Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C725ADCCCE111EF872D7869762E951A.roa
File: 5C725ADCCCE111EF872D7869762E951A.roa (raw, json)
Hash identifier: pzOIzxJBZjjtJha5kOIoZHHbAnAQ8nEYLgcN17fs76s=
Subject key identifier: 67:06:32:EB:CC:65:B0:5F:E4:19:C9:8C:89:C0:DF:3D:27:36:A6:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C725ADCCCE111EF872D7869762E951A.roa
Signing time: Tue 07 Jan 2025 10:22:56 +0000
ROA not before: Tue 07 Jan 2025 10:22:53 +0000
ROA not after: Mon 13 Dec 2027 10:22:53 +0000
asID: 17561
IP address blocks: 156.233.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64421 (0xfba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 10:22:53 2025 GMT
Not After : Dec 13 10:22:53 2027 GMT
Subject: CN=677d0080-13c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:1b:00:73:7c:2c:05:f7:63:47:06:b4:d3:
1d:0f:8e:a0:bf:06:13:01:38:26:84:19:3c:9a:fe:
6c:d4:b4:c3:20:95:f3:eb:46:1f:7f:b5:1c:e8:59:
fc:3b:f6:af:f3:14:1a:0d:73:25:17:73:3a:41:31:
2a:c5:28:dc:a9:f8:6c:2d:a1:01:08:98:d3:83:6f:
5a:e8:a6:b0:c1:f9:5a:8e:89:05:58:d2:e9:95:c3:
10:c8:e5:48:95:ea:7c:f8:53:13:81:2c:fc:82:f5:
0c:1d:c3:4a:e8:5f:ec:c1:47:cb:f0:8b:fe:af:86:
34:a4:27:b8:d5:a4:d1:03:51:ae:f7:99:5e:39:64:
29:35:4e:eb:8d:11:95:16:95:13:9a:60:dd:f3:3e:
ed:02:e2:63:47:9e:49:25:c3:1d:11:70:20:2a:30:
70:fc:3d:5c:e8:96:88:1a:83:2d:c1:48:8c:59:0b:
fa:4c:15:2f:1d:a0:d3:23:ee:41:f9:ca:15:db:ae:
5a:32:8d:d3:83:3f:ba:1e:b0:0c:8c:99:8f:02:cb:
65:26:db:9a:1b:d0:97:11:78:93:38:4a:5d:db:b5:
fa:20:bc:e2:0a:f2:99:ae:6d:d8:1e:26:48:aa:63:
e0:12:05:d1:4a:6f:f7:4e:17:7a:41:5b:f3:e9:00:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:32:EB:CC:65:B0:5F:E4:19:C9:8C:89:C0:DF:3D:27:36:A6:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C725ADCCCE111EF872D7869762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:53:27:fb:5d:6e:fc:5f:21:51:5b:d5:6e:ab:ac:57:90:dd:
56:62:08:9e:8f:e8:79:10:60:1b:66:99:60:49:be:bd:38:cf:
e3:7c:b1:96:45:29:ef:86:d4:73:38:a5:70:78:26:9f:cb:0b:
96:1c:14:cc:86:e4:6f:02:64:58:d9:da:f5:1a:7f:b1:e1:39:
a3:e5:be:30:ae:e2:c0:14:ea:f7:b4:d2:cc:ec:fd:ac:c5:29:
eb:08:78:8b:55:60:a8:79:17:28:3f:9a:11:b5:4a:4f:6b:ec:
80:ed:69:e5:39:44:52:93:73:c0:aa:8d:fd:2e:c2:cd:0e:9b:
21:f7:48:03:56:87:3d:b8:c9:af:b9:e4:c2:35:7b:83:be:15:
6d:6c:eb:3e:0f:84:2e:16:87:ec:21:d1:b8:48:d5:a1:d5:a9:
a4:ca:72:4c:66:aa:3b:6f:83:82:1a:9a:47:12:0c:99:9e:6b:
b7:e0:6b:1b:85:ee:a9:0b:5b:fd:b8:83:40:1a:c7:62:68:36:
79:cf:af:bf:f8:6c:39:a7:46:6e:1b:e0:ee:be:ed:94:f4:c3:
96:40:70:c2:bc:13:64:43:ae:e4:de:e9:dd:52:06:1b:70:57:
9b:97:da:b7:56:6e:15:13:05:c4:b4:51:73:57:28:11:44:de:
d1:00:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:04 2025 by rpki-client