Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5454C7C8CDA311EF9DA5AD44762E951A.roa
File: 5454C7C8CDA311EF9DA5AD44762E951A.roa (raw, json)
Hash identifier: El32aoiUqr4LomtfTz7nyODfq697pwX+ajfsZaQBo84=
Subject key identifier: ED:DD:72:00:39:F2:80:2A:1D:11:4D:F1:6E:47:01:50:4E:C8:C4:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5454C7C8CDA311EF9DA5AD44762E951A.roa
Signing time: Wed 08 Jan 2025 09:31:25 +0000
ROA not before: Wed 08 Jan 2025 09:31:21 +0000
ROA not after: Tue 16 Dec 2025 09:31:21 +0000
asID: 984
IP address blocks: 156.249.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65791 (0x100ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:31:21 2025 GMT
Not After : Dec 16 09:31:21 2025 GMT
Subject: CN=677e45ed-803c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:7a:5d:da:ce:fb:74:66:05:93:c4:42:aa:
13:08:ed:1c:63:4c:8a:76:8b:0e:90:0b:f8:5a:a3:
f0:50:f8:fe:e7:81:3e:60:3e:47:ca:08:bf:88:24:
e5:12:72:eb:ea:8d:75:fc:43:e3:f1:71:9b:63:f7:
fa:c8:38:d1:b2:84:ee:dc:d4:df:6e:f7:ac:90:ac:
3f:55:b8:9e:c8:37:2e:29:2e:16:eb:98:57:96:2c:
90:cd:37:7a:08:df:b2:33:24:3f:d5:83:0d:a9:54:
c5:97:0f:40:a6:80:1d:cb:f8:e6:f3:a9:c2:10:82:
6c:5a:31:ae:f5:00:62:a7:69:01:7a:6d:64:ae:3d:
9e:1b:22:50:23:bb:6b:4e:cb:44:5c:69:d0:08:df:
68:6f:77:05:e0:97:42:2c:5a:8f:0c:93:d6:3e:90:
1c:50:dc:e8:0e:50:a9:57:ec:2c:50:f4:78:84:49:
72:14:60:da:50:5d:97:f0:af:93:30:fa:a8:86:e5:
72:39:41:30:57:fe:2b:cd:42:01:f4:cb:be:9f:f6:
81:36:fe:6a:84:90:50:4a:0f:b7:f3:f4:49:2a:26:
38:2b:8a:67:85:66:91:64:37:89:b5:0b:d9:77:ad:
29:9b:69:80:5f:52:c6:d3:62:5f:82:cb:4c:95:ff:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:72:00:39:F2:80:2A:1D:11:4D:F1:6E:47:01:50:4E:C8:C4:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5454C7C8CDA311EF9DA5AD44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.126.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4b:d7:a2:e2:64:e0:a4:3c:c7:43:5e:f3:79:bd:d8:90:3d:
ea:37:ee:cc:4f:7c:2f:b6:3d:0f:86:82:67:f4:a4:b3:0b:23:
bf:79:51:95:7d:6b:d2:14:4b:fc:d0:62:d2:47:e1:cb:bb:6d:
bd:7d:51:2c:0b:04:60:2d:d1:d7:ab:e4:c0:be:be:f7:b5:55:
46:cf:ea:b7:4b:77:a3:48:23:6e:f1:80:ff:d0:60:06:df:99:
1d:cc:d6:8d:f1:65:91:05:30:b6:77:0b:bf:5d:2c:72:18:e7:
89:5a:a5:37:14:ab:a3:a9:59:1a:99:c6:46:00:1c:c0:30:2f:
58:bb:98:75:85:22:9a:89:d3:00:66:2c:b0:c9:69:90:ec:cf:
18:69:e4:f2:74:5f:e5:20:2c:c7:0b:34:be:54:bb:8d:c4:af:
58:41:26:5a:12:e5:8c:2c:a5:23:e5:4e:e5:e3:a2:17:75:4d:
fa:2b:76:6d:83:ad:bd:92:26:66:48:4d:70:18:27:62:7b:0d:
d4:9c:4a:6a:71:c8:f1:0a:30:c4:21:38:8a:be:ee:a3:49:4b:
67:c5:2b:9a:fb:62:94:6d:88:59:34:8a:7a:2c:c8:63:dd:a6:
9f:21:50:5c:55:09:84:74:9f:f1:6e:7b:b1:85:3b:a2:dd:69:
f2:40:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:29 2025 by rpki-client