Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54D64F6ACF2311EFA9F32058762E951A.roa
File: 54D64F6ACF2311EFA9F32058762E951A.roa (raw, json)
Hash identifier: FnnSqwEahkw66xnojlPQ8CLchA0oJRWDgBcD+z2i7yc=
Subject key identifier: 96:7A:18:CD:6D:C7:05:78:C8:85:BE:70:7D:5C:9D:0F:FA:24:31:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54D64F6ACF2311EFA9F32058762E951A.roa
Signing time: Fri 10 Jan 2025 07:20:13 +0000
ROA not before: Fri 10 Jan 2025 07:20:09 +0000
ROA not after: Fri 14 Feb 2025 07:20:09 +0000
asID: 398993
IP address blocks: 156.231.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66797 (0x104ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 07:20:09 2025 GMT
Not After : Feb 14 07:20:09 2025 GMT
Subject: CN=6780ca2c-a755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:50:c1:da:ee:de:96:7b:39:b0:83:ac:59:
bb:39:c2:c1:58:0d:16:6e:ef:a8:20:04:f9:26:7a:
5a:eb:e9:64:b2:01:36:2c:06:c1:22:10:75:0e:23:
27:88:6f:37:d6:0a:3d:03:4c:80:b9:e0:3c:1d:cb:
a3:ff:ea:4d:cd:dd:49:c6:02:9e:fc:c5:cb:1e:c8:
23:33:f4:d2:40:9a:8c:f8:4d:68:6b:e8:29:64:0b:
a8:38:e1:37:a0:e4:a0:bc:0a:3d:78:fc:cc:3e:67:
9c:6e:fb:d9:92:74:37:9c:f6:84:b3:cb:f7:8b:6b:
e2:cc:42:ce:a2:85:8b:a1:08:c9:b3:ed:e0:fc:26:
60:02:33:65:a4:42:30:ea:83:42:8b:3a:2a:68:24:
9f:20:2a:39:92:24:5e:9d:8a:c8:18:46:0c:ac:d7:
44:1a:c2:c1:81:2a:e6:92:20:68:2b:56:4a:36:30:
b5:7a:13:fb:88:d7:51:00:e5:72:5a:5e:a8:73:93:
d9:29:32:8c:46:a7:7b:20:db:57:c1:55:1a:8d:49:
eb:6a:3f:e6:db:79:4b:8d:24:b3:97:48:73:d4:1a:
cf:50:79:be:f2:8a:79:bb:fe:5a:f2:50:95:6f:4a:
d4:a5:48:62:49:e7:35:39:4e:8c:1b:aa:34:c7:e1:
22:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:18:CD:6D:C7:05:78:C8:85:BE:70:7D:5C:9D:0F:FA:24:31:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54D64F6ACF2311EFA9F32058762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.88.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:37:15:a9:b0:6b:f8:ba:75:f3:3d:e1:c5:ea:45:6c:31:c2:
43:f2:b3:f6:71:c2:9c:11:56:d3:2e:4a:81:34:bb:0a:6a:77:
01:9c:c3:24:d1:26:d6:43:82:3d:2e:06:be:65:09:60:b7:2e:
53:24:ae:ea:d1:29:67:c3:5b:cd:4f:53:83:e8:0a:67:83:f4:
e4:d1:d0:b9:bb:68:87:04:1e:26:0e:73:d7:11:9f:a2:c8:63:
f9:57:0b:19:7c:3f:9a:c6:cf:2e:c1:a8:af:95:aa:75:e1:3a:
13:77:5c:c2:bb:2f:59:fb:69:42:cf:ca:01:f1:3e:79:0b:91:
35:c8:f1:54:18:25:43:fe:e6:a7:cc:3a:3c:df:d5:a8:53:52:
9d:84:72:a8:89:d4:3e:be:90:95:8d:53:b3:d7:40:65:37:c6:
d5:f4:95:a9:96:50:b2:b3:76:27:17:54:cb:0e:56:17:b9:8a:
b4:fc:f3:88:2f:d0:78:ca:b4:f7:5e:cb:43:51:f5:16:58:9d:
0c:36:99:88:33:8b:d6:f3:dc:bd:b4:05:09:02:32:80:da:b1:
77:3c:ee:8f:e7:77:9f:69:49:30:f3:bf:e0:5c:d2:c4:f4:93:
e0:18:f8:ff:6c:72:62:81:8c:eb:ef:53:0e:41:fc:49:9c:b8:
5b:15:1b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:30 2025 by rpki-client