Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A11B231ECDA711EFB831465F762E951A.roa
File: A11B231ECDA711EFB831465F762E951A.roa (raw, json)
Hash identifier: WiUQVmpuM8t8PKc6Tif+G5d9hqrurm8jGeoN9LoUNt0=
Subject key identifier: 0B:0F:F8:22:5F:F5:6D:B4:26:AD:A1:9B:75:BA:BD:52:2D:EF:86:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010135
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A11B231ECDA711EFB831465F762E951A.roa
Signing time: Wed 08 Jan 2025 10:02:12 +0000
ROA not before: Wed 08 Jan 2025 10:02:08 +0000
ROA not after: Sat 13 Dec 2025 10:02:08 +0000
asID: 984
IP address blocks: 156.255.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65845 (0x10135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:02:08 2025 GMT
Not After : Dec 13 10:02:08 2025 GMT
Subject: CN=677e4d24-e8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:7f:2c:f4:a6:f6:e0:b3:bc:89:67:3c:68:
bb:43:bd:57:df:d3:0d:6d:57:1f:ec:8e:47:36:2c:
05:af:83:8f:5b:0a:9a:2d:d8:5d:98:f6:f8:c5:1d:
4e:39:e1:57:43:79:42:03:ad:d3:66:57:01:81:ec:
92:a3:e7:b6:99:f4:89:78:e8:e7:f3:a6:69:32:80:
98:79:e8:eb:75:20:e6:fd:38:74:79:9c:75:fd:4c:
6a:e0:70:03:5d:dc:69:1d:ef:c4:89:b2:9b:ef:6d:
2c:74:16:c0:69:e5:ec:1f:b6:37:0a:3d:9e:49:5a:
02:f9:64:5c:36:13:d6:fc:ea:de:be:54:70:16:50:
eb:8b:fd:ef:76:6e:19:0e:84:96:c6:e3:9e:83:9b:
9d:fb:a5:73:f7:09:a4:f7:89:c8:f1:e4:d5:d2:a7:
44:3a:ab:30:33:0a:24:5e:58:42:dd:f8:03:a6:4a:
35:1d:c0:3e:54:46:dd:31:ab:b6:01:35:0a:92:87:
e5:2e:53:e5:4f:05:b1:dd:b9:45:32:db:fd:d5:a7:
76:bf:55:b4:47:a5:f2:e8:10:9f:bb:bd:66:bf:2b:
51:fa:70:60:3f:4a:3f:d1:40:e7:2e:ae:34:30:c2:
64:8a:de:69:91:a7:b6:06:b2:2e:c1:05:64:5e:37:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0F:F8:22:5F:F5:6D:B4:26:AD:A1:9B:75:BA:BD:52:2D:EF:86:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A11B231ECDA711EFB831465F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:77:fd:14:57:5f:af:6e:e9:37:9f:00:ba:81:ce:32:29:de:
9a:c4:8a:a9:68:f2:93:1c:a8:dc:af:2a:d8:77:09:56:60:a6:
6a:5e:15:53:e6:81:34:84:06:3a:fc:d2:fc:56:a5:d1:c4:24:
d0:8e:01:8d:ce:eb:07:73:91:77:02:70:31:19:f3:a5:66:43:
4e:39:f3:6c:87:69:22:ff:c4:02:74:9d:99:10:28:ad:71:e0:
d8:4c:93:32:c4:66:34:be:59:ec:f6:fd:ef:d0:21:aa:39:63:
8c:2b:3f:7b:35:9f:f1:37:e4:22:f0:16:6a:d2:ee:35:91:77:
19:34:64:36:d7:ef:f0:d1:a3:db:3d:14:d7:d9:2b:c8:db:b0:
6c:d5:da:db:88:30:1f:bc:df:6e:54:c1:d3:bf:43:35:ec:c6:
90:f5:9c:6a:a0:e3:e0:25:7f:ff:89:1e:d0:59:d1:74:30:e0:
25:0a:5a:a1:57:2a:6c:2f:a8:72:31:34:c6:cd:0b:f3:6e:77:
c4:45:e7:61:05:44:ff:16:29:a0:8e:e9:3c:6a:ae:71:48:54:
be:7a:70:a2:e4:f3:38:b6:7e:57:6e:34:63:16:d1:29:8a:a2:
75:42:1e:5a:cb:5c:be:0e:f2:5f:3d:fe:e4:c9:61:e8:c0:ad:
b7:93:d8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:39 2025 by rpki-client