Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/540872CECD7B11EFBCBB414A762E951A.roa
File: 540872CECD7B11EFBCBB414A762E951A.roa (raw, json)
Hash identifier: ucLYcSft9RFDzDbKpqFxiwENvKZw7/xM148GCnWOFMY=
Subject key identifier: 7B:CC:A7:F5:AA:73:06:66:8E:F4:9F:26:7F:2A:69:E7:A9:55:25:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFD9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/540872CECD7B11EFBCBB414A762E951A.roa
Signing time: Wed 08 Jan 2025 04:45:05 +0000
ROA not before: Wed 08 Jan 2025 04:45:01 +0000
ROA not after: Sat 13 Dec 2025 04:45:01 +0000
asID: 984
IP address blocks: 156.250.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65497 (0xffd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 04:45:01 2025 GMT
Not After : Dec 13 04:45:01 2025 GMT
Subject: CN=677e02d1-4a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:36:f1:00:6d:38:f6:45:67:c0:a5:36:23:
c2:e0:7e:8e:c0:44:1f:06:72:bc:c1:f3:71:e4:b8:
de:f4:26:96:10:93:1d:49:a3:83:8b:60:c9:f8:90:
6d:13:7d:9d:82:41:5c:8e:32:31:df:4d:47:ec:cc:
c9:fe:11:ed:e5:82:a7:0b:a3:3c:a0:88:bd:54:02:
c6:e5:8b:b4:16:ef:69:8b:be:9d:71:d3:50:1c:47:
9a:e7:1c:2b:00:80:6b:7a:29:d4:a1:24:25:95:77:
b6:7a:8e:0f:58:00:59:65:cd:8f:74:9c:0b:45:a0:
40:d1:a1:92:c5:1a:3f:1e:4f:64:64:cb:b9:7c:21:
05:78:9a:b3:13:9e:ea:a1:c1:7d:0f:05:f6:70:f3:
de:c7:f0:2b:16:7f:04:2a:37:46:c0:11:a0:be:e7:
d4:b2:d1:a8:f3:e1:1f:4b:b3:e1:c8:f0:13:47:f1:
63:13:50:7c:2d:60:b0:50:c0:58:ef:b9:55:e2:ce:
eb:aa:8b:c4:ab:47:05:4c:29:84:b4:84:41:05:08:
32:61:0c:20:0b:b3:7a:46:34:bd:5c:32:dd:c7:63:
85:e6:2a:67:fc:17:25:26:e0:0b:53:22:a7:66:d1:
59:c6:64:a8:9e:b0:d2:3b:98:0f:fa:0f:99:1c:af:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CC:A7:F5:AA:73:06:66:8E:F4:9F:26:7F:2A:69:E7:A9:55:25:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/540872CECD7B11EFBCBB414A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:bb:5d:d7:7a:8a:0d:ac:e3:54:8e:d5:80:df:3c:98:1d:d0:
fe:03:23:33:60:60:c8:07:3a:0a:c7:fd:56:fe:b1:3d:16:5c:
99:8f:78:7f:30:ed:11:92:00:24:6d:a8:80:13:3b:75:06:40:
23:37:3d:bc:a9:b1:9e:47:13:6f:96:a6:e5:a1:94:fa:80:14:
93:3c:3f:d0:a9:a9:8a:f7:db:43:13:a6:bb:9e:98:e1:e2:dd:
1d:64:e5:ca:89:94:fd:6e:ee:9c:a4:f8:2a:da:e4:61:b7:55:
bb:06:ec:f9:e9:e4:48:08:5d:2a:f7:e9:ba:55:d8:69:ed:1e:
2e:6e:e3:e5:aa:b8:6d:cd:1d:a4:9c:04:13:6c:ec:d5:0b:e4:
fa:23:27:f1:a9:53:a5:ab:e2:fe:9b:62:e5:ce:48:d6:38:09:
3a:9d:df:9a:3d:29:b4:23:21:6a:1e:b7:27:69:c8:d4:16:54:
36:c3:a6:3a:4f:42:7f:d2:d5:f7:ea:4e:af:27:ab:b0:d0:bd:
ba:be:db:43:7a:b7:c9:2d:89:bf:e6:39:7f:06:a7:65:62:e5:
60:98:d5:3c:c2:d4:4a:de:46:ea:d3:11:80:c7:cb:08:48:98:
dc:af:d5:78:fd:28:00:39:d4:d3:50:cc:98:29:64:50:b7:0d:
61:5d:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:10 2025 by rpki-client