Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E656220CD0211EF9CA8E7B8762E951A.roa
File: 8E656220CD0211EF9CA8E7B8762E951A.roa (raw, json)
Hash identifier: Y0Iq5TH64TuS7/pKfZdyyEwUUXMva7JMQnQZA0Z3K7I=
Subject key identifier: 51:D1:08:2D:CB:59:37:F1:CD:5B:57:6E:6E:8A:A8:4E:37:CA:3A:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E656220CD0211EF9CA8E7B8762E951A.roa
Signing time: Tue 07 Jan 2025 14:20:33 +0000
ROA not before: Tue 07 Jan 2025 14:20:30 +0000
ROA not after: Sat 13 Dec 2025 14:20:30 +0000
asID: 984
IP address blocks: 156.238.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64637 (0xfc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:20:30 2025 GMT
Not After : Dec 13 14:20:30 2025 GMT
Subject: CN=677d3831-fcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:5e:0b:f5:f8:1c:39:af:4c:16:6a:99:82:
28:07:ad:bb:1e:64:9b:e4:ea:a9:36:57:b4:52:ce:
f4:30:de:5c:0c:6e:3a:ba:64:1a:15:d6:40:ba:22:
de:35:c3:54:c6:ad:85:08:98:b4:c7:f4:47:39:31:
b9:0c:27:cb:63:50:6f:86:77:a9:18:90:d8:29:38:
9d:79:24:3e:96:3b:82:75:a8:71:4f:86:f0:48:4f:
73:cf:b1:f5:de:43:ad:3d:2a:dd:85:24:c0:69:6a:
a2:b7:8d:d7:a5:36:c5:59:14:bb:b6:bc:d7:f2:28:
51:56:df:07:93:fe:d8:1b:23:95:bf:e5:91:62:89:
40:ed:0f:da:51:4c:9e:55:12:2e:8b:b9:d3:14:d7:
c5:0e:9e:9d:8b:de:d3:2e:e4:79:96:ec:e5:0e:53:
11:fc:ec:b5:39:d5:6a:ae:01:b3:fb:3b:80:aa:93:
09:64:81:84:be:5a:02:8f:9a:13:5d:62:02:84:97:
4b:fb:19:9b:b8:ef:c3:a7:df:ad:f5:97:e8:bc:04:
af:7c:8f:af:2f:7a:f7:87:b3:d7:21:e6:f8:20:59:
4f:b8:7a:26:81:fd:4f:42:a1:4a:46:06:e3:89:72:
72:20:f0:b9:9c:da:ed:84:d5:bf:11:c5:7e:df:88:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D1:08:2D:CB:59:37:F1:CD:5B:57:6E:6E:8A:A8:4E:37:CA:3A:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E656220CD0211EF9CA8E7B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.175.0/24
Signature Algorithm: sha256WithRSAEncryption
15:bf:97:de:d5:c2:9a:1a:93:dc:a0:68:66:f9:f5:53:a9:3e:
32:04:2a:6d:f4:1e:ee:33:47:c1:28:c8:e8:38:18:9f:89:0a:
48:61:5d:83:98:13:e6:c0:97:55:86:3f:9e:e6:bd:8f:9d:bc:
75:c8:61:a8:61:81:a6:78:a3:cd:2b:88:32:17:d9:8e:ca:21:
37:e1:21:13:19:3e:8f:48:53:71:a7:6a:53:56:fe:49:39:95:
12:9f:8f:b1:e2:6f:c2:4f:87:40:9d:aa:f6:4f:7f:0b:0d:41:
39:f9:c4:9e:db:ec:b7:3f:8d:4d:ab:e6:17:55:01:66:e1:16:
7e:bc:a1:4b:b7:ce:1c:9b:32:e6:f8:2a:3b:6b:3f:b0:43:1a:
bc:7b:63:ab:0d:67:3a:7d:b7:28:47:2f:56:99:69:89:4c:b4:
bd:5c:f6:82:e9:0f:6e:a0:7b:6f:91:b8:e7:88:a3:62:b9:9f:
b6:01:a4:67:59:57:06:39:a9:d7:eb:89:9e:1d:59:4e:cc:61:
2a:6b:54:5f:0d:75:f2:95:1a:4a:e2:d0:5f:c2:e8:23:4a:7a:
4a:e0:d6:01:56:6d:2f:5a:87:5d:05:15:7f:fd:24:4b:78:55:
55:0f:25:0f:50:bf:59:5f:b5:10:79:c6:87:99:00:a8:ad:ab:
5e:f2:90:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:42 2025 by rpki-client