Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E26DAAD24711EF9F3D23B0762E951A.roa
File: 54E26DAAD24711EF9F3D23B0762E951A.roa (raw, json)
Hash identifier: RLLtRSATBV7fihb0EpuwQBEaP6iTPTOmAxsbHH7M6Rw=
Subject key identifier: FA:89:0A:14:47:F7:C6:74:A0:3D:92:B8:FE:7B:CA:C9:23:C8:41:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E26DAAD24711EF9F3D23B0762E951A.roa
Signing time: Tue 14 Jan 2025 07:15:28 +0000
ROA not before: Tue 14 Jan 2025 07:15:24 +0000
ROA not after: Tue 18 Feb 2025 07:15:24 +0000
asID: 214413
IP address blocks: 156.226.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67290 (0x106da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 07:15:24 2025 GMT
Not After : Feb 18 07:15:24 2025 GMT
Subject: CN=67860f10-1575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:2f:95:cc:ab:6b:eb:43:b8:f0:20:05:12:
d0:cf:36:db:25:67:42:ba:25:fd:df:7c:ef:de:cc:
e1:85:d8:09:4b:5a:a2:02:17:74:49:61:fc:7c:11:
cf:f1:1d:df:5f:79:30:5e:ed:8b:f0:58:6e:5f:5c:
a1:12:7b:b2:e0:8d:db:99:6f:9b:76:15:a1:57:5d:
7f:a7:ec:f4:8f:af:a5:98:eb:57:94:0a:47:10:bd:
a3:fa:b5:3f:43:8b:76:3d:74:77:56:63:15:12:2a:
a2:58:e5:0f:2a:28:e8:19:85:13:c4:88:83:b9:f3:
2b:07:de:8b:e8:33:09:ea:69:ab:55:d2:ab:eb:54:
61:af:58:69:42:b4:d2:8a:80:1b:ca:6a:b9:85:0b:
ca:cf:88:4c:06:49:85:a5:75:ec:6e:8e:9e:5f:f3:
9f:f4:de:85:95:66:08:ec:56:22:84:ce:52:fa:b9:
1d:9d:95:95:89:2c:92:bc:61:e2:11:e5:0f:26:19:
36:74:02:93:62:5a:1f:64:ef:63:ed:14:0d:ea:c1:
49:c6:f2:c5:56:94:66:b8:64:14:84:14:39:2d:e0:
94:85:db:8e:0e:26:7d:a5:21:b0:66:67:50:4a:53:
d4:00:35:b2:04:1f:52:0e:e2:1c:6b:12:78:3a:10:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:89:0A:14:47:F7:C6:74:A0:3D:92:B8:FE:7B:CA:C9:23:C8:41:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E26DAAD24711EF9F3D23B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.244.0/24
Signature Algorithm: sha256WithRSAEncryption
96:46:7d:67:ab:85:1d:3c:02:4c:da:48:96:24:e9:25:b8:4e:
b8:5e:d1:39:0d:59:fb:1e:1d:d3:41:6d:d0:c5:83:9e:f5:a8:
1d:0f:e8:78:ba:0d:6b:c1:a2:09:94:af:3d:18:28:d7:62:1e:
18:18:67:63:06:eb:e7:db:f6:1e:76:5e:12:df:b5:7f:60:a4:
99:52:54:0d:98:1f:c6:fb:25:9b:0c:af:e2:a1:a1:f5:53:4a:
ce:95:6a:77:d1:82:b1:f4:5b:f8:42:77:74:05:e8:3a:8e:75:
2f:48:c8:60:d2:df:b8:75:dc:ce:0e:89:a5:f3:8f:5c:e7:96:
74:89:97:d0:30:b1:b7:10:a6:ec:49:6a:3f:72:b4:02:e4:a4:
63:c6:51:c1:98:2e:a4:81:39:4a:2a:f0:be:72:aa:e1:5d:97:
59:f1:4a:42:36:02:30:8d:ec:a4:08:c5:68:30:a7:db:15:0a:
6e:b8:d7:2b:92:75:fe:e9:ae:67:fb:88:00:4d:23:2c:d0:78:
c7:2f:62:3b:d2:bb:c7:ab:53:28:c0:74:06:90:cc:de:14:d2:
a8:79:c9:6f:e5:7c:5d:80:c9:14:03:01:d9:0d:ed:e0:6d:57:
1f:b3:6f:e8:47:7e:1b:28:48:d4:99:2b:21:9f:8d:c4:9f:1a:
04:74:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:34 2025 by rpki-client