Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/658AB12CCDAA11EFBCA75F70762E951A.roa
File: 658AB12CCDAA11EFBCA75F70762E951A.roa (raw, json)
Hash identifier: sDfcZCy6lB7lq0TsRBTA3QXgvY7NKlz4ABb75xteISI=
Subject key identifier: D5:71:6F:7D:3D:E3:ED:DC:8C:60:9C:16:C3:10:18:08:58:3C:89:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01014B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/658AB12CCDAA11EFBCA75F70762E951A.roa
Signing time: Wed 08 Jan 2025 10:22:00 +0000
ROA not before: Wed 08 Jan 2025 10:21:57 +0000
ROA not after: Sat 13 Dec 2025 10:21:57 +0000
asID: 984
IP address blocks: 156.255.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65867 (0x1014b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:21:57 2025 GMT
Not After : Dec 13 10:21:57 2025 GMT
Subject: CN=677e51c8-633f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:45:09:12:05:0a:a6:86:03:45:ff:73:90:
18:05:8f:87:65:74:76:af:78:a0:71:35:06:bb:5d:
e9:45:52:0d:97:85:7c:0c:a7:b4:c6:fd:ba:90:6f:
03:76:25:40:4a:86:58:58:a8:4f:e6:6f:6a:e1:c4:
a3:14:40:82:2e:de:7b:0f:07:a7:fb:ca:b0:15:92:
70:57:bf:83:ea:93:09:38:82:93:18:3a:9c:7c:a1:
43:d2:df:3a:f9:a7:35:c8:ba:d4:95:2b:15:54:a4:
8e:ec:37:e4:ae:14:d1:0d:99:4a:1b:99:12:fd:73:
a8:d8:ae:49:39:68:97:6a:fe:98:b5:b3:e7:c3:a6:
02:d8:43:00:ae:fa:ca:8a:38:f8:b5:03:65:a7:09:
27:1d:eb:0c:38:cc:64:e4:2a:7a:75:9b:58:0a:cc:
32:22:2e:01:96:70:69:95:29:e4:88:4a:d6:fb:9f:
7d:2d:cc:3e:dc:c7:e4:57:d6:ed:0c:cd:e8:e6:9c:
fe:b2:96:11:73:94:a9:13:85:c6:84:16:d1:ce:cf:
d0:72:b6:f6:fe:5c:ab:48:a8:b4:eb:f2:74:07:24:
68:c2:05:23:e3:f1:f7:eb:c0:cf:1b:cd:ac:44:b4:
bd:37:09:64:3c:f0:02:e4:2a:2d:c7:c3:03:ba:26:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:71:6F:7D:3D:E3:ED:DC:8C:60:9C:16:C3:10:18:08:58:3C:89:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/658AB12CCDAA11EFBCA75F70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9a:c0:85:be:4e:29:ba:09:51:81:8a:77:d6:d4:b3:40:98:
db:d0:2c:0b:1c:75:99:e1:34:38:48:ee:d8:b3:f8:f5:03:2f:
00:02:17:98:34:06:4d:2c:58:ca:bb:a8:b6:c5:d8:99:01:b0:
ea:0a:b0:b3:b1:8a:c2:e5:d1:d2:d5:70:e4:8b:a8:e0:e1:d6:
d8:94:c1:5b:c0:3f:8e:d1:70:f6:c9:ef:00:c1:c7:62:1f:e5:
2c:85:75:62:22:75:cb:7c:4e:9f:af:eb:be:1d:53:f9:b5:18:
bb:b3:21:b6:b4:a7:97:3d:9b:03:a7:06:55:f1:64:74:ea:8c:
59:f5:1c:de:ab:ec:0c:2f:64:9a:5f:5b:19:2c:29:a5:2f:c3:
36:11:b7:57:20:c3:2f:21:81:2e:79:78:06:9a:95:da:7a:f6:
dd:00:78:fc:c5:e9:b9:44:74:39:38:0f:c2:1f:2d:06:97:54:
e3:84:e7:ce:2c:11:e9:14:84:3f:24:28:1f:cd:c9:48:5b:ad:
56:1e:15:d4:10:01:c3:dd:0e:77:9a:7b:60:07:0b:be:c2:ff:
53:93:53:b1:01:cd:da:58:38:e3:c6:2c:8f:5d:ba:c4:a2:e7:
24:f9:93:46:39:8f:95:42:20:1d:40:a5:23:83:bc:dd:cb:2b:
d2:9d:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:37 2025 by rpki-client