Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57F226E2CD8411EFA58D1980762E951A.roa
File: 57F226E2CD8411EFA58D1980762E951A.roa (raw, json)
Hash identifier: wooCe+5If13iZ2l7Z3u42C8u9za+e2in4XcXXiE8aEY=
Subject key identifier: 70:43:BF:10:17:49:70:89:01:D3:66:51:E6:1B:24:E8:2A:0E:55:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01001D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57F226E2CD8411EFA58D1980762E951A.roa
Signing time: Wed 08 Jan 2025 05:49:37 +0000
ROA not before: Wed 08 Jan 2025 05:49:33 +0000
ROA not after: Sat 13 Dec 2025 05:49:33 +0000
asID: 984
IP address blocks: 156.252.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65565 (0x1001d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 05:49:33 2025 GMT
Not After : Dec 13 05:49:33 2025 GMT
Subject: CN=677e11f1-3d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:ea:71:df:c3:3c:05:83:e5:dc:93:b3:bc:
7f:fa:b0:16:f0:9c:40:29:09:d7:c1:97:7b:1a:b7:
72:86:06:c1:aa:f3:ed:fc:41:c9:0f:55:7d:f6:02:
a1:ed:55:ea:ec:13:3d:e9:85:ab:7a:a8:4b:87:d4:
b2:ea:27:a9:48:aa:38:c3:bc:e7:ee:ec:28:c4:04:
5e:4b:7d:62:03:9b:0a:44:61:c1:1e:4c:3a:18:b6:
bc:09:9c:35:63:39:77:08:94:b9:fd:14:01:29:6e:
48:0b:b2:df:c3:90:fc:6f:57:7a:a0:c1:f4:9d:95:
7e:ba:49:12:ea:22:37:ef:74:9b:2e:fa:73:44:69:
75:42:2d:87:e7:26:fb:f4:86:c0:13:0b:f5:2b:1c:
de:4f:da:55:d9:2f:60:a2:64:84:11:76:96:7f:7e:
a6:4e:ca:25:54:11:e1:cb:79:be:53:76:98:26:49:
d5:15:39:e3:ee:9e:f4:26:39:c2:30:f5:9f:87:8a:
2e:e4:ae:ee:60:af:c1:17:de:52:42:49:22:12:e3:
b2:c3:0d:3a:d8:cd:07:7c:f4:aa:5f:38:22:7d:8d:
3d:2d:2d:d4:f3:ee:59:45:7c:94:98:ce:f1:21:cf:
7d:27:5f:c8:54:ee:4f:d2:da:b3:15:a1:c3:ad:29:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:43:BF:10:17:49:70:89:01:D3:66:51:E6:1B:24:E8:2A:0E:55:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57F226E2CD8411EFA58D1980762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.26.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c8:67:aa:6c:45:55:b5:91:2a:be:e7:94:8d:00:df:2b:f9:
36:cc:a1:a3:79:8e:72:cb:d8:ea:42:42:67:31:a0:cd:36:5d:
0a:b8:b4:b6:10:30:1f:c0:a7:1d:10:8d:16:b8:7f:63:31:65:
c2:26:1c:28:40:d2:c9:4c:29:7d:96:ce:45:7e:3a:a2:a0:7d:
eb:93:a5:3c:e5:3c:42:1c:48:7b:98:df:de:44:35:b1:65:b9:
22:06:ee:d2:83:81:83:ba:ff:f2:10:98:8c:9f:fd:2a:b5:32:
fb:fa:09:77:ee:58:7f:0d:c0:11:29:7c:f9:f3:ad:b1:59:58:
6a:65:67:2c:e1:1a:2c:09:ef:e3:9e:f2:15:a4:05:74:af:55:
83:65:75:c0:de:d8:fb:8d:14:b5:05:de:d0:b0:42:db:be:b0:
62:eb:a9:bc:56:d7:ad:30:e8:b3:fa:20:76:28:e6:05:e1:6b:
8e:3f:d2:11:0d:f0:d2:2a:2f:a1:39:1a:3f:6d:0d:96:de:eb:
9a:72:f8:6c:98:98:e5:79:4d:21:c4:c0:3e:6d:09:47:de:16:
3d:0e:39:7c:32:e8:cb:ef:78:57:30:fb:3a:ed:38:e1:6d:25:
a6:4c:23:5a:7d:05:3a:40:51:ec:f8:92:f3:a9:a1:35:40:fe:
14:ce:4c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:43 2025 by rpki-client