Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F5B9052CE3C11EF920E529A762E951A.roa
File: 2F5B9052CE3C11EF920E529A762E951A.roa (raw, json)
Hash identifier: 86hzT4GvNokW2tcWbreEJCiTitPCqIse+xeT+zgmfZA=
Subject key identifier: 4D:D4:E4:F7:32:82:12:C6:C7:2E:72:F5:66:42:4F:BC:1E:F7:CE:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01024D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F5B9052CE3C11EF920E529A762E951A.roa
Signing time: Thu 09 Jan 2025 03:45:36 +0000
ROA not before: Thu 09 Jan 2025 03:45:32 +0000
ROA not after: Fri 09 Jan 2026 03:45:32 +0000
asID: 17561
IP address blocks: 156.247.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66125 (0x1024d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 03:45:32 2025 GMT
Not After : Jan 9 03:45:32 2026 GMT
Subject: CN=677f4660-2e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:c7:87:3f:88:a0:4a:a1:17:19:51:99:e5:
ab:db:d8:35:40:b5:c4:0a:10:9e:bb:5a:b3:47:23:
7b:1b:d6:91:48:14:2e:a9:08:e7:63:33:1c:58:21:
ad:bf:16:06:29:d7:65:07:ca:72:98:dd:77:9e:02:
40:b5:39:fe:fe:3e:f1:65:97:e4:4e:ba:7d:54:f1:
28:21:5e:63:b7:59:93:3d:f0:09:63:9c:51:87:48:
23:15:ff:fb:fd:d8:18:dc:6c:3c:20:6b:a2:e3:11:
f2:75:a7:18:47:ac:b5:64:8a:eb:f6:07:e0:3f:b6:
6e:e6:2e:42:14:f3:d4:ac:6f:2a:dc:cc:99:a6:06:
f5:20:89:6f:a3:76:a0:9a:19:f8:8c:ec:e1:a0:54:
02:af:e4:24:00:4a:03:ca:c1:4f:46:15:7a:04:91:
f8:24:00:49:ed:6a:dc:57:39:af:b0:9f:32:cf:f3:
d3:ab:2c:79:42:9f:3b:23:d7:fd:5a:7c:ec:2f:56:
08:60:88:2d:0b:fc:f3:eb:db:36:60:48:9c:58:93:
88:cd:ed:87:4b:5a:f4:e4:b4:58:bd:99:36:52:7a:
cb:4b:4e:b6:fa:fe:c1:0a:9c:44:2a:d5:08:b7:d9:
40:96:9e:fc:79:5b:63:c7:f1:cd:ff:09:6a:cc:8f:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D4:E4:F7:32:82:12:C6:C7:2E:72:F5:66:42:4F:BC:1E:F7:CE:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F5B9052CE3C11EF920E529A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.58.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a0:0d:42:52:18:f5:9b:9b:1a:4b:10:29:b2:5c:3f:a9:9a:
d1:e4:eb:c7:3a:3f:8d:dc:19:c1:ba:40:4b:45:c3:c4:9c:53:
e9:a1:dd:99:c7:18:82:da:8d:f9:91:48:91:cd:92:8b:ea:0d:
5e:ac:c4:4f:88:39:ed:5b:90:db:12:aa:07:8c:16:46:ea:e8:
09:93:3b:45:1c:a7:a7:7e:6a:96:a5:ce:3e:24:6c:5e:e6:94:
c9:f6:ba:47:ee:86:cd:2c:0a:91:78:da:c2:97:e5:01:1c:f2:
76:f3:c8:3b:0e:c6:cf:a9:bb:f3:45:9f:be:3b:a8:fa:9a:64:
e8:25:6c:eb:d5:d7:16:91:3c:03:99:de:21:f5:37:a5:f2:9d:
f4:51:62:e7:63:88:44:b1:bf:99:9b:f5:9b:7f:1e:75:ed:f2:
0b:30:2d:61:e5:a6:ea:fd:61:ce:8c:3a:a3:d0:dc:ad:e5:4c:
48:46:37:a1:68:2b:ac:30:7a:21:99:01:cd:ee:73:25:ba:34:
79:d8:8b:c9:f8:02:0d:77:1b:be:d5:1d:94:72:06:fe:35:7a:
6a:41:17:6e:a8:0a:a6:18:4d:2f:7a:45:2f:05:05:8a:1a:b5:
e6:8d:8f:93:75:76:cd:6f:3c:a6:dc:35:dd:d6:50:61:ed:b3:
78:cd:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:42 2025 by rpki-client