Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5263DE94D2F911EFAA0DAFA0762E951A.roa
File: 5263DE94D2F911EFAA0DAFA0762E951A.roa (raw, json)
Hash identifier: h8+xXTsL8VEOhYy1jctcJhvjAYHYRMZPDeM2TPr8hiA=
Subject key identifier: 46:CB:60:B3:7C:1C:0A:48:37:34:BE:76:9A:5D:E1:99:73:68:F2:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0107B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5263DE94D2F911EFAA0DAFA0762E951A.roa
Signing time: Wed 15 Jan 2025 04:29:34 +0000
ROA not before: Wed 15 Jan 2025 04:29:31 +0000
ROA not after: Sat 03 Jan 2026 04:29:31 +0000
asID: 984
IP address blocks: 156.254.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67513 (0x107b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 04:29:31 2025 GMT
Not After : Jan 3 04:29:31 2026 GMT
Subject: CN=678739ae-c570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8d:ed:c8:b6:20:01:9a:35:06:f8:9a:b2:4c:
a7:74:54:e9:b8:b9:40:9a:66:0b:ff:45:d0:11:76:
ae:cc:ea:50:c1:96:08:9b:ae:e9:b0:7c:63:e7:c8:
58:63:ad:41:45:c5:1c:6a:b5:a2:48:0c:e9:14:f5:
fc:44:4e:e7:a6:87:2d:e4:c7:53:13:59:b9:9b:b8:
18:19:10:04:89:3d:78:4a:28:51:fc:01:3b:54:5e:
7c:03:99:5e:85:4e:a4:ac:18:fd:2f:1a:ed:10:c5:
66:4f:35:66:84:81:f1:0a:96:ec:a4:ce:1b:73:b6:
4e:6d:d9:df:98:6a:c7:f0:d9:67:aa:82:92:8a:69:
f8:42:f3:b1:7a:15:16:a9:e0:4e:4e:8e:92:41:a8:
5d:76:65:e3:3d:8f:a8:94:d7:db:d3:4f:f5:21:8c:
d3:69:b3:06:da:04:e1:79:a2:5b:ca:32:7a:74:47:
b2:9c:39:c9:c0:0b:eb:81:78:5f:f9:c1:8e:e2:df:
8b:32:59:d1:23:1a:f2:e3:36:15:6a:7d:99:37:17:
23:aa:02:ab:35:1c:1a:2c:92:9e:c5:1f:58:37:38:
75:08:a4:0b:71:35:7e:b6:2e:da:85:77:24:c2:75:
8f:10:38:7d:a1:66:3e:de:9b:56:76:be:69:9c:d1:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CB:60:B3:7C:1C:0A:48:37:34:BE:76:9A:5D:E1:99:73:68:F2:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5263DE94D2F911EFAA0DAFA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:bd:f5:12:ad:54:10:6f:ae:14:f0:5c:f7:72:32:17:3d:98:
28:c4:5d:24:07:54:cb:32:77:19:ee:85:83:d4:ba:a0:fc:ac:
f2:74:d1:8d:5f:61:6c:63:2d:de:ee:01:52:de:27:cc:42:cb:
25:7a:49:03:0b:93:6d:67:c1:7e:f6:55:89:50:a3:0b:8e:e9:
02:2c:6d:eb:12:20:81:e4:04:c0:95:37:eb:43:1c:71:90:74:
97:24:65:58:ad:65:7c:d9:7d:96:e7:14:49:bb:98:bc:40:83:
b7:58:24:d5:ab:dd:ab:11:3a:22:19:9b:b4:e2:98:2d:9c:51:
74:92:76:5c:4d:74:04:08:d7:24:ad:0e:46:1e:c9:36:97:a8:
22:2d:b0:43:0a:09:bb:2f:c0:7a:5b:95:4c:b6:81:20:ad:83:
e1:44:9d:76:b6:f6:38:61:50:9f:dd:08:3c:5f:cc:ac:64:d0:
93:15:6c:2c:84:2c:9c:2b:61:43:d1:1b:95:bf:41:e6:6d:74:
86:6b:31:05:43:85:ea:43:df:bd:ef:71:74:c5:9e:c5:95:4b:
7a:14:f3:7f:20:05:d2:03:af:cc:85:36:83:92:c3:87:41:39:
b2:05:8b:69:dc:95:25:50:39:0a:d2:d0:19:10:57:3b:44:59:
90:9f:9b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:41 2025 by rpki-client