Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87F8A172CD2011EFA2266776762E951A.roa
File: 87F8A172CD2011EFA2266776762E951A.roa (raw, json)
Hash identifier: YI1nkmJ2pJNL2z7amLeeDxVmqjt44BMutOhRgtl0bGE=
Subject key identifier: EA:48:AB:11:8E:6E:06:78:80:9A:1C:37:52:15:A5:1A:50:39:42:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87F8A172CD2011EFA2266776762E951A.roa
Signing time: Tue 07 Jan 2025 17:55:08 +0000
ROA not before: Tue 07 Jan 2025 17:55:04 +0000
ROA not after: Sat 13 Dec 2025 17:55:04 +0000
asID: 984
IP address blocks: 156.241.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64879 (0xfd6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 17:55:04 2025 GMT
Not After : Dec 13 17:55:04 2025 GMT
Subject: CN=677d6a7b-1c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:f1:e0:1f:a1:32:2c:52:66:b5:3e:ca:48:
4f:69:67:a4:b7:02:2d:73:91:b8:24:47:c9:19:0d:
b0:68:d5:76:3c:71:b3:e5:5a:7e:60:87:37:f2:cc:
65:39:7c:fa:52:a9:98:48:55:a0:64:c3:be:51:40:
20:e1:46:3d:63:53:c0:eb:f6:b3:cb:e2:8a:05:8c:
be:80:60:52:4c:1c:b8:bf:09:07:7f:2d:a8:a1:9a:
49:79:d0:2f:5d:71:96:5d:c0:9c:27:69:63:d4:47:
3c:5c:85:bf:08:62:a9:13:2d:49:fb:56:3a:4a:20:
72:83:59:66:ef:43:18:15:06:50:03:7c:37:2c:64:
2a:5c:79:5a:53:bc:81:14:3c:f4:a1:03:87:bd:de:
55:8f:6e:3d:9f:71:c4:0f:51:45:f9:14:f7:0d:28:
ed:e6:23:a4:67:e6:92:e0:15:bb:87:33:43:0b:0e:
c5:20:ab:84:dd:72:85:56:35:63:ba:95:6a:ac:88:
72:23:d2:09:cb:6d:cf:09:7e:0b:29:f4:1e:6e:33:
83:7a:9d:0c:0c:f7:01:74:5b:9e:47:34:5f:40:79:
cb:5a:41:57:f5:9e:7a:cf:98:9a:da:eb:90:29:d2:
87:aa:2b:e5:ea:29:36:98:13:aa:3e:44:a9:53:b5:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:48:AB:11:8E:6E:06:78:80:9A:1C:37:52:15:A5:1A:50:39:42:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87F8A172CD2011EFA2266776762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.194.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ed:40:6d:8e:5f:ed:be:15:44:26:04:3a:5e:e2:64:73:8b:
62:01:1d:a4:68:a5:5f:97:6d:40:26:a7:6f:bd:46:4a:6a:fa:
e4:a4:aa:72:b9:97:b6:37:9f:02:44:25:23:11:4e:84:8c:00:
ba:e5:16:6d:47:69:78:2a:9b:d5:59:73:05:77:ba:44:1f:e1:
fc:31:e1:0a:01:aa:21:90:a2:93:bd:87:e8:e9:1d:c7:10:5e:
ec:09:92:c9:85:67:8b:c8:39:6e:80:57:62:86:f1:de:94:31:
b3:c9:ce:d0:9c:26:2b:6d:ba:00:eb:a0:8a:db:7c:2b:31:20:
87:ce:b3:e0:65:b5:5a:ac:6c:cb:bc:6b:61:18:8c:83:78:00:
3c:3a:01:9e:2a:98:1c:e1:9e:bc:63:6a:8c:ac:32:5f:77:9d:
d6:48:dd:a7:54:6c:26:51:b9:c8:f2:c8:45:c9:1c:6e:77:3a:
28:7b:bb:1b:dc:ba:92:09:95:48:85:aa:57:05:2a:ce:89:3d:
44:f8:12:98:ea:c2:af:16:81:c3:53:3d:7b:a8:1c:d6:10:60:
4e:86:b9:63:d9:bf:2e:5c:6e:f6:6d:44:6c:89:62:f7:38:24:
ee:be:c4:67:d4:71:46:0b:2f:95:5b:77:52:81:37:de:90:b3:
a5:45:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:41 2025 by rpki-client