Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E261D26CD6811EFA257744A762E951A.roa
File: 7E261D26CD6811EFA257744A762E951A.roa (raw, json)
Hash identifier: Ex8mYvz9Ixscr8EcN2KpjUox3o2cI0YOpDoTP6Zs5fc=
Subject key identifier: 1C:10:F0:54:51:36:AA:55:8D:E1:F2:B4:6A:2F:10:9C:FD:D6:E6:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E261D26CD6811EFA257744A762E951A.roa
Signing time: Wed 08 Jan 2025 02:30:15 +0000
ROA not before: Wed 08 Jan 2025 02:30:11 +0000
ROA not after: Sat 13 Dec 2025 02:30:11 +0000
asID: 984
IP address blocks: 156.247.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65365 (0xff55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 02:30:11 2025 GMT
Not After : Dec 13 02:30:11 2025 GMT
Subject: CN=677de337-c262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:41:48:a3:b3:7d:ad:78:3e:34:1f:23:d8:
86:27:98:9b:5b:3d:9e:55:18:37:89:75:5b:59:03:
93:cd:64:0e:fc:9a:28:1f:24:81:f6:14:94:c2:67:
8a:73:80:ff:16:02:95:62:2d:d0:df:78:84:a3:bb:
bd:b4:11:dd:53:07:3c:56:5b:72:75:e7:49:90:b3:
ce:78:97:66:f2:72:70:18:13:4e:98:50:93:ab:49:
3b:39:3e:12:da:17:68:5e:59:95:48:77:3e:81:8b:
23:32:42:8c:54:af:20:56:f8:70:e6:0b:c1:8e:1a:
fa:96:c1:8c:23:c9:9c:0c:eb:77:fe:6e:c4:94:83:
6a:12:a9:7d:9b:93:23:ed:72:a0:87:ec:ed:e5:3b:
80:30:64:c3:93:95:9e:5e:b8:2d:8d:2d:12:36:e2:
56:72:28:ab:b3:e6:21:ad:d4:c2:8c:26:e2:03:8e:
1a:94:79:2b:4e:56:e7:cc:d2:aa:be:de:e3:89:5e:
e0:ae:5c:a6:10:99:37:2b:68:af:40:f8:e3:8a:44:
4a:7d:60:98:3d:19:7a:9d:55:8c:2d:eb:61:f0:65:
ee:c4:f4:d3:c7:a9:ff:13:8f:de:cb:f5:b5:59:fd:
1e:e0:75:44:50:0c:60:21:bd:96:c3:1d:54:0e:d8:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:10:F0:54:51:36:AA:55:8D:E1:F2:B4:6A:2F:10:9C:FD:D6:E6:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E261D26CD6811EFA257744A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.118.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0e:ec:35:0c:2f:6a:24:57:0b:08:33:85:1b:d4:17:12:b1:
ca:3a:50:4e:d0:e2:b8:12:6e:bd:b6:e3:38:ed:dc:58:6b:5a:
23:88:56:1b:70:51:15:ce:a7:54:74:c9:0d:5c:a9:7a:6f:b5:
d4:86:c8:d0:18:6b:cd:34:8f:54:ae:d7:51:97:89:93:b0:cc:
4f:c3:94:67:e4:12:06:86:fe:d8:57:03:e3:70:16:c1:40:d6:
81:9f:66:93:08:38:fd:8e:32:fc:46:2d:1c:58:1c:69:3e:2c:
8f:f7:ee:b5:b9:86:3d:b8:d7:6c:37:10:f8:8f:db:96:16:36:
55:29:e0:24:ab:b1:c4:46:3b:e7:e5:d4:7c:73:28:21:01:cd:
f7:31:42:36:de:19:dc:1f:37:16:c2:25:c7:36:2d:7a:4b:a8:
05:be:ac:5e:4d:b2:f3:c0:32:c4:02:f1:d3:cf:16:ac:c9:2b:
be:f5:b6:0e:6f:b3:53:e6:43:d3:30:ae:50:3e:ed:a3:32:61:
5c:4b:75:a7:ff:fc:d0:f2:ee:8d:c6:6b:6a:06:79:3d:4b:c1:
74:ed:4a:fc:d4:b7:4b:c7:b3:e4:a7:32:78:92:d1:5a:7e:26:
cb:bd:70:4e:79:07:b4:d2:27:52:bf:bb:6a:37:15:2f:53:ca:
a6:2c:55:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:11 2025 by rpki-client