Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/510EDD4CCD4911EF9C7B8775762E951A.roa
File: 510EDD4CCD4911EF9C7B8775762E951A.roa (raw, json)
Hash identifier: VElZn9ku2VIUW56kHk+/2rnbeQjo8ncN+zbrj6BsrmI=
Subject key identifier: 14:38:CA:EB:EB:60:8F:4F:2B:D9:E0:9E:9F:CF:3E:B7:C5:F8:F0:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/510EDD4CCD4911EF9C7B8775762E951A.roa
Signing time: Tue 07 Jan 2025 22:47:05 +0000
ROA not before: Tue 07 Jan 2025 22:47:01 +0000
ROA not after: Mon 13 Dec 2027 22:47:01 +0000
asID: 17561
IP address blocks: 156.246.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65201 (0xfeb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 22:47:01 2025 GMT
Not After : Dec 13 22:47:01 2027 GMT
Subject: CN=677daee9-0b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:a9:3c:3c:98:82:fd:50:6f:b6:c3:55:2f:
f4:33:c6:7c:6d:7e:53:49:84:4e:be:f5:0f:64:f5:
ac:9d:44:11:ea:b5:f6:9a:45:55:2e:8d:08:94:f8:
5f:c4:6f:f4:d7:c2:e6:f8:c4:f6:24:47:ee:b6:a9:
38:b4:ba:52:aa:8e:37:d5:90:07:3c:13:2a:82:ea:
31:0d:4d:f4:5b:59:4e:36:62:7c:9f:6a:09:e4:ca:
21:73:e8:0f:a0:49:32:79:36:ee:15:ba:ae:22:86:
cf:5c:6b:e6:c9:97:d0:fe:f4:0e:44:86:0a:48:b5:
8d:76:17:9a:35:be:7c:66:8c:1b:21:5e:42:4a:a8:
6d:57:83:27:83:99:d1:80:59:cf:bd:99:64:4b:ef:
fe:b5:6d:e3:c1:09:4f:e9:89:98:db:22:7a:b3:28:
f9:2a:dc:ec:0c:8f:73:62:21:a9:e7:0a:67:db:be:
70:a0:d4:3e:58:c8:c9:55:c4:97:c8:98:56:2a:50:
ae:b3:9f:fa:41:16:28:84:65:79:62:7f:b2:22:aa:
4d:61:2c:aa:d9:91:b3:83:3f:3a:05:49:50:58:d8:
ed:b9:42:cc:31:6a:f5:67:5a:41:c3:df:22:7a:9f:
5a:c3:11:ce:f9:a7:8e:b7:d2:9a:17:21:41:a8:0b:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:38:CA:EB:EB:60:8F:4F:2B:D9:E0:9E:9F:CF:3E:B7:C5:F8:F0:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/510EDD4CCD4911EF9C7B8775762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.29.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a6:76:9e:fe:2e:61:f2:88:eb:7e:a2:16:92:3c:75:d0:89:
af:e4:a5:13:48:b0:08:6a:e7:be:58:cc:fd:ad:5c:17:bf:63:
df:1d:a4:ab:e3:1c:69:ad:76:9e:40:bb:40:43:32:0e:a3:5b:
8c:2a:64:7e:1c:eb:92:af:51:57:ff:cd:89:a7:86:d4:50:32:
f7:6f:33:dd:c1:0c:46:78:0f:6b:76:c3:a0:8c:c6:a1:1f:d1:
3e:22:7e:fd:f5:ca:7b:78:83:1a:5d:14:1c:87:b2:36:14:1e:
17:31:04:a3:c5:95:98:e0:a3:23:d1:49:20:76:fd:45:66:a0:
9e:8d:db:86:13:99:03:99:8c:e6:a9:80:b3:e1:0d:6f:e8:2c:
21:29:84:ff:78:09:ec:75:5e:e0:d2:04:7f:1a:92:b3:20:7f:
ce:80:5c:77:28:bc:a7:04:37:af:85:ff:57:30:c7:38:ae:05:
97:f0:bf:37:5a:18:f8:55:fc:32:5e:b9:08:c6:84:76:e5:79:
0a:1a:af:e3:24:e4:c9:33:63:c8:7d:a4:19:e7:73:40:60:73:
f7:8d:c2:2d:d3:1a:85:cc:28:78:02:f1:1f:1b:b5:e8:c7:c2:
1b:7d:60:92:cd:fe:c4:cb:8f:7c:ac:4c:e9:55:a9:d8:4c:28:
87:92:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:23 2025 by rpki-client