Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/639C3EBACDAC11EF8B780B7D762E951A.roa
File: 639C3EBACDAC11EF8B780B7D762E951A.roa (raw, json)
Hash identifier: rBpsvRX9yU1AbrDalr40HSXP0TjJw7831bgKuc9K0ps=
Subject key identifier: BA:E3:75:55:56:B5:2F:A2:0B:18:EA:76:F9:CE:97:71:CA:36:F5:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01015B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/639C3EBACDAC11EF8B780B7D762E951A.roa
Signing time: Wed 08 Jan 2025 10:36:16 +0000
ROA not before: Wed 08 Jan 2025 10:36:12 +0000
ROA not after: Sat 13 Dec 2025 10:36:12 +0000
asID: 984
IP address blocks: 156.255.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65883 (0x1015b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:36:12 2025 GMT
Not After : Dec 13 10:36:12 2025 GMT
Subject: CN=677e5520-fcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:59:a2:aa:a4:47:83:ad:de:be:34:df:bc:
e4:34:1b:04:76:3f:40:e1:d9:89:d2:04:1a:ac:a0:
b9:6c:5d:f2:a9:0c:b0:05:9c:cb:4f:bd:59:c0:e2:
83:33:80:dd:a1:b3:13:55:de:b2:48:c1:31:21:4e:
41:96:c2:05:a1:fe:74:9f:7c:c9:c8:0d:a0:08:a6:
ba:fd:b3:51:fd:08:d3:54:6f:f0:59:93:2f:46:c6:
98:a1:12:af:f4:0e:5a:92:8c:8d:bb:2e:0a:76:80:
7d:e9:65:0b:eb:c3:5a:f5:1c:c7:a6:8f:ca:ee:15:
47:90:1c:e4:92:8f:1c:d9:f7:75:96:af:bc:37:47:
e2:e8:80:cd:62:5a:d1:2c:5c:57:55:b1:ea:d4:a8:
da:79:b2:79:16:1a:73:f3:78:1c:2f:66:88:a3:2b:
15:80:d6:60:e9:b8:11:98:37:3d:77:59:6d:14:df:
93:9e:76:03:ba:83:f8:f7:c7:f4:2f:23:88:8e:e8:
40:30:26:f1:0e:9e:f8:f5:07:8c:8e:0f:88:f9:32:
e0:04:c2:f1:ca:81:5f:7e:a1:98:fd:8e:f1:6c:e7:
c1:b4:f8:5d:c3:22:11:e5:19:b7:4e:87:f3:9d:9b:
e0:18:59:05:95:bc:55:30:e0:1d:59:04:eb:b6:e6:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E3:75:55:56:B5:2F:A2:0B:18:EA:76:F9:CE:97:71:CA:36:F5:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/639C3EBACDAC11EF8B780B7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.48.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3b:50:bd:5d:ac:67:f4:90:28:73:b3:01:8e:b8:74:65:4e:
8c:d1:e4:e3:a0:97:ed:dc:e1:95:e1:f1:a1:44:98:a1:1f:71:
b8:1f:3f:e8:6c:4b:9d:a0:7f:a2:19:ae:11:cb:5c:e7:c0:70:
4c:b0:e5:5b:85:08:0b:6f:e4:fa:59:a9:f3:77:8b:5c:58:e2:
6b:0d:26:30:76:05:69:18:8f:e8:8b:43:a2:e2:86:ad:b5:93:
6b:8a:a8:67:7d:ab:87:9f:ef:63:91:54:dd:63:ba:97:96:6d:
64:2b:8d:ba:97:e1:f5:35:88:af:56:19:80:3a:92:3d:cc:7f:
af:96:a8:ea:40:4f:c6:22:45:a0:05:01:61:86:d8:b8:dd:a7:
4b:fc:83:9d:8a:40:e3:86:91:a6:65:fd:5f:81:0c:81:b7:5c:
76:52:63:84:6c:a4:31:86:10:69:5d:f1:34:45:f4:2f:0e:2c:
ab:ea:87:5d:e7:9a:76:68:e5:f2:33:ff:15:c2:6b:c0:6c:c3:
2d:7a:1e:14:6e:6b:da:b7:03:9d:34:08:46:56:e4:59:13:7a:
5a:44:e8:90:17:a7:c0:ea:5f:75:0b:0c:63:23:e4:e7:45:da:
a8:ab:f0:f8:18:e9:f0:f5:bb:93:03:05:86:a8:bb:e0:76:21:
8b:58:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:41 2025 by rpki-client