Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A08905B4CD3F11EF8DE374B9762E951A.roa
File: A08905B4CD3F11EF8DE374B9762E951A.roa (raw, json)
Hash identifier: dDF07alhSDWsgzCybAwIRM7RcjNeaPQiyEalszK4Qwc=
Subject key identifier: 5B:ED:FA:B2:14:1D:EB:5C:60:EB:A7:76:E4:F6:15:9A:38:CD:84:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A08905B4CD3F11EF8DE374B9762E951A.roa
Signing time: Tue 07 Jan 2025 21:37:43 +0000
ROA not before: Tue 07 Jan 2025 21:37:40 +0000
ROA not after: Sat 13 Dec 2025 21:37:40 +0000
asID: 984
IP address blocks: 156.243.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65125 (0xfe65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 21:37:40 2025 GMT
Not After : Dec 13 21:37:40 2025 GMT
Subject: CN=677d9ea7-40ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:a1:13:8b:f4:a5:db:a5:92:ce:4a:ac:03:
7e:b3:fe:0a:c1:dc:d6:ee:a4:c4:96:99:c4:e5:4a:
a6:be:14:77:4d:a1:05:f0:ed:0a:1b:bb:5a:53:de:
5b:ed:3c:e6:58:26:31:da:3f:a1:8f:4c:6e:a4:1f:
a3:bd:93:c8:f4:5b:5c:22:61:f7:50:58:f7:90:d2:
76:36:76:b6:e9:12:b5:34:22:b8:b7:4a:43:70:0d:
38:61:81:7c:75:76:22:2f:fb:49:97:fb:e4:1e:86:
6e:31:19:9d:02:82:31:33:29:c0:8e:2a:73:6e:2a:
56:5b:ff:c3:5c:8c:38:3d:d8:75:9d:f8:ad:6c:b4:
49:d7:58:d8:3a:fa:c0:22:00:aa:a0:f8:f3:e6:1b:
06:50:13:84:aa:53:e8:ff:87:0e:14:cc:61:60:18:
25:71:61:a3:5f:67:58:f2:ba:f3:b2:b1:cd:75:94:
43:8d:da:e7:8b:a2:0d:64:cc:ef:0e:bf:c2:17:f2:
ad:3c:2a:44:c3:55:84:65:3c:e5:03:63:e9:4d:98:
1c:25:c9:9f:66:3b:ca:7b:a4:a4:1c:3b:b3:e0:15:
49:52:8a:06:03:b5:17:00:bc:21:ef:27:70:f8:3d:
45:08:5a:0c:d6:eb:94:2d:56:fe:28:24:38:9b:af:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:ED:FA:B2:14:1D:EB:5C:60:EB:A7:76:E4:F6:15:9A:38:CD:84:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A08905B4CD3F11EF8DE374B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.91.0/24
Signature Algorithm: sha256WithRSAEncryption
90:4d:fc:93:fc:2e:74:37:93:cd:47:6e:fb:4a:61:e6:75:03:
36:87:f3:1d:71:aa:67:b7:3f:23:bb:55:68:9c:41:bf:14:f0:
87:0c:a5:9d:e8:f5:12:91:18:b6:bb:a6:df:4d:05:03:20:e5:
3c:79:e7:98:9d:71:69:22:49:59:ff:ae:ee:4a:07:82:0e:17:
37:2a:f5:9d:42:56:69:45:40:77:75:7c:14:ee:84:ba:96:80:
d8:d3:de:fe:ae:c3:39:63:3f:ab:63:84:96:22:05:45:4d:14:
6f:20:21:83:0a:2c:32:6e:38:40:36:4d:01:09:26:5b:61:3e:
21:ca:0d:8e:db:3b:01:76:d8:2c:fc:ee:1d:6b:49:ae:fc:70:
b8:48:e0:fb:43:e5:b5:74:cc:3a:80:a5:1a:c6:86:37:45:88:
67:31:34:70:ef:4d:cf:48:e0:1a:e0:80:6c:ad:28:03:17:b1:
8c:0a:a6:b8:a0:85:98:87:ff:38:fc:57:32:46:56:6c:d2:95:
60:de:ad:cc:70:42:97:0e:d8:5c:8a:0a:de:2a:b9:6d:ad:55:
9e:c2:59:de:09:70:a2:8c:96:7f:5e:61:be:23:cf:b3:da:a5:
54:5b:3c:3b:55:b1:a9:96:b0:e6:3f:33:fe:00:43:5a:9b:18:
97:e8:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:14 2025 by rpki-client