Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55191E04CDC911EFAB43B5B3762E951A.roa
File: 55191E04CDC911EFAB43B5B3762E951A.roa (raw, json)
Hash identifier: PcI4SSAPt9dOFTs4jiufFsMGI0LwrtVsvruYtfmSPkA=
Subject key identifier: C9:6D:3A:22:AD:D8:D9:9F:88:40:E1:32:70:1C:8E:73:F4:9D:B9:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55191E04CDC911EFAB43B5B3762E951A.roa
Signing time: Wed 08 Jan 2025 14:03:27 +0000
ROA not before: Wed 08 Jan 2025 14:03:24 +0000
ROA not after: Thu 16 Dec 2027 14:03:24 +0000
asID: 17561
IP address blocks: 156.249.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65981 (0x101bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 14:03:24 2025 GMT
Not After : Dec 16 14:03:24 2027 GMT
Subject: CN=677e85af-e0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:5c:fa:5c:b9:cd:96:04:61:ca:bb:89:88:
d7:4a:99:09:8c:6c:00:e8:52:af:69:66:f2:68:b6:
4c:4e:93:59:83:40:7c:00:83:79:c4:32:13:d2:00:
2e:39:80:f2:8b:f7:63:95:ce:6c:f0:bb:28:0b:4b:
c6:50:66:03:ef:ba:af:2e:d3:34:8a:11:4e:ef:b2:
cf:09:08:fd:92:5d:82:9a:66:ac:af:75:63:50:49:
6d:df:dc:80:30:0f:f0:f4:18:5d:00:69:ae:e7:6b:
c6:e1:64:56:0a:89:84:89:30:8e:6d:3d:0b:0b:36:
62:1e:6f:1b:bf:a9:02:55:c1:a6:cc:37:8c:8f:06:
14:c0:83:f8:7a:06:c8:b8:bb:da:48:0a:d4:a6:1f:
4c:2d:6d:79:2d:c7:72:4c:da:d3:ce:c0:db:dc:c1:
2e:07:b5:17:a8:b8:4e:9f:d5:ee:f8:d8:7a:7e:5d:
03:3b:bc:1f:9a:26:70:ed:96:b5:a3:ea:d8:14:56:
71:a5:c0:d1:55:32:b6:a1:eb:de:8e:8a:3e:13:31:
48:50:47:4d:b7:b6:42:01:fb:f4:6c:6f:5f:0e:16:
04:dc:9d:ab:71:03:1c:2c:ef:56:15:4c:d0:ec:b7:
fa:67:df:2f:ff:68:30:ad:f6:71:bd:07:aa:70:ca:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6D:3A:22:AD:D8:D9:9F:88:40:E1:32:70:1C:8E:73:F4:9D:B9:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55191E04CDC911EFAB43B5B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.59.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:8c:33:a4:a1:fc:65:e1:d5:36:95:17:d3:98:f8:fc:45:c3:
2f:1c:ce:5d:6c:c0:d6:e5:a0:52:07:a1:83:5d:8a:22:b6:68:
02:15:a9:bc:1b:3a:ab:6f:07:0d:ab:37:79:40:4e:a0:7b:5e:
6a:54:4e:de:c2:73:f9:0f:96:f0:4f:d9:3a:7a:7a:1e:3d:7e:
77:a5:47:14:b2:2f:ab:33:6e:c4:8d:dd:1e:d6:84:75:d1:c1:
d0:81:50:d8:38:42:2c:66:c9:21:ad:01:b9:56:3d:36:5e:ae:
34:5e:92:e7:b1:9d:b6:d9:e1:10:ce:b0:8b:be:92:aa:bf:c4:
e1:b2:8f:8e:d5:43:d5:ba:6f:88:6b:24:3a:50:de:84:17:d5:
32:51:db:90:ab:d7:3e:55:c9:5b:5b:7e:87:32:44:e9:d1:5f:
d0:3a:9b:c7:db:c1:a9:4d:0e:b2:68:10:b0:65:36:1e:3f:88:
15:4f:07:76:cc:8c:73:53:8f:b0:10:07:d1:0d:39:a9:6e:59:
77:ca:64:44:2d:91:24:a2:62:6c:5c:78:5f:1b:ec:a9:31:b2:
9a:b6:88:d9:6c:86:24:06:f4:1f:45:04:af:d5:59:87:ce:5c:
be:ff:e9:fb:f3:98:65:82:00:95:0e:23:d3:73:a6:e2:91:5f:
44:69:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:21 2025 by rpki-client