Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74F226DAD30511EF8A78156C762E951A.roa
File: 74F226DAD30511EF8A78156C762E951A.roa (raw, json)
Hash identifier: E8RndQMD5lodCsU+QoyldTJs+Ot/2/vTdj1qpzqPEBU=
Subject key identifier: 53:D1:77:F5:32:CF:88:2B:0E:F1:5E:42:CC:04:57:3B:4E:97:65:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01080B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74F226DAD30511EF8A78156C762E951A.roa
Signing time: Wed 15 Jan 2025 05:56:26 +0000
ROA not before: Wed 15 Jan 2025 05:56:22 +0000
ROA not after: Mon 03 Jan 2028 05:56:22 +0000
asID: 17561
IP address blocks: 156.254.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67595 (0x1080b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 05:56:22 2025 GMT
Not After : Jan 3 05:56:22 2028 GMT
Subject: CN=67874e0a-f027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:79:c1:80:2b:dd:cf:d6:60:08:ad:61:d3:
7b:3a:2f:bb:c3:a5:15:0a:b9:fd:ca:03:4e:96:1c:
b3:bf:13:a9:89:0c:77:d0:69:6f:18:43:3b:d3:3a:
ef:f5:f8:0c:c0:97:ab:88:1e:c7:9f:8a:0d:8a:af:
02:31:15:87:e7:79:46:91:00:47:09:e5:2f:38:87:
fc:43:0a:41:d1:41:b8:a7:9e:8e:a0:1c:ee:d7:b1:
4d:83:8c:14:48:4a:c1:8b:9f:a1:d9:ce:1d:ee:07:
aa:1c:ec:08:a7:98:d5:1d:6f:f1:3c:ac:e0:89:b9:
43:a4:83:d9:62:c6:61:02:dd:17:43:23:af:ef:ed:
96:5a:e9:c0:12:7c:0a:76:ef:04:e6:77:ae:c7:d7:
a8:23:d4:31:61:b5:45:f0:7f:29:0d:1b:26:c3:04:
a1:80:d9:8b:cd:3a:1f:8b:ad:c2:9e:0d:97:1c:b4:
5a:89:01:a4:0b:bf:0e:cc:0b:8d:99:15:8e:24:13:
86:08:fa:91:1a:b5:d3:fa:96:54:fc:50:3c:d7:b7:
90:19:b0:ae:72:e4:a2:94:d1:46:61:c3:b3:0c:5b:
a6:d6:2b:05:e4:c1:a6:e5:a4:d3:15:8b:9b:95:ca:
d3:c3:66:92:e4:e0:e3:ba:34:aa:d1:fe:fa:d9:91:
a4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D1:77:F5:32:CF:88:2B:0E:F1:5E:42:CC:04:57:3B:4E:97:65:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74F226DAD30511EF8A78156C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.48.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:20:f1:ce:06:e1:5b:b3:5f:02:bf:57:d7:17:5d:2d:df:9c:
87:20:68:2a:74:82:0b:77:af:62:80:09:5a:29:d1:84:e9:e8:
c7:98:3f:6d:38:07:4c:02:48:20:90:7f:b3:8f:36:19:a8:8c:
f7:bf:a8:88:ee:b6:9a:74:40:5f:cb:01:12:d0:22:78:3a:d1:
66:a9:02:d2:8c:21:3e:64:5a:46:46:51:25:dd:70:45:55:b3:
05:71:f4:77:4d:dd:ae:4b:d1:ce:ff:42:90:6e:77:4a:13:0d:
53:51:20:58:ce:e7:54:7b:f5:b0:2d:e9:e4:b6:bc:2c:83:25:
e9:d9:38:24:ba:84:e0:99:2d:ee:29:97:6b:39:7b:19:34:c3:
7a:61:a4:6d:9a:aa:ef:17:b5:79:f6:8b:84:cd:b0:29:98:dc:
e6:56:0d:fe:65:ee:5f:95:5b:dc:db:d6:1d:8c:f2:06:1f:7a:
45:7b:7e:5b:3d:96:9a:ec:c7:5e:bb:8c:a9:ab:b8:a7:ca:df:
f1:61:97:6e:a6:22:87:6f:c5:0b:40:39:98:3e:80:81:b4:ae:
d2:26:05:12:33:ce:67:ae:8e:88:a1:a2:e7:ab:a1:5c:d8:f5:
2c:01:20:76:30:e5:70:d7:9a:71:5e:42:c3:30:12:93:9b:9b:
d6:0f:c4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:26 2025 by rpki-client