Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6325A826CDAD11EFA5687283762E951A.roa
File: 6325A826CDAD11EFA5687283762E951A.roa (raw, json)
Hash identifier: HYo7Bfx+qyPxCyIFmbQXrKd7FMTxj1DSuM0H4fUjf1U=
Subject key identifier: 26:D6:57:12:FA:65:FA:8D:E9:24:DF:4E:F3:E6:04:88:96:D6:C3:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010163
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6325A826CDAD11EFA5687283762E951A.roa
Signing time: Wed 08 Jan 2025 10:43:25 +0000
ROA not before: Wed 08 Jan 2025 10:43:21 +0000
ROA not after: Sat 13 Dec 2025 10:43:21 +0000
asID: 984
IP address blocks: 156.255.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65891 (0x10163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:43:21 2025 GMT
Not After : Dec 13 10:43:21 2025 GMT
Subject: CN=677e56cd-5728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:b1:6f:23:6d:7c:9d:ed:3f:b3:a0:03:ab:
dc:53:fb:6b:ff:94:15:06:79:cb:c9:13:77:3e:c6:
85:af:38:c7:67:63:a8:7b:82:c9:10:d0:a7:cf:30:
32:0f:4a:90:99:29:ff:3b:c9:1b:3b:c7:ff:61:f4:
dc:a8:03:75:7e:fc:0c:20:f6:43:8f:0a:e7:da:bd:
07:95:7c:5e:77:61:65:e0:f6:cc:66:7e:ab:93:a3:
b1:26:cc:41:70:3f:cd:1f:73:07:8f:0b:59:99:d6:
18:0e:b1:3d:b9:21:ac:46:7f:08:60:b8:b3:49:a4:
ef:06:62:b2:84:cd:fc:4e:1d:bd:da:2e:aa:f5:e2:
9f:0b:f6:7d:82:84:71:af:f7:ae:35:0c:b8:d3:33:
84:9a:17:80:29:46:3d:30:a0:fe:c6:8b:7d:44:8c:
01:68:e8:f3:5c:19:b1:5f:89:06:4a:69:3c:f3:09:
a8:ae:0d:f8:06:fd:8b:c0:91:c3:ab:69:7a:b7:fb:
11:a8:58:c6:62:78:66:42:fa:b0:14:6c:a6:91:45:
20:3b:52:73:a2:86:b6:89:c3:f1:ed:27:db:e7:cb:
4b:df:5a:8c:eb:f7:eb:9d:3b:c9:44:ca:14:12:fe:
a0:3f:b2:c9:e1:06:73:8b:0f:e3:00:db:70:b3:95:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:57:12:FA:65:FA:8D:E9:24:DF:4E:F3:E6:04:88:96:D6:C3:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6325A826CDAD11EFA5687283762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.52.0/24
Signature Algorithm: sha256WithRSAEncryption
52:dc:99:17:8e:4d:9c:39:4f:09:57:57:97:c7:fd:bf:5f:2f:
87:45:6e:0d:dc:c9:4a:7d:b6:26:5a:36:68:62:7a:8b:93:a9:
d6:15:8a:9e:1b:26:ea:80:ce:4f:ee:54:a8:5c:23:e4:ee:30:
ca:53:49:e1:c8:76:a3:ce:ed:7a:0c:81:00:f6:9f:f8:01:99:
98:ba:2b:78:4b:33:b5:22:77:98:2a:e0:ab:2e:8c:90:6f:c8:
fe:99:42:3a:bb:12:7d:6e:97:0b:ad:f4:f5:38:d5:9f:1e:06:
69:b2:18:64:63:f5:61:02:d6:3c:be:67:c7:ce:ec:89:8f:3e:
c3:7b:24:03:8a:de:01:f5:13:e5:a9:74:96:68:61:61:da:11:
b9:60:b3:01:75:90:17:11:26:03:01:69:24:57:cf:15:46:f6:
29:3e:7b:98:19:cc:c4:57:09:77:50:8d:35:1d:c9:d6:83:78:
90:e0:97:aa:f5:c5:b6:65:88:b1:da:22:6b:62:3f:42:ae:97:
d5:69:bc:c9:ea:26:47:73:30:1b:55:66:8b:25:17:8e:68:f6:
04:af:51:4c:9c:5a:2e:93:ee:eb:fa:bb:f0:11:23:16:5f:12:
90:fa:a4:ee:45:5c:49:69:df:37:a7:6e:83:90:bd:8b:a5:ad:
63:8f:fe:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:41 2025 by rpki-client