Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9666E980CCE911EF882E449C762E951A.roa
File: 9666E980CCE911EF882E449C762E951A.roa (raw, json)
Hash identifier: yJaJSs3AGoD8QYjKzwaOPXSAavlJFY/VOmtZth5QBeI=
Subject key identifier: 4E:3D:69:CA:9D:3D:99:04:B4:E0:97:A7:1F:30:62:5F:0E:94:CD:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9666E980CCE911EF882E449C762E951A.roa
Signing time: Tue 07 Jan 2025 11:21:49 +0000
ROA not before: Tue 07 Jan 2025 11:21:46 +0000
ROA not after: Sat 13 Dec 2025 11:21:46 +0000
asID: 984
IP address blocks: 156.235.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64493 (0xfbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 11:21:46 2025 GMT
Not After : Dec 13 11:21:46 2025 GMT
Subject: CN=677d0e4d-d345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:50:af:38:a9:0e:1f:cd:50:13:41:b0:ef:
79:5b:e0:bf:71:dc:27:b6:37:38:30:3a:64:91:93:
31:a1:f2:f1:ef:7b:e8:95:b2:c9:ac:f6:3d:eb:f8:
48:01:4f:0e:cc:e0:21:00:d3:6e:ea:36:22:38:62:
09:fc:b7:8a:75:81:fd:e9:b9:f9:f3:c5:ce:b7:f2:
2c:d5:ab:d0:26:9d:fb:17:48:3b:d3:e9:b8:be:8f:
11:63:88:f4:db:da:36:70:4e:7d:fc:55:17:6c:f1:
8c:43:3c:2f:d1:a8:0b:25:44:77:d0:e9:f9:9d:b5:
11:56:31:54:03:5b:0e:79:5f:ea:02:c5:16:83:2a:
37:76:32:91:37:9b:2e:e6:ee:9b:1d:7f:a8:d0:27:
89:c4:6b:8f:50:63:66:73:60:c6:2b:5d:14:04:4a:
5a:fd:2a:19:f3:57:05:0a:03:ae:f1:6b:90:b8:4b:
a0:95:b0:e2:3a:c8:dd:51:d0:67:f1:6b:55:c8:21:
99:e8:9f:45:05:eb:b6:4d:51:f5:ff:c0:87:f1:1b:
11:76:d7:ec:d8:d2:78:79:df:62:2b:cb:96:e9:ff:
8a:19:30:88:08:78:5b:aa:82:d1:f5:0b:35:52:90:
11:20:e6:08:7c:25:ed:e1:a5:fe:2d:18:92:81:df:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3D:69:CA:9D:3D:99:04:B4:E0:97:A7:1F:30:62:5F:0E:94:CD:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9666E980CCE911EF882E449C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e2:20:43:ed:95:93:81:d1:fc:67:01:89:92:03:a4:78:03:
96:db:09:88:34:1d:56:5c:6b:ce:b8:9b:aa:c3:fe:44:15:2d:
7e:5c:4f:96:a9:25:c1:92:30:f8:29:22:c1:38:ee:28:79:34:
20:80:6b:cd:02:83:d4:90:c9:de:dc:53:1a:46:e0:c3:01:b6:
d0:3b:77:71:33:9b:86:52:ba:28:6b:d7:1b:23:72:9f:6d:99:
47:87:e9:5d:22:ea:37:91:2c:2e:de:d8:0a:3c:cc:1f:eb:d7:
f5:63:90:30:2e:58:65:61:0d:2f:c5:db:27:90:32:51:72:e2:
10:c6:01:3f:29:99:6d:e4:c1:20:1e:c5:7c:85:eb:4c:a1:45:
e0:c2:b4:87:32:8f:0d:3c:95:d3:b2:aa:80:47:71:f4:81:dd:
46:bd:bc:7e:f6:dd:34:25:ce:20:1b:ae:18:e9:0d:29:37:1f:
00:18:26:bf:83:5e:3b:a7:2c:05:4c:ec:a2:99:56:00:f1:60:
c8:3c:77:16:e3:96:ba:d2:b4:1f:91:b4:2e:31:4f:2a:e1:06:
ed:1a:4a:a8:99:f3:ad:20:b8:9a:b9:ba:03:f5:98:1a:c4:fa:
ea:db:23:d8:ce:e7:f2:ab:f3:5f:3d:ed:37:d5:bc:c4:b9:b8:
98:18:ff:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:37 2025 by rpki-client