Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54CB2B0ECD2911EF82561FAD762E951A.roa
File: 54CB2B0ECD2911EF82561FAD762E951A.roa (raw, json)
Hash identifier: +jJvHytgPhxdenqZVLKisA6u6z+Nrn9gOYjMY0Mx2Rs=
Subject key identifier: AC:79:56:B0:DA:38:5B:41:05:F3:21:99:8A:F6:80:4A:C4:F8:B6:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54CB2B0ECD2911EF82561FAD762E951A.roa
Signing time: Tue 07 Jan 2025 18:58:07 +0000
ROA not before: Tue 07 Jan 2025 18:58:03 +0000
ROA not after: Mon 13 Dec 2027 18:58:03 +0000
asID: 17561
IP address blocks: 156.241.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64949 (0xfdb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:58:03 2025 GMT
Not After : Dec 13 18:58:03 2027 GMT
Subject: CN=677d793f-0f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:42:66:c1:33:6d:ee:d7:2e:25:c9:34:b4:
aa:ae:95:f0:49:a5:67:6b:88:3c:51:ad:e9:85:06:
22:55:2e:8b:8f:71:67:3e:96:fc:62:68:70:80:87:
3b:bc:a7:cb:ee:27:13:4d:a1:d2:d6:28:8c:2b:41:
5e:08:08:3b:29:d8:b3:91:39:9e:5c:0a:f1:25:49:
af:4f:7d:b1:2b:86:51:09:ba:7c:4a:1f:9f:73:57:
8b:93:48:30:8b:30:b5:06:0b:c5:ef:8e:e2:46:73:
62:ca:07:8a:e3:02:8a:c5:bc:d1:40:09:d0:5e:9e:
7f:db:f9:81:13:59:8a:34:12:c8:a4:b6:14:b1:d2:
f9:49:77:33:74:91:b7:85:4e:55:c6:86:01:b9:6b:
af:f5:41:a7:b9:b1:3f:7d:12:41:76:a9:ce:d4:38:
29:0a:7d:af:07:07:73:07:38:b6:98:37:4d:ad:71:
8a:25:7f:7a:6c:f9:ed:1b:ea:79:c5:57:7d:9c:42:
38:de:07:2b:62:4e:63:39:7a:07:29:cc:cc:f7:a2:
d4:d1:3e:8e:1f:11:a4:bf:93:4a:49:6b:d6:86:8d:
d2:9d:79:20:58:7f:0c:48:07:ac:f6:df:7b:c7:4d:
ce:d4:af:46:7e:71:35:87:1c:94:e6:7c:0e:6d:3a:
56:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:79:56:B0:DA:38:5B:41:05:F3:21:99:8A:F6:80:4A:C4:F8:B6:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54CB2B0ECD2911EF82561FAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:aa:93:79:d5:e8:ce:ec:a3:3e:b9:11:29:c6:84:4c:51:a5:
b5:bb:f9:73:d6:2a:6e:af:9d:3f:e1:18:23:1f:02:5a:18:32:
59:46:cd:cd:57:bb:ed:2a:d8:a0:96:d7:1b:23:a2:c3:30:88:
2c:42:04:e0:4f:a8:ed:53:cf:93:1e:8b:b4:4f:5b:63:ae:b2:
3b:00:ba:c3:03:e8:86:08:13:70:55:48:5b:63:3c:3d:79:05:
07:5c:4c:40:84:3c:d6:24:41:2c:93:b1:aa:d1:0e:f9:e0:d2:
3a:ca:8a:62:cc:27:56:18:ac:1a:89:b1:f4:a9:da:e0:56:4b:
fe:9a:51:ee:45:2a:d4:2e:d6:58:c3:52:22:ac:91:f2:ce:ee:
73:c7:fd:3e:5e:c7:9d:d1:c4:bb:f0:a9:ac:6f:68:85:aa:25:
d8:47:43:bd:2f:67:bf:19:8b:69:a8:77:38:d3:a7:41:98:8a:
39:79:23:f6:45:cf:ba:52:2e:9c:34:0d:57:33:e6:0d:1c:12:
ca:61:f8:e0:79:ba:ec:75:1d:a7:a2:6a:98:1a:27:88:ad:7c:
30:67:34:60:b8:d2:bf:67:5f:ff:c2:a4:15:69:ea:95:c1:ce:
a7:3a:97:92:d9:9b:c3:24:e3:1b:a7:b2:20:1c:3f:f9:5c:4e:
e9:74:9e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:12 2025 by rpki-client