Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C25C708CD4A11EFB3BBCC7B762E951A.roa
File: 5C25C708CD4A11EFB3BBCC7B762E951A.roa (raw, json)
Hash identifier: y1R2CBsnvDctCQqCTCYf/f0t5eVQ2iNGuC/e/aORJ3A=
Subject key identifier: 66:5D:5F:30:27:F5:DD:7B:70:93:7F:3B:36:9F:67:E6:CA:88:61:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C25C708CD4A11EFB3BBCC7B762E951A.roa
Signing time: Tue 07 Jan 2025 22:54:33 +0000
ROA not before: Tue 07 Jan 2025 22:54:29 +0000
ROA not after: Mon 13 Dec 2027 22:54:29 +0000
asID: 17561
IP address blocks: 156.246.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65209 (0xfeb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 22:54:29 2025 GMT
Not After : Dec 13 22:54:29 2027 GMT
Subject: CN=677db0a9-a44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:ca:e4:5c:4e:fe:a3:81:fa:f7:4d:50:fd:
9d:bc:1d:00:d7:00:34:98:99:a2:52:8f:65:3e:e5:
18:54:28:72:2e:ea:1a:c0:73:d4:1e:47:80:0d:64:
cf:10:bf:96:6f:e1:d5:f2:b1:ef:38:09:15:47:17:
a5:2c:19:c0:dd:66:4a:74:23:c0:d3:ff:af:b4:79:
b8:b5:88:75:4b:8c:84:6f:c3:44:1c:a2:59:da:32:
ae:54:8c:3a:41:f5:45:21:05:a2:b6:a6:22:c8:0b:
78:29:bf:75:26:10:63:a0:f3:46:1a:dd:38:3e:51:
d7:72:85:b9:88:2f:90:cc:f1:39:61:86:4a:d0:17:
44:4b:15:98:f2:95:34:3b:b8:8c:f4:37:30:06:53:
71:5e:79:d0:a9:36:60:a0:49:65:fe:62:48:44:41:
fd:88:8f:48:30:3e:a8:3e:9f:2f:e7:f9:6a:97:69:
33:cc:79:1b:97:d2:e9:4c:8d:5c:c9:1a:c4:c5:f1:
06:ae:7c:2b:97:02:19:3d:32:49:33:13:c3:13:45:
99:5b:cc:f9:03:1d:1a:9e:38:9e:d2:03:e3:26:6f:
5a:a7:a6:a7:25:e2:6f:37:35:b2:89:73:b2:6e:25:
dc:c3:c9:d1:70:6c:bb:6f:a8:b7:0c:03:9a:75:86:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:5F:30:27:F5:DD:7B:70:93:7F:3B:36:9F:67:E6:CA:88:61:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C25C708CD4A11EFB3BBCC7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.88.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f5:d1:1e:b6:7b:66:22:a2:5a:f9:f2:44:4b:e7:6f:da:85:
70:8f:b8:fe:26:20:a6:15:6c:22:84:77:76:0b:e1:2d:f3:88:
28:fe:57:5a:6a:76:39:24:aa:0e:35:42:af:b8:f8:c9:b7:17:
b9:ea:dc:75:be:db:3e:97:09:7c:2d:c4:33:73:63:e7:a3:b9:
07:e5:98:76:57:6c:9c:46:01:8f:4a:a9:e4:17:11:fd:17:ba:
45:de:0a:c6:22:f3:79:a5:9e:9d:db:c5:78:82:32:d0:d9:f1:
77:a7:a4:d7:fa:0e:bf:dc:60:19:91:13:23:b4:19:b0:9e:43:
84:e3:fe:0d:4e:0d:07:6e:cc:cd:ac:e6:00:e1:76:a3:6a:60:
74:3e:85:6c:fe:68:1e:0f:b7:c6:ef:8e:f9:1f:d5:36:e5:7d:
ef:51:21:fb:43:70:95:f2:90:a3:67:8b:b5:74:dc:bf:7b:ca:
76:24:06:b4:db:f7:9a:be:da:a8:04:dd:eb:fa:c4:08:25:d0:
25:7f:9b:a3:fd:39:1a:d8:df:3d:4e:55:1e:13:fd:bc:db:36:
fe:a1:de:b4:d2:e4:96:05:6c:24:28:96:e6:3a:6d:88:d5:db:
46:95:cd:5b:7d:cf:31:b4:ab:37:b6:16:e6:ac:36:45:c9:23:
fe:da:16:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:53 2025 by rpki-client