Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1CECB38D31711EF8E6DD25E762E951A.roa
File: A1CECB38D31711EF8E6DD25E762E951A.roa (raw, json)
Hash identifier: 4zXe38x6SEf9NqVCnvdbiE6oD681LmTv53BUaL/0F0w=
Subject key identifier: CE:0A:85:77:DC:E2:57:3F:0E:32:5F:96:85:D4:7C:79:50:ED:2E:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010877
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1CECB38D31711EF8E6DD25E762E951A.roa
Signing time: Wed 15 Jan 2025 08:06:32 +0000
ROA not before: Wed 15 Jan 2025 08:06:29 +0000
ROA not after: Mon 03 Jan 2028 08:06:29 +0000
asID: 17561
IP address blocks: 156.254.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67703 (0x10877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 08:06:29 2025 GMT
Not After : Jan 3 08:06:29 2028 GMT
Subject: CN=67876c88-4ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:fb:35:00:75:e1:21:72:91:7e:4c:50:13:
ea:fd:7b:0c:70:c6:b0:dc:61:02:80:25:7b:9f:e2:
ea:d1:0b:0f:7c:2c:37:72:01:a3:27:7f:6c:aa:08:
4e:0d:60:fd:d6:9b:3f:20:3b:3c:af:ac:6c:b9:8b:
0d:12:4d:ea:81:66:02:03:68:71:d7:5e:8f:54:f7:
98:7b:37:fa:b3:4b:89:cc:f7:35:a4:cb:eb:8d:2d:
69:cb:1e:1f:e5:a0:4c:6e:38:ff:af:a0:6f:a0:e6:
26:38:b3:d3:b9:d4:cc:90:68:76:2c:02:7c:d5:4e:
08:47:d8:a7:23:ae:50:b8:f5:fb:79:4c:5e:65:cc:
1c:81:06:97:15:85:40:c7:4b:ca:1f:a6:12:a8:f1:
c9:20:7d:3f:d4:e5:bb:6c:21:7e:cd:b7:8f:77:41:
64:b0:82:7c:50:64:f1:50:0d:35:e8:fa:36:ff:02:
79:06:e2:a0:ba:4d:f7:e5:1a:e4:da:17:cc:00:42:
4b:ff:c3:cf:85:8a:51:96:fd:44:c2:99:32:8e:5f:
b7:b4:4b:77:9c:d4:95:65:1b:4e:0b:a6:da:38:50:
08:a5:de:39:98:fa:b1:f8:db:32:ed:de:2d:f9:c3:
82:bc:db:08:b2:be:94:83:31:df:1f:0d:89:a0:c0:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0A:85:77:DC:E2:57:3F:0E:32:5F:96:85:D4:7C:79:50:ED:2E:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1CECB38D31711EF8E6DD25E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.81.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d8:50:e1:1f:07:f3:ec:26:da:3e:bd:16:1e:5a:ea:b5:69:
4f:09:32:ce:4f:3e:5f:b2:91:f1:44:e3:90:b4:61:aa:76:29:
a7:97:c5:c1:32:eb:78:2f:68:f6:b1:b8:02:c5:0c:56:09:94:
7a:5e:8a:ea:11:9c:88:b8:c5:64:41:1f:9c:ac:8b:15:bf:dc:
8c:44:f4:85:ec:e3:f8:aa:3a:9c:a6:4d:cb:ad:1e:cb:04:c2:
e5:5e:44:cb:dc:25:61:cb:51:f0:89:5e:cf:bc:32:5b:fb:52:
84:7e:51:f8:d8:56:e1:75:f7:8e:2f:9c:9d:02:76:3b:27:a1:
9b:04:c3:ad:a5:f6:90:5a:bc:58:8c:d2:a0:6d:29:f6:26:5b:
fe:87:51:51:d6:6b:7d:d3:ca:8b:72:cb:03:e8:01:6b:4e:d5:
e4:d8:01:36:88:ec:31:b6:0a:ec:15:62:fc:44:d3:45:ea:3a:
e3:d0:eb:c1:6a:ef:0f:14:0a:9f:6f:5d:37:fb:a8:e6:b9:61:
f1:53:c7:29:65:1e:c6:62:03:bd:a0:77:85:3c:72:cd:e6:09:
4f:e9:58:a1:0b:e9:bf:54:d7:c7:c4:9b:2c:a5:2f:5f:08:12:
51:40:53:c4:84:24:5b:d7:e8:f9:da:65:38:c3:b8:29:05:81:
dc:a7:44:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:17 2025 by rpki-client