Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56FA542CCD6A11EF9F415057762E951A.roa
File: 56FA542CCD6A11EF9F415057762E951A.roa (raw, json)
Hash identifier: 5kajmwFMFX4OJLylOR0QSWEXfWwAUMcohXWVivnPb1A=
Subject key identifier: 7F:A4:DB:D9:87:63:3D:DB:90:82:A3:54:63:66:70:48:BA:DC:36:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56FA542CCD6A11EF9F415057762E951A.roa
Signing time: Wed 08 Jan 2025 02:43:28 +0000
ROA not before: Wed 08 Jan 2025 02:43:25 +0000
ROA not after: Sat 13 Dec 2025 02:43:25 +0000
asID: 984
IP address blocks: 156.247.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65377 (0xff61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 02:43:25 2025 GMT
Not After : Dec 13 02:43:25 2025 GMT
Subject: CN=677de650-947e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:ea:aa:d1:47:b8:3d:37:28:15:a8:ae:fe:
20:94:75:4e:cb:92:57:81:c3:6e:99:c3:fc:f9:69:
76:41:76:c6:05:d4:36:55:17:56:2b:95:54:cb:09:
81:55:05:4b:0a:7a:46:72:5b:90:1f:da:13:55:23:
56:54:67:da:28:13:9b:6e:58:ef:5b:65:57:95:e5:
90:b5:02:0a:fd:9c:18:eb:c8:b4:ef:d2:ff:d9:81:
28:f4:ce:9c:3b:f5:cc:cb:c6:ee:47:d3:5e:4f:70:
49:2d:bd:16:42:51:8a:47:81:62:ca:a3:09:d8:6c:
fb:2c:29:52:75:90:04:74:28:22:9c:d6:0c:0b:cc:
ad:08:40:c2:a3:5e:91:07:3b:b1:63:a0:29:ae:fd:
24:9f:58:54:f1:9d:99:14:4b:99:6b:c1:12:5f:b5:
80:90:00:08:f9:af:b2:26:3d:77:52:df:a9:57:28:
2e:d7:ba:db:f4:d8:04:26:cf:5f:81:42:27:40:71:
1e:b5:9f:66:89:15:bb:5f:2c:5a:b8:70:5a:c0:5d:
14:dc:53:8c:26:40:b2:2e:f5:8b:c3:83:94:d7:2f:
06:3d:a0:6a:35:e1:7a:1f:9d:8a:17:f5:6a:ac:31:
d6:b9:ca:6a:7b:35:ac:2d:00:52:e2:e5:a7:ec:c0:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A4:DB:D9:87:63:3D:DB:90:82:A3:54:63:66:70:48:BA:DC:36:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56FA542CCD6A11EF9F415057762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d9:c7:d3:0f:db:5a:df:e8:ab:e1:15:37:8e:e2:f5:18:90:
0b:a0:05:c3:83:cf:27:91:56:83:7c:d4:2a:09:5f:e9:22:05:
d0:5a:08:a1:fd:93:c1:c8:b3:02:d9:dc:3c:7c:a0:c0:22:9e:
9d:4f:23:29:c8:a2:54:3b:b2:a6:87:f0:c8:30:86:76:f0:66:
f0:9b:de:09:fe:7c:0b:75:93:91:1f:c8:45:38:ad:5f:c8:bf:
60:02:30:be:a6:dd:c0:d3:6b:c8:51:35:bd:fc:68:34:20:9c:
86:5c:df:f6:fc:2e:9c:c7:9c:f8:d4:4b:8e:97:c7:33:47:cd:
be:e4:7c:cf:e3:35:be:9a:55:41:fc:d0:7c:25:78:32:bc:65:
18:9d:13:75:c6:6d:db:34:5b:bc:e0:fc:98:57:71:b4:41:f7:
b3:46:d3:5c:f3:46:d9:2a:cd:75:34:21:3b:a4:64:4d:8d:ff:
08:4a:12:6b:4b:ea:62:de:e2:eb:59:91:f6:5f:87:23:6e:d5:
6f:2a:03:96:70:fe:77:8b:78:1e:25:c5:0a:91:91:74:58:19:
33:73:30:a4:fa:c5:bb:c8:57:3b:8d:71:1d:e0:76:14:80:20:
3a:a8:46:99:a9:12:81:3f:29:2d:59:1a:90:5d:04:c5:25:82:
dd:a2:bd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:28 2025 by rpki-client