Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A7377B6CEEA11EFA0D0B959762E951A.roa
File: 4A7377B6CEEA11EFA0D0B959762E951A.roa (raw, json)
Hash identifier: lV4pvK19BKzCTkAw1EjcjFRWQWza24gRksp8I4sdFWI=
Subject key identifier: A6:EE:9C:54:82:E2:DE:FA:C1:85:E5:7C:A5:FC:69:8D:E6:BC:5F:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010458
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A7377B6CEEA11EFA0D0B959762E951A.roa
Signing time: Fri 10 Jan 2025 00:31:54 +0000
ROA not before: Fri 10 Jan 2025 00:00:50 +0000
ROA not after: Tue 11 Feb 2025 00:00:50 +0000
asID: 5065
IP address blocks: 156.255.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66648 (0x10458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 00:00:50 2025 GMT
Not After : Feb 11 00:00:50 2025 GMT
Subject: CN=67806a7a-a38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:6c:e0:af:08:9f:47:61:3e:20:69:1e:7e:
17:75:66:7c:82:8e:00:f9:9b:63:b9:ee:fe:ce:0f:
d0:d6:d4:39:8b:39:ff:1c:1a:57:e5:2c:07:32:ba:
d0:0e:e7:d6:6c:25:40:ca:26:ea:90:49:a5:4c:e1:
10:c8:f4:15:0b:0d:ba:95:c7:68:19:f2:35:c6:cf:
a4:ed:62:ad:15:28:21:7e:9d:ea:7f:e2:b1:fd:d5:
78:03:65:b3:f8:e1:27:a9:9b:d8:c1:e1:5d:3a:4c:
3e:22:81:93:ae:6f:a7:98:35:16:21:bf:28:92:e1:
66:2a:55:36:4c:5c:09:9a:38:57:30:50:48:9b:b1:
e3:d6:18:0a:60:bc:e1:dc:25:6c:06:5e:20:10:39:
68:8c:b2:c2:32:45:1d:22:aa:78:c7:d7:21:30:7d:
68:f3:c2:49:35:f0:a0:7e:db:fc:0b:c6:67:65:40:
86:e5:5d:4f:ea:bf:79:b0:ae:aa:9e:0f:e9:0c:15:
d3:9d:c0:8f:3a:aa:b5:c6:54:97:21:30:e4:6c:26:
28:6f:e7:54:56:25:37:4e:38:d8:28:65:7b:3e:ea:
a0:d5:aa:b1:db:a9:7f:ae:99:fd:af:a8:bc:65:e3:
17:37:f3:56:84:00:6b:e4:ab:c0:8b:b7:a3:3f:9b:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EE:9C:54:82:E2:DE:FA:C1:85:E5:7C:A5:FC:69:8D:E6:BC:5F:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A7377B6CEEA11EFA0D0B959762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:8d:49:a4:18:1e:74:6f:bd:53:e4:a1:21:7b:f5:db:b1:06:
7d:7a:ba:9c:8b:af:07:28:59:f7:93:b2:a4:c1:86:79:58:ee:
85:2f:29:5c:14:75:3e:c0:80:42:24:5d:2c:23:35:52:19:55:
b9:bd:51:cf:b4:34:d3:5d:36:f1:f6:e3:f7:be:c7:bd:ec:5a:
de:6b:ba:15:1f:9b:d1:9f:7a:85:bb:f6:df:83:24:cd:a3:c5:
7f:ca:3b:75:40:94:e8:c4:38:e3:09:94:3f:2c:32:d5:cb:cc:
7f:24:b8:66:ea:12:e6:6e:4d:83:bb:94:7c:4d:ec:76:48:f4:
c6:09:39:2b:a4:60:e5:d8:ec:4e:8b:26:77:3f:0c:e9:6a:8e:
d4:61:53:1e:81:93:4b:5f:e7:26:1b:ff:44:cb:31:1a:29:d3:
7b:3a:99:bf:ff:6a:d6:e4:8d:62:65:ee:8a:cb:84:55:da:71:
ff:05:93:8f:77:01:f3:6a:75:a5:3a:35:47:01:81:ee:3c:08:
f3:e1:16:77:02:21:58:e5:4e:b6:85:62:38:e9:e4:a7:cc:85:
c5:b4:20:26:87:f6:6b:2c:08:eb:0a:5b:8d:8c:f6:dd:cd:4d:
89:b9:ce:38:17:e8:79:4b:1b:48:e6:cd:bc:df:b6:a4:00:df:
e7:1a:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:50 2025 by rpki-client