Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2056138CC98911EF97DED6B3762E951A.roa
File: 2056138CC98911EF97DED6B3762E951A.roa (raw, json)
Hash identifier: LfQ2htiy6gK0TSnSzM2GDxz0sN4h5UcEjdQFqAMq/Cw=
Subject key identifier: 10:44:1A:07:F1:03:D2:30:49:E8:DD:57:96:8E:86:7E:39:2F:79:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F59B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2056138CC98911EF97DED6B3762E951A.roa
Signing time: Fri 03 Jan 2025 04:13:46 +0000
ROA not before: Fri 03 Jan 2025 04:13:43 +0000
ROA not after: Mon 13 Dec 2027 04:13:43 +0000
asID: 17561
IP address blocks: 156.233.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62875 (0xf59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 04:13:43 2025 GMT
Not After : Dec 13 04:13:43 2027 GMT
Subject: CN=677763fa-ac51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:6e:74:e8:83:9a:01:a2:96:a4:a9:4b:8a:
a1:1c:e4:dc:c7:f7:b9:2c:b9:df:6b:b9:7b:0e:81:
36:c5:cb:57:67:d0:d1:6a:20:01:c3:a6:d3:57:6e:
b7:55:8c:0a:6a:f4:4d:d0:d3:6f:a0:93:9a:98:e3:
a8:5e:15:5e:2f:68:57:7d:99:02:51:de:cd:8d:2a:
85:df:7a:d4:56:c7:51:08:b5:40:25:48:eb:55:dc:
32:d2:ed:b2:20:f5:63:2b:ee:24:6c:63:27:c0:69:
b8:3c:22:f9:1c:b0:5f:dd:4b:37:dd:57:76:57:b4:
cd:aa:74:6b:67:a5:7c:c4:15:50:29:f9:a8:d3:32:
88:12:87:e0:2e:6f:ef:44:59:a9:9e:46:bd:4b:d3:
48:ea:b2:56:e3:e2:9b:6e:ea:20:e2:2e:45:40:0a:
1d:27:e0:db:50:73:cf:41:3e:15:1c:f6:97:97:99:
6c:d8:56:06:8b:60:a4:ce:58:ef:38:02:38:38:f5:
07:b4:21:29:92:7e:b9:b1:09:35:1c:f0:aa:01:e1:
89:28:23:8a:22:53:55:62:7a:30:2e:cc:bc:5e:83:
68:bb:50:d0:8f:aa:b5:b9:a5:1a:01:fe:e2:ce:1f:
f3:bb:ed:b4:fb:93:13:95:f6:bd:2c:37:4c:19:39:
16:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:44:1A:07:F1:03:D2:30:49:E8:DD:57:96:8E:86:7E:39:2F:79:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2056138CC98911EF97DED6B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.19.0/24
Signature Algorithm: sha256WithRSAEncryption
32:fb:f5:c4:0c:c8:3a:7e:b4:be:2d:df:44:7b:38:f3:54:10:
cc:30:45:c9:6f:93:dd:d5:3d:f8:03:8d:3e:9b:04:e8:1c:f8:
0e:ed:df:5c:51:c9:18:63:49:f2:23:a2:5e:6f:b5:c6:bc:56:
06:9b:b6:0b:25:a6:26:54:5b:b3:e0:fa:f4:87:18:98:ee:fd:
ec:ad:eb:0f:0e:de:19:0f:86:cd:1a:15:d7:ad:72:13:b0:12:
ff:45:35:32:0f:81:13:f4:23:20:12:b8:1e:a0:81:0d:c9:3e:
40:40:16:53:2c:62:5d:2f:cc:fe:ba:22:02:d3:91:0e:1b:eb:
93:49:10:28:01:cb:23:b6:80:85:9e:f6:f3:5c:47:28:58:62:
ba:76:bd:ad:2f:08:e3:d3:04:70:ef:d6:65:71:f5:99:29:ba:
81:be:b9:34:28:35:98:36:0e:94:e1:4e:3e:c0:01:d8:90:ee:
12:03:5e:32:e4:5c:82:c4:17:8b:1f:93:54:b2:14:54:8e:11:
ed:ad:37:fb:bd:7e:5b:2c:47:e6:55:9a:e6:7a:6e:0f:d2:d8:
fc:d1:0a:62:11:67:f7:96:69:81:bf:5b:e2:1a:a7:87:9e:50:
6e:30:07:89:02:f6:73:17:92:23:af:35:07:ef:04:65:f5:28:
8c:0a:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:46 2025 by rpki-client