Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE1694BAC96D11EF9C03E36E762E951A.roa
File: AE1694BAC96D11EF9C03E36E762E951A.roa (raw, json)
Hash identifier: 6c10NPwrzQLGbsfOhuL5EgBVYBHUYil+I2pDXpqXFkM=
Subject key identifier: A0:1C:0F:33:6C:61:F5:B8:25:95:04:BD:20:44:AC:59:50:6B:B3:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F494
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE1694BAC96D11EF9C03E36E762E951A.roa
Signing time: Fri 03 Jan 2025 00:57:18 +0000
ROA not before: Fri 03 Jan 2025 00:00:14 +0000
ROA not after: Sat 13 Dec 2025 00:00:14 +0000
asID: 984
IP address blocks: 156.226.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62612 (0xf494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 00:00:14 2025 GMT
Not After : Dec 13 00:00:14 2025 GMT
Subject: CN=677735ee-367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:e7:ad:49:0d:1a:60:68:9e:58:3b:27:ef:
86:12:1c:f2:46:80:a3:3f:4a:cc:6f:7c:16:81:bb:
48:cc:55:c8:96:76:63:71:fb:b5:36:b5:71:76:6f:
cd:27:32:1f:0b:33:6b:a1:67:60:fd:07:22:87:ab:
03:8b:76:ef:1b:d1:01:b3:a4:42:e4:4d:81:e5:50:
b6:02:b2:4f:b9:e3:b8:4f:9b:c4:ad:f5:0b:6f:83:
05:3f:1b:5b:a5:4f:9c:bf:82:e7:64:35:8d:54:5f:
11:f3:50:a5:24:d6:f1:dd:64:52:ae:b9:9f:48:3d:
16:55:c3:7d:53:52:93:3d:60:45:4b:57:65:74:76:
e8:ca:ab:5d:47:6c:4e:41:fd:98:ad:1b:e4:a1:7a:
1e:91:19:89:16:10:a7:cd:f8:6f:86:ea:78:67:40:
1a:cd:b8:64:87:d3:67:fc:ea:26:58:fd:3f:c9:6e:
d5:92:8c:20:0b:e2:6b:8f:dd:cd:1d:4c:6f:0f:9a:
72:b3:2d:54:71:60:20:49:9a:66:c4:68:1c:be:50:
a1:88:db:57:82:2a:53:19:88:82:bf:73:82:95:39:
66:9b:38:9a:2a:13:ac:c7:7a:85:ed:69:f1:f9:05:
59:65:03:b6:1d:89:8d:5a:7f:02:be:75:5b:ae:22:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1C:0F:33:6C:61:F5:B8:25:95:04:BD:20:44:AC:59:50:6B:B3:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE1694BAC96D11EF9C03E36E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.254.0/24
Signature Algorithm: sha256WithRSAEncryption
94:56:75:73:76:d3:cf:c7:f1:76:1d:2a:c2:17:da:41:56:85:
29:98:2e:f9:85:9d:68:6f:3d:82:dc:46:f6:ff:8d:d1:2d:6b:
46:f7:d5:7c:0e:6a:7c:ac:32:0e:92:d8:e4:f2:e9:02:8a:20:
fc:ae:5a:1b:11:79:f6:96:5d:9d:38:89:4d:13:32:eb:e1:cc:
24:ef:09:4f:cd:bf:6b:f6:41:05:5f:6a:d5:6e:50:57:de:19:
e1:5d:4c:ac:cf:32:e2:c0:77:c9:8b:21:f1:e9:84:19:e2:aa:
b9:a4:1d:ca:9b:0f:80:7a:41:c2:85:4a:4f:db:6f:a6:24:c7:
57:36:58:ca:a3:df:11:81:b5:15:40:6d:4d:2d:35:dd:5e:5a:
0a:2f:ae:2b:f7:70:56:51:5b:e5:66:88:2a:c2:cb:21:68:62:
21:bc:04:c7:23:5c:e5:66:39:07:9a:c1:7a:da:f1:17:e6:4a:
ee:4a:72:86:dc:84:ea:a3:3c:23:09:8f:ef:96:b3:50:2f:d7:
20:1d:31:18:9a:12:06:9f:e7:1a:37:9a:e7:fd:b7:03:23:74:
ea:11:5a:8b:9d:a9:96:c3:f6:46:8e:5f:9d:89:b6:37:61:3a:
7c:2c:67:5e:22:df:a9:1e:49:17:99:89:de:ca:d3:fc:a1:fb:
3d:62:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:13 2025 by rpki-client