Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22164C72CDAE11EF90F1BA87762E951A.roa
File: 22164C72CDAE11EF90F1BA87762E951A.roa (raw, json)
Hash identifier: lt5+hMrvao/VAlPkmZVC+sdQjkvGBWztGZR5sOLGALQ=
Subject key identifier: 28:F8:08:40:F0:13:4B:B9:A4:7E:57:FA:65:AF:46:DB:29:42:C1:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010169
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22164C72CDAE11EF90F1BA87762E951A.roa
Signing time: Wed 08 Jan 2025 10:48:45 +0000
ROA not before: Wed 08 Jan 2025 10:48:42 +0000
ROA not after: Sat 13 Dec 2025 10:48:42 +0000
asID: 984
IP address blocks: 156.255.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65897 (0x10169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:48:42 2025 GMT
Not After : Dec 13 10:48:42 2025 GMT
Subject: CN=677e580d-d1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:e3:26:2e:86:e5:a0:d4:f5:6c:5a:30:95:
ab:38:b9:7a:2b:d5:6c:e3:fc:97:09:c7:ad:d1:05:
53:4d:e5:b1:93:74:bf:6b:08:20:16:2a:7b:bd:9f:
68:31:9f:c8:2b:88:41:2f:1c:ce:94:81:f7:c8:bb:
ba:a2:0e:41:00:e5:9e:20:15:2a:75:ac:be:43:e6:
37:06:11:61:23:42:00:ec:b9:c6:b8:e1:ac:66:8d:
bf:4c:8e:78:a7:e4:8d:19:65:9f:95:a0:e3:54:cc:
6d:65:34:2f:ea:df:77:f0:9d:59:96:c3:6c:c1:74:
14:f7:8b:c9:3a:3e:af:65:7f:e0:e0:b0:ea:8e:ea:
49:b2:a3:c6:61:d3:17:a1:44:26:71:2d:5d:3e:ca:
de:71:2d:ca:22:12:22:6b:be:b1:ec:bf:3e:c1:6c:
f6:38:11:e2:5b:81:0c:85:25:a1:61:0e:e0:7d:5d:
c0:d9:62:97:0f:4a:e5:8e:11:f6:72:c8:94:3c:9b:
5c:d6:b2:4f:be:26:04:3e:12:5b:95:57:ee:fa:3b:
13:a1:d8:eb:37:f3:4a:65:4c:81:6b:e3:76:0b:51:
60:d0:dd:94:b5:29:11:8a:63:a2:09:b5:58:c9:50:
78:4d:b0:35:64:c9:43:c2:e1:fc:76:87:a8:48:95:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F8:08:40:F0:13:4B:B9:A4:7E:57:FA:65:AF:46:DB:29:42:C1:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22164C72CDAE11EF90F1BA87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ca:a2:a5:05:61:53:f2:8b:54:bd:af:cb:87:20:c3:f1:f7:
b9:9e:ab:4b:4f:8b:e2:1b:64:52:83:58:a8:74:14:14:31:4b:
27:4c:62:a4:86:9b:d6:d2:4b:21:46:31:f1:a6:d4:ea:bd:63:
1d:42:1a:0c:15:d4:fe:82:2a:40:da:bd:b9:10:b8:f8:1f:c4:
9f:2b:b4:fd:95:cb:e6:f4:8a:b1:af:1d:bd:dd:2d:87:cc:40:
62:0d:b5:4e:a8:c9:3e:6e:15:0c:96:92:cd:c5:44:32:36:56:
86:e3:d9:a0:85:5f:f4:b0:81:2f:19:63:11:17:21:f4:63:a3:
5c:69:95:ee:e6:61:58:3a:87:88:1f:5f:a5:2e:06:1e:7e:fa:
15:af:80:5b:af:42:e5:9d:82:53:08:e9:a1:56:e0:fc:04:b3:
11:2d:11:48:89:b7:d7:6d:41:46:61:89:09:9a:83:aa:a6:09:
f9:9b:50:da:82:80:9f:43:45:f0:f4:f4:67:2c:40:26:af:31:
f8:37:7c:54:93:1c:cd:12:57:25:d8:25:9d:1e:54:b9:1e:49:
4a:e0:7a:cc:62:fc:99:a3:7c:83:76:db:0b:2e:5a:73:9a:a6:
81:75:c7:b7:06:0a:30:ed:23:d4:13:e5:0e:27:70:15:3a:f1:
29:fa:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:45 2025 by rpki-client