Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD1D604CCE911EFAF7F0A9C762E951A.roa
File: 5BD1D604CCE911EFAF7F0A9C762E951A.roa (raw, json)
Hash identifier: Sp0JxYEhf6BMZUD1yQQkdLrrxlhkOwN5WhlW46KlRtQ=
Subject key identifier: 10:06:AF:2B:17:E3:A1:17:54:C5:53:08:2D:56:12:4C:8A:AD:29:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD1D604CCE911EFAF7F0A9C762E951A.roa
Signing time: Tue 07 Jan 2025 11:20:11 +0000
ROA not before: Tue 07 Jan 2025 11:20:08 +0000
ROA not after: Mon 13 Dec 2027 11:20:08 +0000
asID: 17561
IP address blocks: 156.235.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64491 (0xfbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 11:20:08 2025 GMT
Not After : Dec 13 11:20:08 2027 GMT
Subject: CN=677d0deb-4b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:95:6e:27:16:81:ae:38:d4:78:7a:7e:e4:
9a:8e:63:fc:22:c3:44:8e:2b:82:39:20:1a:32:de:
a2:cf:f2:cd:a1:a7:7f:d2:95:66:79:06:42:32:d8:
5a:e5:af:5a:5a:ab:f7:dc:33:29:d4:ca:62:2f:0e:
f5:fc:8f:c2:fb:4b:23:57:a4:75:5b:19:ae:e6:3b:
af:d9:c4:45:2d:08:c8:df:29:25:18:1f:cb:76:40:
88:fb:1e:f7:6d:36:79:8e:0f:e7:4c:3a:5d:fb:61:
78:51:d4:a1:dc:d0:8f:96:93:76:15:ea:f0:8b:1b:
c0:1f:b7:da:07:da:71:b1:dc:72:ff:4a:1f:f7:af:
c7:90:69:be:dd:ed:ff:e0:d1:8e:7f:09:aa:e1:4f:
d9:ae:f9:1a:73:9e:6d:d3:b8:56:06:15:04:b2:59:
ca:8a:b6:3f:6b:26:75:35:e3:09:d7:1e:c9:90:fe:
d6:75:e8:09:7e:2c:e6:1c:c5:75:ac:cf:42:ea:af:
51:e3:c4:98:bb:14:d2:b8:6d:54:22:b5:15:83:fa:
d7:4e:74:81:0a:56:d5:79:47:a5:88:e0:bd:0f:cb:
7e:cb:84:e8:27:5e:5f:07:67:e2:7c:4a:1d:7f:87:
a9:03:d9:41:f2:1b:14:06:8b:90:5b:a6:72:55:da:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:06:AF:2B:17:E3:A1:17:54:C5:53:08:2D:56:12:4C:8A:AD:29:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD1D604CCE911EFAF7F0A9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.124.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a1:b4:54:51:b8:68:f8:52:f4:50:5d:c7:af:6a:f0:0c:65:
c9:67:17:a9:13:3e:49:8b:b8:88:0b:9e:c5:c1:17:fb:2c:0c:
b0:2f:fd:29:60:e2:bb:d5:97:fc:52:ea:80:43:0f:14:16:d7:
e0:b3:e4:bb:17:b8:dc:28:55:39:ab:bc:69:c3:ee:97:af:22:
ae:a1:2b:7a:7a:e5:62:de:9a:5e:52:99:92:41:f6:ca:47:9b:
89:a8:28:e6:88:21:23:a5:6a:10:21:36:0e:fe:ca:20:bd:bd:
75:ac:0b:f9:c3:c7:38:dc:01:93:5b:58:a3:ae:7c:08:58:23:
b1:90:df:33:ea:c1:87:c3:e5:4d:be:58:ab:1b:32:5e:8c:b9:
9b:04:bd:42:ec:52:28:aa:ca:05:cf:27:0f:2f:c5:25:4a:f2:
d1:b4:88:5c:a1:52:0f:fc:c3:29:2b:e4:3d:76:53:c9:e5:e7:
f2:54:26:b4:be:bf:23:e6:50:4f:e5:75:10:4b:d5:f2:88:72:
3e:8d:4d:e1:b1:3c:58:c2:06:82:aa:5b:2a:9b:7f:47:b6:08:
21:c0:cd:7a:60:06:21:b7:fc:75:92:aa:dc:fd:e5:61:4f:7a:
81:3b:c8:88:41:ed:67:fd:c9:50:ea:7d:5d:3a:b6:34:73:1f:
0a:26:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:45 2025 by rpki-client