Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E37C3FAD30811EFA8295F7E762E951A.roa
File: 2E37C3FAD30811EFA8295F7E762E951A.roa (raw, json)
Hash identifier: kOPjQlMKkRoRpfoa43TtjKC0zYExfUVn5/IRQdaaVMo=
Subject key identifier: 53:A5:5D:10:2C:8E:60:73:93:F7:22:3D:E0:C7:CB:FE:23:73:24:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01081D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E37C3FAD30811EFA8295F7E762E951A.roa
Signing time: Wed 15 Jan 2025 06:15:56 +0000
ROA not before: Wed 15 Jan 2025 06:15:52 +0000
ROA not after: Mon 03 Jan 2028 06:15:52 +0000
asID: 17561
IP address blocks: 156.254.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67613 (0x1081d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:15:52 2025 GMT
Not After : Jan 3 06:15:52 2028 GMT
Subject: CN=6787529c-85a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c1:1f:4a:65:a6:98:44:62:d9:fe:a4:8a:de:
9a:6e:20:3a:a2:c4:b8:0f:74:11:cb:c9:f4:a6:86:
0a:d4:6f:9f:71:aa:5d:1f:3d:e8:ca:86:b7:2e:62:
46:0f:4a:a0:10:3d:bc:20:53:06:5f:c2:27:a9:44:
b9:fd:9c:e6:22:0c:e9:6d:18:53:7d:14:60:b2:69:
e4:43:d8:28:c0:50:13:82:0d:93:09:52:de:84:f2:
3c:8d:47:1c:4f:09:35:b1:47:fa:51:ff:d2:58:8c:
47:17:7b:2f:c7:72:19:cb:46:76:02:75:0f:da:e9:
4a:90:dc:85:19:41:92:83:2e:92:76:0e:8b:02:ea:
fc:50:fa:4b:9c:1a:46:7a:ff:03:c6:96:16:b7:73:
fd:cb:d1:9d:9e:c0:81:a7:bf:81:8c:51:3a:5e:50:
3d:95:8f:43:cd:65:47:7b:26:ab:6e:85:75:28:65:
d2:01:b7:22:c2:30:75:d0:84:c1:9a:d8:9b:9e:d8:
02:82:11:4b:84:09:74:c7:e2:0e:a1:6f:80:62:d9:
9f:82:52:e8:4a:d0:3e:72:09:c7:96:f9:d2:e8:3b:
7a:6c:00:03:4a:e4:60:0b:94:71:3a:b3:32:f4:27:
24:9b:8c:34:a4:97:3e:13:36:5d:67:c2:b5:47:b7:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A5:5D:10:2C:8E:60:73:93:F7:22:3D:E0:C7:CB:FE:23:73:24:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E37C3FAD30811EFA8295F7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.57.0/24
Signature Algorithm: sha256WithRSAEncryption
03:79:79:fa:43:73:df:61:33:61:b2:6c:57:ad:a5:96:58:bc:
e5:35:7e:6c:c9:7a:88:78:cf:80:d9:a9:65:a7:66:fc:47:58:
65:6d:52:d1:13:91:ec:79:94:3c:a1:5a:cc:5f:75:81:31:fa:
b1:40:17:a5:3e:81:02:31:6e:b9:fd:94:81:86:54:1c:f5:a4:
48:b4:2e:a1:c1:7b:ca:bf:a2:bc:91:00:18:00:e2:d8:63:20:
aa:4b:32:a3:dd:1f:4e:ff:90:90:fa:fb:34:de:6f:68:8a:b1:
dc:6d:f7:80:48:9d:49:de:bc:93:2c:bd:39:d8:b7:00:7a:80:
b5:23:0c:f7:2c:ed:70:5c:d0:0e:49:bc:2a:0c:ee:6b:5a:ce:
1f:4c:9f:58:3b:79:18:1f:9e:a2:14:7b:fd:81:af:c6:2a:59:
31:46:d4:6a:c2:fb:ee:be:ea:9e:f5:10:8f:37:58:3a:bb:21:
f8:75:7d:07:af:a6:a6:e0:f3:7a:31:13:99:f2:30:41:10:7c:
00:4b:4f:71:b2:a1:d5:fb:7f:44:26:89:6a:f1:88:7b:ad:74:
1d:3b:62:2f:d4:70:3a:c8:2f:ba:60:7b:61:6f:ad:1a:75:5f:
00:2b:c6:f8:30:d6:c4:f9:a4:eb:2f:e7:76:05:95:7a:8c:b2:
fe:b3:18:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:41 2025 by rpki-client