Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/569B5FE2CC9011EFA333CC52762E951A.roa
File: 569B5FE2CC9011EFA333CC52762E951A.roa (raw, json)
Hash identifier: 5hyp/6PjcGdW7YBFRyWWI/B4X1KuTQ4JvBgJ0vt5zRM=
Subject key identifier: E6:6D:23:A2:30:56:4D:CA:06:B9:1D:6E:BB:3B:B5:68:F4:7E:99:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F903
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/569B5FE2CC9011EFA333CC52762E951A.roa
Signing time: Tue 07 Jan 2025 00:42:57 +0000
ROA not before: Tue 07 Jan 2025 00:00:54 +0000
ROA not after: Sat 13 Dec 2025 00:00:54 +0000
asID: 984
IP address blocks: 156.226.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63747 (0xf903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 00:00:54 2025 GMT
Not After : Dec 13 00:00:54 2025 GMT
Subject: CN=677c7891-ed27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:27:b3:43:58:b0:fc:04:e4:96:03:8d:b5:c3:
e5:90:e4:12:da:91:d9:44:f3:f0:b4:b9:ec:ef:a0:
42:72:fb:55:f5:7e:07:f2:9f:cd:e2:b3:29:67:fa:
c7:8a:df:83:51:7b:f1:56:85:33:30:cf:4f:4b:09:
d1:47:9e:4e:5c:fb:90:07:a4:56:55:85:f8:43:c8:
a5:d1:88:13:f8:f2:3d:9f:4f:72:07:f3:fe:56:bf:
05:88:12:38:33:89:37:63:11:48:57:62:b5:8b:51:
65:56:da:98:24:8e:9a:23:f1:2d:41:8d:50:32:73:
9a:06:14:28:1c:ef:80:c5:a1:41:28:7f:11:2c:4d:
1f:ff:61:6c:5d:6d:99:2d:4b:94:4a:fd:ff:af:d4:
50:d8:ea:80:a1:76:01:e8:3f:9a:f4:3f:02:ba:2c:
9b:d6:b6:2d:c0:d6:b4:06:58:29:98:7c:de:e7:32:
9d:c5:57:1a:26:2c:c2:83:81:ab:e0:21:5d:e1:f8:
2c:f6:ac:fe:5d:0c:f1:5e:15:56:fb:b7:5c:a9:f7:
e8:17:fb:9c:0a:5a:22:4e:e8:50:34:59:f4:40:6c:
1f:f2:f0:23:55:8a:03:14:80:d5:a8:1b:79:90:e4:
93:26:fe:9f:f9:51:cf:1a:47:f3:e8:f5:2d:b6:34:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6D:23:A2:30:56:4D:CA:06:B9:1D:6E:BB:3B:B5:68:F4:7E:99:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/569B5FE2CC9011EFA333CC52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8e:f8:74:47:71:f0:d0:ff:1c:6e:34:f9:6a:f4:2a:f0:e8:
5a:36:b5:4e:1c:f4:3c:4a:29:8e:0a:93:e2:93:64:53:ce:1d:
09:42:dd:96:ab:5c:9a:a4:15:9a:50:43:45:b2:8d:50:55:66:
c0:05:ed:3f:f0:e1:4a:aa:9f:4f:c6:24:85:52:48:1b:97:3a:
a5:d0:8f:f2:d2:02:65:5a:2b:71:57:50:d3:78:27:42:06:1b:
2f:5d:8f:75:98:90:36:c3:66:47:24:ef:ef:18:f1:08:d6:d6:
60:67:1f:59:c5:eb:5b:e9:33:3e:e9:3a:4d:37:95:62:0b:b0:
33:f9:a0:f7:11:56:e4:f5:d6:5b:9b:15:29:30:1d:89:7a:b5:
ee:29:dd:f2:2e:59:41:1e:3d:f7:48:71:2e:f9:c1:1a:13:57:
99:b0:60:f7:c4:32:0f:fe:6b:a7:45:15:50:c2:47:d6:21:b7:
f4:ff:95:d8:23:fc:a4:14:cf:fd:95:1b:98:ec:ed:1f:b2:d7:
fc:a8:4c:f8:c9:34:16:e3:48:ff:44:05:30:e8:6b:1c:8a:56:
3b:a2:a9:87:6b:f8:7c:fe:6b:ef:7a:94:f4:be:a1:00:c8:51:
b9:c9:aa:1e:82:ed:f9:f8:b2:18:d3:95:ae:25:8e:61:25:6a:
5a:31:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:56 2025 by rpki-client