Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51975210CD9B11EF82B3E990762E951A.roa
File: 51975210CD9B11EF82B3E990762E951A.roa (raw, json)
Hash identifier: 01apSlQNmXx/iuc9F14inRWMEk2qn6+78OeiDTtG5S8=
Subject key identifier: CB:2B:1B:30:F2:C2:2E:3D:C4:D8:94:DA:8D:65:18:69:92:84:F3:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010085
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51975210CD9B11EF82B3E990762E951A.roa
Signing time: Wed 08 Jan 2025 08:34:04 +0000
ROA not before: Wed 08 Jan 2025 08:34:01 +0000
ROA not after: Tue 16 Dec 2025 08:34:01 +0000
asID: 984
IP address blocks: 156.249.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65669 (0x10085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 08:34:01 2025 GMT
Not After : Dec 16 08:34:01 2025 GMT
Subject: CN=677e387c-ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:de:c8:95:56:a7:c2:f1:11:58:bf:52:a1:
34:17:73:50:32:09:49:ad:f5:15:91:8f:08:e0:1a:
7b:e3:b1:ec:05:4d:e6:0b:52:3c:25:ea:b7:ff:73:
a9:a9:00:a7:48:b8:50:b6:01:35:64:27:df:f8:16:
c6:c0:f2:b3:44:c6:63:13:52:d3:5f:f8:c6:e8:a9:
d9:42:f2:b1:1f:e6:6e:44:2f:59:e1:95:51:96:ab:
28:31:9c:8d:e0:75:9c:37:28:3c:ea:88:3a:f9:03:
85:1a:8a:33:0b:37:74:fa:5e:40:5a:34:d5:a7:cc:
f5:8a:b2:d5:bb:f8:3a:6e:f5:97:a0:13:6b:9c:58:
41:44:08:fe:6a:67:87:89:d8:e9:49:3e:54:47:34:
49:85:bc:96:8c:65:09:ef:dd:19:20:ce:3c:c7:51:
10:04:bf:9f:96:c2:68:76:db:12:17:ca:ef:8e:31:
0e:15:e3:2a:2f:44:ac:25:06:d1:fc:c6:96:ec:64:
42:06:ad:d0:4f:39:96:d4:b7:5b:a3:df:19:a8:ca:
98:5c:5a:fd:4c:7c:f1:b2:d2:98:fe:f2:f9:13:53:
af:0e:f8:13:4d:19:18:2c:92:d3:96:f1:24:66:e2:
a1:1c:0e:f4:58:17:d2:8e:43:e4:d0:b6:d0:16:6e:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:1B:30:F2:C2:2E:3D:C4:D8:94:DA:8D:65:18:69:92:84:F3:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51975210CD9B11EF82B3E990762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.86.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:27:e4:2a:1d:73:a5:19:81:55:a8:b0:4b:e3:e3:01:8b:86:
6f:ab:b2:b0:75:ca:e2:d9:7e:77:e5:32:e2:6c:09:7a:88:4e:
a9:e2:b3:07:75:89:7d:60:a6:99:e3:a4:2b:86:29:8c:13:8f:
2b:70:6a:73:e6:64:74:a3:5e:e4:51:5b:32:73:eb:36:c9:be:
df:74:4c:55:b8:f5:8d:0d:10:75:78:7e:71:fd:06:d2:9c:e8:
e5:95:95:f5:d1:ba:d5:2e:c6:b9:5f:be:1b:04:9c:1d:4e:13:
61:ff:7a:05:9f:9c:c7:76:f4:04:ac:02:7f:46:1d:97:6e:d2:
e0:8f:77:fe:1b:54:61:c2:bb:58:39:2d:c0:08:ee:66:62:e8:
fc:87:5c:46:22:50:e2:b8:c1:ca:cb:49:99:3c:62:20:58:13:
37:f9:2e:1d:af:39:e7:96:95:10:ef:88:e2:d7:0e:a7:0a:e0:
73:fa:47:eb:26:3c:cd:f0:3b:b5:91:b0:53:4b:65:6c:19:12:
a3:fe:aa:15:61:5e:e5:85:3f:ad:27:4a:5b:bd:88:cc:8b:d0:
34:c2:5f:ac:c7:1e:66:12:d4:9e:cc:c0:10:1c:20:51:b1:70:
e7:b3:32:e2:c8:08:ae:6d:60:76:a2:3b:17:9b:f4:51:25:cc:
d2:50:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:35 2025 by rpki-client