CD4B11EFB73EE081762E951A.roa (raw, json)
Hash identifier: NCduEd2ZuFwX81tAh8gjjTHmjpmfxPdkJju58zZalho=
Subject key identifier: E2:2D:26:91:1E:D5:2E:76:0C:39:16:7E:1F:BD:3F:68:FB:5A:42:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAEE0B6CD4B11EFB73EE081762E951A.roa
Signing time: Tue 07 Jan 2025 22:59:59 +0000
ROA not before: Tue 07 Jan 2025 22:59:56 +0000
ROA not after: Sat 13 Dec 2025 22:59:56 +0000
asID: 984
IP address blocks: 156.246.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65215 (0xfebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 22:59:56 2025 GMT
Not After : Dec 13 22:59:56 2025 GMT
Subject: CN=677db1ef-d01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4b:00:57:64:59:23:0a:9c:58:34:55:7d:74:
25:14:d2:e0:64:5b:df:83:a2:78:d0:c9:28:01:31:
84:42:dc:d2:94:c9:e1:34:1e:c2:c8:42:ad:3a:12:
01:75:e3:3d:ca:bc:8c:9a:55:5c:fa:97:43:e8:82:
82:6d:74:17:a8:4d:d3:4c:e7:04:df:f1:d7:13:1b:
13:e7:49:49:d9:db:bf:d8:b4:37:5a:be:e4:a6:e8:
ed:83:a6:af:8f:44:e2:85:90:b2:ae:16:14:03:6a:
a5:41:1d:03:47:de:b5:01:32:cd:3b:03:0e:cf:dd:
f5:f1:58:10:73:ff:ab:5b:72:ff:20:36:af:a0:62:
2b:ff:51:5d:8a:78:32:c6:63:38:9b:d6:5e:69:84:
a2:9c:a4:66:c1:21:30:e8:cc:d8:c4:de:d4:11:4e:
b1:a8:c5:64:18:83:89:9b:34:42:0f:fd:08:92:4c:
ac:b9:96:30:25:ba:53:53:78:79:ec:64:7e:a7:bc:
c5:46:24:3d:5a:50:e0:eb:e2:24:02:48:c8:e2:48:
e0:e1:80:6c:79:79:13:32:29:de:db:0e:27:aa:32:
43:2f:de:75:d8:06:41:f9:8c:a6:42:11:f0:63:e8:
c9:a8:2d:2f:3e:4b:58:cf:60:0e:d0:b8:96:17:3c:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2D:26:91:1E:D5:2E:76:0C:39:16:7E:1F:BD:3F:68:FB:5A:42:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAEE0B6CD4B11EFB73EE081762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:1f:80:8c:78:08:35:90:ee:dd:39:c3:0b:3a:b2:30:e1:b9:
db:9a:b2:26:ba:81:59:2e:3a:e1:a9:0a:ff:34:2d:df:0b:3b:
72:3c:ce:77:51:b2:70:30:a9:2e:a4:9f:0f:a5:4f:6c:43:75:
4c:06:5e:6f:8e:df:7f:f1:b4:64:23:c0:d3:f8:52:31:26:7b:
53:23:72:39:32:99:7d:74:9e:0a:f3:fb:4b:46:be:f5:ec:7b:
cb:98:e0:74:d9:0c:aa:c9:0e:33:cd:73:d4:e8:03:87:ea:5e:
de:30:5c:24:59:5c:a1:29:71:60:17:72:e3:c0:8b:cc:22:da:
cc:5b:ab:e2:dc:dc:54:05:ac:9c:76:1f:49:34:36:21:ca:87:
ff:f0:80:91:9c:0f:71:2c:e3:a3:ad:44:02:07:8f:44:a6:50:
9a:50:34:ad:ff:8c:e3:fe:30:e2:dd:0c:a9:95:16:a4:22:9f:
80:7e:2b:57:04:a3:d2:7a:8a:0b:f1:51:b9:ce:00:b4:dd:99:
42:be:32:78:5b:0a:f2:49:3a:68:68:ce:bb:35:63:fe:7e:e5:
3d:1f:32:b9:4d:e1:df:5c:35:55:2e:25:8c:08:05:2e:91:28:
5d:c0:a0:1c:65:d7:4e:61:5e:09:72:af:f0:d1:06:2c:a1:7b:
96:19:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:42 2025 by rpki-client