Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E7ED026CCD711EFA2E1D6A8762E951A.roa
File: 5E7ED026CCD711EFA2E1D6A8762E951A.roa (raw, json)
Hash identifier: 5Kbscqaqe6yZaZvrtBZHiME8U1HF+y0PzpKESb5j1hM=
Subject key identifier: 3C:19:CA:28:BE:B8:B1:BD:13:84:C4:EA:7E:92:3D:B3:05:12:4F:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E7ED026CCD711EFA2E1D6A8762E951A.roa
Signing time: Tue 07 Jan 2025 09:11:25 +0000
ROA not before: Tue 07 Jan 2025 09:11:21 +0000
ROA not after: Mon 13 Dec 2027 09:11:21 +0000
asID: 17561
IP address blocks: 156.233.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64279 (0xfb17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:11:21 2025 GMT
Not After : Dec 13 09:11:21 2027 GMT
Subject: CN=677cefbd-4d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:e5:b7:d2:6c:e6:4f:eb:3a:21:11:51:f3:
83:17:b8:a6:06:98:74:4a:dd:30:a6:e4:a9:0a:46:
bb:30:d7:5f:1a:ac:81:da:42:13:b5:76:56:33:11:
b0:f7:e4:b8:c0:d6:a9:f6:d1:0a:c9:44:18:c0:41:
dc:30:8f:af:ac:3b:16:ac:27:d3:ae:d4:94:5d:28:
38:c7:0a:6b:44:3d:fe:7a:c3:f3:de:d6:5d:ca:29:
bf:0c:bf:ae:39:36:51:98:57:02:fe:c1:75:89:dc:
63:9d:f2:fa:fc:4e:5a:d5:b1:b5:1d:2f:ce:9b:15:
56:52:7d:9c:19:d7:a8:52:26:a4:79:5f:a6:1a:26:
7b:6a:91:88:56:e4:6f:70:99:8a:ef:0a:c5:5e:3d:
0e:12:e1:5b:43:8a:cd:c5:49:9e:eb:7c:a6:2a:12:
97:8e:7d:c4:c8:f5:26:69:a0:dc:19:e3:4f:09:1b:
a3:b4:ac:c0:3d:2c:da:ad:24:77:e8:7f:ad:4f:cf:
04:51:4d:be:0a:f7:d7:e8:22:cb:d7:cd:1a:62:f6:
53:c5:a2:1e:7a:23:91:c2:4b:bf:e1:f0:8d:74:41:
54:18:51:3c:e6:14:72:5d:9c:0f:34:68:2e:b1:3f:
64:75:34:87:9e:6b:e5:50:15:9f:39:e8:10:0f:03:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:CA:28:BE:B8:B1:BD:13:84:C4:EA:7E:92:3D:B3:05:12:4F:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E7ED026CCD711EFA2E1D6A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.181.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a0:d9:e2:ac:bd:7e:56:5d:68:42:a4:5d:2c:d1:3a:76:d1:
65:ec:f7:9a:84:e5:a6:b0:a3:c8:5d:aa:8e:d4:1e:45:5d:75:
cf:2c:90:8b:47:ae:bb:cd:6a:2b:54:c3:26:d0:bf:ad:f1:4f:
22:ac:ce:74:a3:16:7e:5c:be:04:80:61:66:cb:cf:31:6a:ef:
45:96:35:66:cb:78:0a:f8:e2:5f:07:ae:05:23:5e:da:ab:ea:
0a:f1:fa:2a:90:c6:ef:4a:69:4e:90:4b:48:9e:16:82:b4:a2:
c2:c2:f6:ce:e1:4a:fd:4f:1a:ae:40:f8:d4:5a:ce:83:ad:17:
97:b0:12:27:5d:35:c5:0b:b7:ea:79:27:82:7c:ca:1b:49:31:
d4:d4:8e:66:b6:b2:5f:d5:c2:b3:ff:8c:81:7e:09:db:fc:dd:
21:e7:e9:f0:1b:c3:9e:b1:0a:6f:16:4f:ed:88:80:58:08:5a:
e9:59:a9:27:f8:d1:df:9c:fb:65:b0:f6:a2:32:81:1f:99:c7:
a7:2d:1d:05:27:99:4e:b8:64:39:b3:3e:fe:62:24:7e:b1:46:
29:0b:5f:bf:af:26:13:c7:b1:99:4b:7f:b1:28:69:7c:71:cc:
16:f4:fc:b4:28:b0:be:29:32:9e:bd:56:83:04:f5:18:69:e2:
c4:4b:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:14 2025 by rpki-client