Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EDF232EC35C11EF8A306468762E951A.roa
File: 5EDF232EC35C11EF8A306468762E951A.roa (raw, json)
Hash identifier: Eec5loR3/VJDMpk95pym9TfSDJmxU/bSCNuLYBGFqB4=
Subject key identifier: 0A:57:67:95:76:05:AF:DC:C2:82:A8:0F:A6:82:D1:32:B8:62:5E:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EDF232EC35C11EF8A306468762E951A.roa
Signing time: Thu 26 Dec 2024 07:38:17 +0000
ROA not before: Thu 26 Dec 2024 07:38:13 +0000
ROA not after: Sun 23 Feb 2025 07:38:13 +0000
asID: 63139
IP address blocks: 156.229.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60527 (0xec6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 07:38:13 2024 GMT
Not After : Feb 23 07:38:13 2025 GMT
Subject: CN=676d07e9-ce62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:6c:c8:b4:f6:13:c6:de:08:23:22:d4:c7:
41:7c:c6:de:79:de:d0:52:e4:38:37:ac:0c:be:81:
81:24:7c:cb:1b:96:48:92:7f:0e:39:a2:9f:b8:0c:
0c:6b:a3:ab:78:d7:85:ff:ae:a6:5d:69:54:8f:eb:
4b:a9:71:5a:46:fe:fb:af:89:12:5f:c0:49:00:cf:
ff:47:60:62:f3:6d:fc:70:7b:f1:23:bb:47:8d:d8:
ec:7d:e4:a2:49:dc:f6:2a:5d:d6:17:a4:c9:bf:a1:
94:b1:5a:5e:b3:b6:28:ea:4f:2e:7e:b0:b6:ab:15:
9e:3c:11:be:21:d8:d0:25:97:05:e6:c5:96:d5:67:
95:2c:fe:fe:93:89:94:bf:fe:3c:8c:a0:b3:c9:6a:
36:4c:a6:93:38:86:43:c2:9a:3b:3a:40:a9:f5:39:
bf:89:cf:54:ad:e9:9f:cc:98:32:21:5f:d9:b1:bc:
47:ea:c5:5e:f6:ec:8f:87:a0:93:0e:11:ff:a4:a2:
db:8a:d6:18:7f:8a:c9:ca:48:78:4d:99:05:63:ff:
1b:03:b1:ac:6c:0f:c6:01:06:c5:c1:1b:34:72:a9:
ce:26:07:4d:5a:24:a5:ba:8c:d5:03:4c:b2:13:f8:
6e:54:9a:fe:38:e6:dc:b0:42:e1:5f:36:8b:8f:5f:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:57:67:95:76:05:AF:DC:C2:82:A8:0F:A6:82:D1:32:B8:62:5E:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EDF232EC35C11EF8A306468762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:80:31:f9:3a:e9:db:6c:56:fe:2d:40:5d:a7:2e:0a:d6:b3:
56:a8:fe:54:24:60:e4:89:a1:03:55:9e:42:37:d1:05:31:64:
55:e0:fa:39:ca:3d:4d:56:57:f0:ca:5a:a5:f6:c4:46:ca:aa:
76:57:ef:53:d7:ab:5d:41:da:12:04:c2:57:f5:c5:9f:e7:86:
7d:52:62:30:bc:e8:c1:3c:37:9b:ed:87:36:cf:85:a0:df:5f:
8c:cc:e6:2b:3e:69:d0:9e:d2:8e:a3:f7:f5:71:69:53:3b:3b:
1a:f3:f0:36:c0:74:e2:05:da:1f:fc:8f:16:5a:a3:a5:38:29:
76:f4:79:cb:77:9e:62:a3:08:18:1e:74:1c:86:9d:4c:29:20:
49:c9:61:80:ca:5a:dc:2d:6e:53:b2:ab:a1:ac:27:23:38:31:
83:fd:66:05:a1:38:8b:d1:4e:9e:4f:8e:05:e4:52:6c:72:c1:
8e:72:19:e5:27:b1:42:9e:ad:d1:f3:87:bb:f7:1e:8e:7b:9f:
c7:dc:81:cd:56:83:a0:f0:c0:38:6f:8c:0d:8a:66:8f:ea:8f:
70:24:9c:76:97:98:ea:67:3f:2b:e7:1c:e5:9c:52:d0:ee:16:
19:0b:87:4a:d1:6d:bc:66:63:a3:54:54:d7:1d:48:35:1b:f8:
98:6e:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:55 2025 by rpki-client