Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5553EF6CCD9111EFA8802854762E951A.roa
File: 5553EF6CCD9111EFA8802854762E951A.roa (raw, json)
Hash identifier: JDyPExzm43IRw9Q1ynRsmBFMtcRv8oFdmvyHDYp+AJY=
Subject key identifier: 31:47:A5:4E:1C:6B:D2:E3:9C:A3:50:7D:5A:A8:01:80:03:0D:CC:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01005B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5553EF6CCD9111EFA8802854762E951A.roa
Signing time: Wed 08 Jan 2025 07:22:36 +0000
ROA not before: Wed 08 Jan 2025 07:22:32 +0000
ROA not after: Mon 14 Jul 2025 07:22:32 +0000
asID: 135419
IP address blocks: 156.232.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65627 (0x1005b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 07:22:32 2025 GMT
Not After : Jul 14 07:22:32 2025 GMT
Subject: CN=677e27bc-8ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:6c:d2:89:9a:82:f3:95:25:52:bb:72:9a:
14:4f:32:dc:3e:f7:ec:e5:a9:cf:13:7b:47:aa:38:
6d:5e:c3:de:a5:83:a6:18:72:de:85:04:28:d0:cd:
3a:d5:ad:88:16:a0:aa:9e:3b:4c:02:4a:4d:cf:15:
93:27:48:5f:ca:c0:a3:b9:c0:2e:71:c3:a8:36:d9:
50:07:7f:dc:e3:23:13:50:b1:06:e4:aa:af:b5:82:
09:f1:c6:c4:0d:9d:bb:ed:97:51:6c:a4:25:02:f4:
da:db:c3:40:d6:df:33:a9:50:59:e2:56:16:d2:a0:
be:cd:10:74:2a:9d:60:87:56:59:25:f0:29:25:ec:
21:d7:e8:f1:5d:48:86:ca:b2:cc:7a:98:ca:b1:64:
ec:75:d5:5d:a6:46:08:6a:e3:46:4e:44:5d:7a:d1:
b9:ef:f4:11:16:15:f7:2e:c6:f3:12:e8:5b:c1:29:
2d:95:3c:2e:43:0b:42:ac:95:72:9a:39:f0:8f:0d:
bd:c6:c6:bf:ec:13:af:eb:df:82:ce:d8:1b:82:93:
49:7f:ff:07:be:b8:e7:23:df:a4:38:19:b8:73:52:
0b:b6:c7:bc:c2:0d:21:1c:7d:70:d1:b6:e6:40:4c:
2c:f6:f6:a3:57:57:cd:91:82:21:43:1b:98:89:63:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:47:A5:4E:1C:6B:D2:E3:9C:A3:50:7D:5A:A8:01:80:03:0D:CC:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5553EF6CCD9111EFA8802854762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.106.0/24
Signature Algorithm: sha256WithRSAEncryption
12:74:49:d4:f6:d2:74:b1:b6:68:cd:23:2b:a6:c9:08:77:27:
a1:01:67:ba:8e:78:96:2f:c8:87:ad:b3:41:58:d0:2e:01:16:
00:4f:e4:a5:17:2c:fe:89:d5:c7:df:db:c2:3d:70:db:8f:24:
3d:a3:5e:c5:1e:ce:a9:23:36:1e:f9:1d:36:6f:28:ce:dd:c2:
32:c3:4c:cc:e0:b4:96:9b:1a:9e:c2:20:e6:1f:1c:5f:21:65:
5c:89:1a:3b:6b:2a:a2:d1:83:f7:06:84:c8:73:3b:a7:20:b6:
35:be:7c:bc:7d:10:ea:ea:23:8f:75:00:b6:44:52:41:ad:32:
5a:b8:ad:74:af:f7:b9:ac:95:b2:aa:97:b8:35:2a:bf:80:69:
46:77:87:e4:02:55:b4:f4:07:3d:18:58:44:17:54:b6:d8:48:
b7:cf:43:85:73:1a:78:54:0f:9f:af:cd:30:4b:79:93:50:54:
5a:93:03:25:a8:c3:30:9e:5e:e8:38:d8:f0:43:b7:1f:9a:3d:
55:48:1b:43:01:a2:95:86:4b:6e:e1:02:21:99:34:f7:d4:9c:
ca:04:4e:1d:a6:f8:52:dc:a5:76:1a:48:a8:99:fd:da:11:a6:
03:a1:46:21:6f:16:76:47:1d:fb:16:5e:4f:62:4d:1b:16:12:
50:a3:0c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:24 2025 by rpki-client