Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CE0E568CF2C11EFA1C0BA90762E951A.roa
File: 5CE0E568CF2C11EFA1C0BA90762E951A.roa (raw, json)
Hash identifier: Tql8FW31ghsnTCZyFX4jed2e6Hsr2U12GuMIoRZpJ24=
Subject key identifier: 80:E9:E6:62:1A:D3:2E:71:EB:D5:95:A6:ED:B4:1E:96:9B:F4:ED:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010515
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CE0E568CF2C11EFA1C0BA90762E951A.roa
Signing time: Fri 10 Jan 2025 08:24:51 +0000
ROA not before: Fri 10 Jan 2025 08:24:48 +0000
ROA not after: Sat 22 Mar 2025 08:24:48 +0000
asID: 142286
IP address blocks: 156.225.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66837 (0x10515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 08:24:48 2025 GMT
Not After : Mar 22 08:24:48 2025 GMT
Subject: CN=6780d953-b7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:4e:31:b7:79:93:e7:02:6a:6b:fe:00:d4:
4b:78:1a:46:43:f7:8b:d3:3d:b0:af:94:a2:e0:37:
96:1f:43:5b:4d:b2:1e:c4:8b:38:39:db:46:ab:b5:
66:28:81:1d:18:7e:e9:2b:d6:6f:36:eb:6f:06:bc:
c0:2d:a8:4b:fe:bf:f0:3c:e3:f6:33:d5:95:c7:03:
73:20:53:c2:e8:2d:b8:ff:ff:7b:b5:6c:94:68:87:
3a:64:fb:7f:99:fb:0f:d0:5e:9d:cc:0e:0d:7c:50:
bd:12:b3:70:12:ef:15:67:4e:09:01:58:1e:78:76:
3a:6f:05:7a:9d:c2:d2:c2:f7:16:71:61:70:70:39:
ea:1c:5e:6c:3f:43:ff:c5:25:82:97:3e:d2:41:d3:
14:c7:02:bc:d2:a4:31:5e:dd:af:2c:c2:fa:a1:97:
f6:9e:d0:a4:04:ae:37:58:8b:0f:7a:e9:9e:da:03:
f2:d4:25:9c:e5:25:ec:b4:f5:fa:1a:51:39:83:56:
30:3d:c0:39:1c:63:b4:a8:48:84:b2:e1:b2:bb:cd:
b4:61:45:66:27:62:13:cd:b6:c9:e6:d3:27:6f:13:
36:ba:38:50:ec:99:c9:a7:6b:ec:2a:b4:00:4f:8f:
a7:a3:76:00:a2:2e:a1:b9:b1:43:63:66:ea:6f:0f:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:E6:62:1A:D3:2E:71:EB:D5:95:A6:ED:B4:1E:96:9B:F4:ED:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CE0E568CF2C11EFA1C0BA90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.144.0/20
Signature Algorithm: sha256WithRSAEncryption
69:a7:04:20:94:1f:bb:87:d3:f1:7a:57:9e:b8:29:39:6d:86:
a0:11:99:b9:18:3c:14:32:c0:64:ce:47:51:9d:75:ac:1e:3a:
00:b4:f8:6c:84:1c:f8:28:82:51:08:a4:40:60:34:84:d8:31:
4d:dd:e0:2a:a5:49:d0:2f:59:06:d9:4b:aa:39:8d:d5:3b:87:
41:f1:b0:4f:af:80:02:82:3e:ab:52:4b:e7:23:d5:60:54:75:
d8:aa:5d:e9:df:fd:ef:dc:cc:56:f8:39:0a:cc:86:47:7d:fe:
20:bc:b2:7d:7f:24:9e:fb:2a:70:e1:36:37:9a:f7:6b:de:58:
3b:c6:0d:37:a8:90:38:8f:5f:aa:7a:f9:93:8c:77:f2:db:f7:
c2:4d:ab:cb:12:6e:f5:2a:5c:a3:ae:ed:92:56:d0:59:ed:7b:
63:1d:cc:5a:2f:6a:5d:51:54:51:b6:b7:9b:ff:ef:da:18:0b:
2b:19:0c:5a:b4:23:9a:28:29:fe:ac:a5:4d:79:ce:1d:76:bb:
6d:d5:40:29:14:7a:3d:de:7d:75:a8:c2:22:9a:7c:ec:4e:31:
86:97:41:5b:67:2b:92:bf:06:49:d5:11:da:60:18:b3:85:40:
02:95:55:3d:6a:53:71:33:aa:85:57:82:76:16:8c:92:02:d3:
40:07:81:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:05 2025 by rpki-client