Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5DB9AFAB2EF11EF86FC6D67762E951A.roa
File: A5DB9AFAB2EF11EF86FC6D67762E951A.roa (raw, json)
Hash identifier: phdeXpKyQOn9odv/mYiJTGI1yfL0fssis4aJpWFnp/A=
Subject key identifier: E4:2C:35:D2:75:36:D3:69:DD:B3:39:1A:0A:7A:DE:1D:84:60:C6:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DFD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5DB9AFAB2EF11EF86FC6D67762E951A.roa
Signing time: Thu 05 Dec 2024 09:59:42 +0000
ROA not before: Thu 05 Dec 2024 09:59:38 +0000
ROA not after: Sun 30 Nov 2025 09:59:38 +0000
asID: 137443
IP address blocks: 156.253.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57297 (0xdfd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 5 09:59:38 2024 GMT
Not After : Nov 30 09:59:38 2025 GMT
Subject: CN=6751798e-1685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:62:b2:0b:6e:f3:ca:b7:36:28:2b:30:0e:
c9:65:51:58:3e:27:e2:25:03:6e:94:ab:a2:1a:4c:
ea:db:ef:e0:ba:ea:de:3d:9c:82:1a:0b:30:fb:49:
2e:37:6c:3c:48:0b:3f:d5:99:7b:cc:67:7c:d2:5b:
f6:05:bc:56:9a:17:6e:70:dc:56:0c:cd:b3:c5:da:
62:38:00:34:fb:83:de:54:94:75:dc:06:2d:b3:c2:
2b:0a:45:32:6a:58:d6:f4:c0:00:c1:05:e8:bb:33:
a9:9f:55:79:5b:5d:94:0f:37:87:a1:43:34:15:e5:
68:8a:5e:15:b6:06:d5:e9:53:52:61:2e:ca:e2:4c:
2f:e0:52:43:d6:cb:6d:22:94:9c:95:d0:4a:30:44:
fe:32:fe:bd:8e:e8:01:26:24:82:56:f8:a6:66:fb:
61:fa:08:c5:0b:a6:5c:d1:50:b6:61:5c:42:7f:f2:
79:5d:7e:80:dd:22:4e:74:90:22:70:56:4f:1c:7c:
48:86:ce:98:69:38:c8:64:c0:e0:ba:93:aa:ea:b8:
5f:6c:3e:70:16:8e:9c:ae:c3:61:a3:63:23:dd:61:
36:16:50:eb:8f:c3:1a:ee:00:69:83:07:9a:a0:77:
ff:7f:0d:7f:4a:e4:ea:96:12:db:5e:ab:cd:27:75:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2C:35:D2:75:36:D3:69:DD:B3:39:1A:0A:7A:DE:1D:84:60:C6:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5DB9AFAB2EF11EF86FC6D67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.8.0/21
Signature Algorithm: sha256WithRSAEncryption
67:b1:b3:6d:7a:b0:09:1a:65:58:e1:9a:5e:45:d6:48:8b:fd:
18:c1:c2:d2:1a:63:e2:4d:09:c8:c2:12:a0:ff:9b:43:7a:d0:
15:7f:c1:f8:29:c6:3c:4f:f7:8f:f1:12:06:09:ad:68:87:d1:
c7:ff:2e:78:42:6c:59:2b:c0:49:9c:b2:6e:09:4d:25:d6:e7:
1a:1c:ce:81:e9:5b:f2:74:e6:75:2a:22:22:78:02:04:00:d7:
68:63:c3:c2:12:6c:14:c0:dc:a2:17:7b:80:c9:9b:e9:78:df:
9f:74:9f:5a:27:be:e5:0d:32:1e:0b:4e:41:2d:ef:97:92:b5:
24:94:ce:35:de:57:84:3f:ff:6c:75:21:ad:d8:3f:ad:b1:af:
75:30:79:26:0a:41:6f:0d:de:f5:bf:0b:72:ce:20:c2:46:e4:
f7:e1:e8:90:a3:e5:77:b6:68:f4:cf:cc:3a:9d:e1:e9:c7:fa:
c6:fa:7d:6f:67:b6:fe:c3:18:d2:86:57:03:65:c3:03:c7:6f:
3d:7d:47:d3:3a:3a:91:66:4b:8b:06:cf:32:6f:1f:71:01:e1:
05:d5:de:33:e9:33:ee:eb:6a:43:e9:64:0d:11:6f:ad:73:96:
96:3d:05:96:bd:8a:0a:be:50:1a:7d:a9:e0:fd:5a:e0:d3:f6:
73:31:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:03 2025 by rpki-client